node-postcss (8.2.1+~cs5.3.23-8+deb11u1) bullseye-security; urgency=medium
* Team upload
* Fix CVE-2021-23566: Nanoid was vulnerable to Information
Exposure via the valueOf() function which allows to
reproduce the last id generated.
* Fix CVE-2023-44270 (Closes: #1053282)
The vulnerability affects linters
using PostCSS to parse external untrusted CSS.
An attacker can prepare CSS in such a way that it will
contains parts parsed by PostCSS as a CSS comment.
After processing by PostCSS, it will be included in
the PostCSS output in CSS nodes (rules, properties)
despite being included in a comment.
* Fix CVE-2024-55565:
nanoid (aka Nano ID) a subcomponent of this package
mishandles non-integer values that could lead to DoS
by infinite loop.
-- Bastien Roucariès <rouca@debian.org> Thu, 26 Dec 2024 21:48:59 +0000
node-postcss (8.2.1+~cs5.3.23-8) unstable; urgency=medium
* Team upload
* Add missing `set -e` in security test
-- Yadd <yadd@debian.org> Thu, 29 Apr 2021 10:44:29 +0200
node-postcss (8.2.1+~cs5.3.23-7) unstable; urgency=medium
* Team upload
* Fix ReDoS (Closes: CVE-2021-23382)
* Add autopkgtest files for CVE-2021-23368 and CVE-2021-23382
-- Yadd <yadd@debian.org> Thu, 29 Apr 2021 10:24:48 +0200
node-postcss (8.2.1+~cs5.3.23-6) unstable; urgency=medium
* Team upload
* Fix ReDoS vulnerability (Closes: CVE-2021-23368)
-- Yadd <yadd@debian.org> Wed, 14 Apr 2021 21:43:54 +0200
node-postcss (8.2.1+~cs5.3.23-5) unstable; urgency=medium
* Update Breaks: node-css-loader (<< 5.0.1+~cs14.0.5-1~)
-- Pirate Praveen <praveen@debian.org> Wed, 30 Dec 2020 13:43:52 +0530
node-postcss (8.2.1+~cs5.3.23-4) unstable; urgency=medium
* Add Breaks: node-postcss-reporter (<< 7.0~)
-- Pirate Praveen <praveen@debian.org> Sat, 26 Dec 2020 20:33:28 +0530
node-postcss (8.2.1+~cs5.3.23-3) unstable; urgency=medium
* Add Breaks node-autoprefixer (<< 10.0~)
-- Pirate Praveen <praveen@debian.org> Sat, 26 Dec 2020 17:20:13 +0530
node-postcss (8.2.1+~cs5.3.23-2) unstable; urgency=medium
* Add Breaks against packages that need a newver version
* Bump Standards-Version to 4.5.1 (no changes needed)
-- Pirate Praveen <praveen@debian.org> Thu, 24 Dec 2020 22:23:01 +0530
node-postcss (8.2.1+~cs5.3.23-1) experimental; urgency=medium
* Use ctype=nodejs and checksum options for components
* New upstream version 8.2.1+~cs5.3.23
-- Pirate Praveen <praveen@debian.org> Sat, 19 Dec 2020 22:28:27 +0530
node-postcss (8.0.5-1) experimental; urgency=medium
* New upstream version 8.0.5
* Upstream supports node without transpiling so remove build steps
* Drop unused embedded modules
* Update copyright and dependencies
* Embed colorette, line-column and nanoid
* Install embedded modules in nodejs root
-- Pirate Praveen <praveen@debian.org> Mon, 28 Sep 2020 14:46:25 +0530
node-postcss (7.0.34-1) unstable; urgency=medium
* New upstream version 7.0.34
-- Pirate Praveen <praveen@debian.org> Sun, 20 Sep 2020 02:31:47 +0530
node-postcss (7.0.17-4) unstable; urgency=medium
* Revert "Replace add-module-exports plugin with babel 7 version"
-- Pirate Praveen <praveen@debian.org> Sun, 10 May 2020 13:37:34 +0530
node-postcss (7.0.17-3) unstable; urgency=medium
* Replace add-module-exports plugin with babel 7 version
(@babel/plugin-proposal-export-default-from)
-- Pirate Praveen <praveen@debian.org> Sat, 09 May 2020 21:52:34 +0530
node-postcss (7.0.17-2) unstable; urgency=medium
* Drop node-babel-plugin-precompile-charcodes from build deps
-- Pirate Praveen <praveen@debian.org> Fri, 08 May 2020 19:07:53 +0530
node-postcss (7.0.17-1) unstable; urgency=medium
* New upstream version 7.0.17
* Build with babel 7 (Closes: #958777, #959616)
* Add work around to replace gulp:compile with babeljs-7 command
-- Pirate Praveen <praveen@debian.org> Mon, 04 May 2020 14:02:22 +0530
node-postcss (6.0.23-3) unstable; urgency=medium
* Team upload
* Replace deprecated run-sequence by gulp.series()
-- Xavier Guimard <yadd@debian.org> Mon, 23 Mar 2020 15:30:29 +0100
node-postcss (6.0.23-2) unstable; urgency=medium
* Team upload
* Bump debhelper compatibility level to 12
* Declare compliance with policy 4.5.0
* Add "Rules-Requires-Root: no"
* Add debian/gbp.conf
* Add upstream/metadata
* Use pkg-js-tools auto install
* Fix build for gulp 4 (Closes: #954708, #929811)
* Update copyright
-- Xavier Guimard <yadd@debian.org> Mon, 23 Mar 2020 08:55:44 +0100
node-postcss (6.0.23-1) unstable; urgency=medium
* New upstream version 6.0.23
* Use salsa.debian.org in Vcs-* fields
* Bump Standards-Version to 4.2.1 (no changes needed)
* Bump debhelper compatibility level to 11
-- Pirate Praveen <praveen@debian.org> Sat, 10 Nov 2018 20:55:01 +0530
node-postcss (6.0.16-1) unstable; urgency=medium
* New upstream release
* Embed new build dependencies
* Use gulp directly to build
-- Pirate Praveen <praveen@debian.org> Fri, 19 Jan 2018 17:32:23 +0530
node-postcss (6.0.11-2) unstable; urgency=medium
* Move to main, all dependencies are in archive now
* babel command is now babeljs
-- Pirate Praveen <praveen@debian.org> Thu, 19 Oct 2017 22:30:06 +0530
node-postcss (6.0.11-1) unstable; urgency=low
* Initial release (Closes: #874668)
-- Pirate Praveen <praveen@debian.org> Fri, 08 Sep 2017 20:19:05 +0530