-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 19 Aug 2026 11:56:46 +0200 Source: node-js-yaml Architecture: source Version: 4.2.0+~4.0.9-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1141820 Changes: node-js-yaml (4.2.0+~4.0.9-2) unstable; urgency=medium . * Team upload * Patch: replace `maxMergeSeqLength` option with `maxTotalMergeKeys` (Closes: #1141820, CVE-2026-59869) Checksums-Sha1: 02588aa370b7a7409ccf1c06a07f364e61881d01 2578 node-js-yaml_4.2.0+~4.0.9-2.dsc 1a6e6fc2dbe7244a385abbd68b54b5c35b80c2a8 85368 node-js-yaml_4.2.0+~4.0.9-2.debian.tar.xz Checksums-Sha256: c16030ff7f3907203c78a69d3743eca7b6037eeeaa5fc379d8a5537215582b51 2578 node-js-yaml_4.2.0+~4.0.9-2.dsc 8ef97712698e9ed8885d6a7233f449991603605ffb37d28e9118470478738dc8 85368 node-js-yaml_4.2.0+~4.0.9-2.debian.tar.xz Files: 326bab26b12cdcba8c49a96af2f2824f 2578 javascript optional node-js-yaml_4.2.0+~4.0.9-2.dsc da28ff5230ec8fc5fb191fbe03de231c 85368 javascript optional node-js-yaml_4.2.0+~4.0.9-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmqFfmgACgkQ9tdMp8mZ 7ul3xRAAkzdt94EW/EGTZZ1KfyH5c8OODkfHD6eNqLDRJyM1hhANR4yjOq5wZJg5 Skg6TG0638Thq6NMTsS3OY2jBEmobNAfPO4ouPn2csbh0NctlHiBIO5IPLnRqq10 keYYNBS+HVKJa/4I4ByaCnIPgGU/OdpRwbjA40xwNpcSwoFzXKs3ABzDzJ+l4VIW xAYZ3GdGzT15T4Zm7TSIcfcxHI8LHdQrhhLaOZD4IcyaUfOJZLU+1/+tv20UdoMM x2HGNM162ICiFOFsjHb7GleO3utQmhyTD9tbecfbPiIZWcm5QepbeHMbv8fZa/S3 sjpDF4XF09rtO3+Zo061734yr6UnY1LBzLmEq4XDJlcxgaJHBu5L8FIkMeFkH5q2 ySL6Gxh/nKDFpbTc66TdRj+5McEhqIdenxE9z5BlGo/HfWpSUdyx544/tpUd6MuL 9SJ9OxCJ0oe/SY7RDnI/BRQYEyOZncbnXNoDORRwhGbvRNV3uGuj88SYRIObc9RY gzj1NM8LWKKE3QavFYnDR3BoynmkZT4+tKIsGZRFGAmmxev0Lo1JhNs+gKkVkD87 BqAB4uk0fs5RFl3PxjDkL0kd0DXoRKcIhPw4gcWAJKbKh4mRfhI6iS6gbwucI/kC NrB8ZghIu97FiB0kwFcQjgsfpo/NLkUfT99cbc5GqZvcarMPxX0= =PZQW -----END PGP SIGNATURE-----