Your message dated Tue, 19 May 2020 19:33:11 +0000
with message-id <e1jb7zd-0009f3...@fasolo.debian.org>
and subject line Bug#960283: fixed in node-dot-prop 4.1.1-1+deb10u2
has caused the Debian Bug report #960283,
regarding npm says 'pathArray is not defined' when I try to use it from
buster-backports
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
960283: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960283
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: npm
Version: 6.14.3+ds-1~bpo10+1
Severity: normal
Hi! I tried to use npm from buster-backports. Actually I wanted to
report another bug, but desided to check if it is fixed in backports.
But found a new one.
So I am running a command
# npm install matrix-appservice-irc --global
and get
npm ERR! pathArray is not defined
npm ERR! A complete log of this run can be found in:
npm ERR! /root/.npm/_logs/2020-05-11T14_11_32_344Z-debug.log
log file says:
0 info it worked if it ends with ok
1 verbose cli [ '/usr/bin/node',
1 verbose cli '/usr/bin/npm',
1 verbose cli 'install',
1 verbose cli 'matrix-appservice-irc',
1 verbose cli '--global' ]
2 info using npm@6.14.3
3 info using node@v10.19.0
4 verbose stack ReferenceError: pathArray is not defined
4 verbose stack at Object.get (/usr/lib/nodejs/dot-prop/index.js:40:3)
4 verbose stack at Configstore.get
(/usr/lib/nodejs/configstore/index.js:70:18)
4 verbose stack at UpdateNotifier.check
(/usr/share/npm/node_modules/update-notifier/index.js:78:16)
4 verbose stack at module.exports.options
(/usr/share/npm/node_modules/update-notifier/index.js:151:17)
4 verbose stack at EventEmitter.<anonymous>
(/usr/share/npm/bin/npm-cli.js:85:48)
4 verbose stack at process._tickCallback
(internal/process/next_tick.js:61:11)
5 verbose cwd /
6 verbose Linux 4.19.0-6-amd64
7 verbose argv "/usr/bin/node" "/usr/bin/npm" "install" "matrix-appservice-irc"
"--global"
8 verbose node v10.19.0
9 verbose npm v6.14.3
10 error pathArray is not defined
11 verbose exit [ 1, true ]
I do not know anything conserning npm, I do not understand why it fails,
so I am just reporting this behaviour
-- System Information:
Debian Release: 10.3
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-6-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages npm depends on:
ii ca-certificates 20190110
ii node-abbrev 1.1.1-1
ii node-ajv 6.10.2-1~bpo10+1
ii node-ansi 0.3.0-3
ii node-ansi-regex 3.0.0-1
ii node-ansi-styles 3.2.1-1
ii node-ansistyles 0.1.3-1
ii node-aproba 1.2.0-1
ii node-archy 1.0.0-2
ii node-are-we-there-yet 1.1.4-1
ii node-asap 2.0.6-1
ii node-asn1 0.2.3-1
ii node-assert-plus 1.0.0-1
ii node-asynckit 0.4.0-2
ii node-aws-sign2 0.7.1-1
ii node-aws4 1.8.0-1
ii node-balanced-match 0.4.2-1
ii node-bcrypt-pbkdf 1.0.1-1
ii node-bl 1.1.2-1
ii node-bluebird 3.5.1+dfsg2-2
ii node-boxen 1.2.2-1
ii node-brace-expansion 1.1.8-1
ii node-builtin-modules 3.0.0-1
ii node-builtins 1.0.3-1
ii node-cacache 11.3.2-2
ii node-call-limit 1.1.0-1
ii node-camelcase 5.0.0-1
ii node-caseless 0.12.0-1
ii node-chalk 2.4.2-1~bpo10+1
ii node-chownr 1.1.1-1
ii node-ci-info 1.1.2-1
ii node-cli-boxes 1.0.0-1
ii node-cliui 4.1.0-1
ii node-clone 2.1.2-1
ii node-co 4.6.0-1
ii node-color-convert 1.9.0-3
ii node-color-name 1.1.3-1
ii node-colors 1.1.2-1
ii node-columnify 1.5.4-1
ii node-combined-stream 1.0.7-1
ii node-concat-map 0.0.1-1
ii node-concat-stream 1.6.2-1
ii node-config-chain 1.1.11-1
ii node-configstore 3.1.1-2
ii node-console-control-strings 1.1.0-1
ii node-copy-concurrently 1.0.5-4
ii node-core-util-is 1.0.2-1
ii node-cross-spawn 5.1.0-2
ii node-crypto-random-string 1.0.0-1
ii node-cyclist 1.0.1-2
ii node-dashdash 1.14.1-2
ii node-debug 3.1.0-2
ii node-decamelize 1.2.0-1
ii node-deep-extend 0.4.1-2
ii node-defaults 1.0.3-1
ii node-define-properties 1.1.3-1~bpo10+1
ii node-delayed-stream 0.0.5-1
ii node-delegates 1.0.0-1
ii node-detect-indent 5.0.0-1
ii node-detect-newline 2.1.0-1
ii node-dot-prop 4.1.1-1+deb10u1
ii node-duplexer3 0.1.4-4
ii node-duplexify 3.6.1-1
ii node-ecc-jsbn 0.1.1-1
ii node-editor 1.0.0-1
ii node-encoding 0.1.12-2
ii node-end-of-stream 1.4.1-1
ii node-err-code 1.1.2+dfsg-1
ii node-errno 0.1.4-1
ii node-es6-promise 4.2.5-2
ii node-escape-string-regexp 1.0.5-1
ii node-execa 0.10.0+dfsg-1
ii node-extend 3.0.2-1
ii node-extsprintf 1.3.0-1
ii node-fast-deep-equal 1.0.0-1
ii node-find-up 2.1.0-1
ii node-flush-write-stream 1.0.3-1
ii node-forever-agent 0.6.1-1
ii node-form-data 2.3.2-2
ii node-from2 2.3.0-1
ii node-fs-vacuum 1.2.10-2
ii node-fs-write-stream-atomic 1.0.10-4
ii node-fs.realpath 1.0.0-1
ii node-function-bind 1.1.1+ds-2
ii node-gauge 2.7.4-1
ii node-genfun 4.0.1-1
ii node-get-caller-file 1.0.2-1
ii node-getpass 0.1.7-1
ii node-glob 7.1.3-2
ii node-got 7.1.0-1
ii node-graceful-fs 4.1.11-1
ii node-gyp 6.1.0-3~bpo10+1
ii node-har-schema 2.0.0-2~bpo10+1
ii node-har-validator 5.1.3-1~bpo10+1
ii node-has-flag 2.0.0-1
ii node-has-unicode 2.0.1-2
ii node-hosted-git-info 2.7.1-1
ii node-http-signature 1.2.0-1
ii node-iconv-lite 0.4.13-2
ii node-iferr 1.0.2-1
ii node-import-lazy 3.0.0.REALLY.2.1.0-1
ii node-imurmurhash 0.1.4-1
ii node-inflight 1.0.6-1
ii node-inherits 2.0.3-1
ii node-ini 1.3.5-1
ii node-invert-kv 1.0.0-1
ii node-ip 1.1.5-3
ii node-ip-regex 3.0.0-1
ii node-is-npm 1.0.0-1
ii node-is-obj 1.0.1-2
ii node-is-path-inside 1.0.0-1
ii node-is-retry-allowed 1.1.0-1
ii node-is-stream 1.1.0-1
ii node-is-typedarray 1.0.0-2
ii node-isarray 2.0.4-1
ii node-isexe 2.0.0-4
ii node-isstream 0.1.2+dfsg-1
ii node-jsbn 1.1.0-1
ii node-json-parse-better-errors 1.0.2-2
ii node-json-schema 0.2.3-1
ii node-json-schema-traverse 0.3.1-1
ii node-json-stringify-safe 5.0.1-1
ii node-jsonparse 1.3.1-6
ii node-jsonstream 1.3.2-1
ii node-jsprim 1.4.0-1
ii node-latest-version 3.1.0-1
ii node-lazy-property 1.0.0-3
ii node-lcid 1.0.0-1
ii node-libnpx 10.2.0+repack-1
ii node-locate-path 2.0.0-1
ii node-lockfile 1.0.4-1
ii node-lodash 4.17.15+dfsg-2~bpo10+1
ii node-lowercase-keys 1.0.0-2
ii node-lru-cache 5.1.1-4
ii node-make-dir 1.0.0-1
ii node-mem 1.1.0-1
ii node-mime 2.4.0-1
ii node-mime-types 2.1.21-1
ii node-mimic-fn 1.1.0-1
ii node-minimatch 3.0.4-3
ii node-minimist 1.2.0-1
ii node-mississippi 3.0.0-1
ii node-mkdirp 0.5.1-1
ii node-move-concurrently 1.0.1-2
ii node-ms 2.1.1-1
ii node-mute-stream 0.0.8-1
ii node-nopt 3.0.6-3
ii node-normalize-package-data 2.4.0-1
ii node-npm-bundled 1.0.3-1
ii node-npm-package-arg 6.1.1-1~bpo10+1
ii node-npmlog 4.1.2-1
ii node-number-is-nan 1.0.0-1
ii node-oauth-sign 0.9.0-1
ii node-object-assign 4.1.1-2
ii node-once 1.4.0-3
ii node-opener 1.4.3-1
ii node-os-locale 2.0.0-1
ii node-os-tmpdir 1.0.2-1
ii node-osenv 0.1.5-1
ii node-p-finally 1.0.0-2
ii node-p-is-promise 1.1.0-1
ii node-p-limit 1.1.0-1
ii node-p-locate 2.0.0-1
ii node-package-json 4.0.1-1
ii node-parallel-transform 1.1.0-2
ii node-path-exists 3.0.0-1
ii node-path-is-absolute 1.0.0-1
ii node-path-is-inside 1.0.2-1
ii node-performance-now 2.1.0+debian-1
ii node-pify 3.0.0-1
ii node-prepend-http 2.0.0-1
ii node-process-nextick-args 2.0.0-1
ii node-promise-inflight 1.0.1-1
ii node-promise-retry 1.1.1-2
ii node-promzard 0.3.0-1
ii node-proto-list 1.2.4-1
ii node-prr 1.0.1-1
ii node-pseudomap 1.0.2-1
ii node-psl 1.7.0+ds-1~bpo10+1
ii node-pump 3.0.0-1
ii node-pumpify 1.5.1-1
ii node-punycode 2.1.1-2
ii node-qs 6.5.2-1
ii node-qw 1.0.1-1
ii node-rc 1.1.6-2
ii node-read 1.0.7-1
ii node-read-package-json 2.0.13-1
ii node-readable-stream 2.3.6-1
ii node-registry-auth-token 3.3.1-1
ii node-registry-url 3.1.0-1
ii node-request 2.88.1-2
ii node-require-directory 2.1.1-1
ii node-require-main-filename 1.0.1-1
ii node-resolve-from 4.0.0-1
ii node-retry 0.10.1-1
ii node-rimraf 2.6.2-1
ii node-run-queue 1.0.3-1
ii node-safe-buffer 5.1.2-1
ii node-semver 7.1.1-2~bpo10+1
ii node-semver-diff 2.1.0-2
ii node-set-blocking 2.0.0-1
ii node-sha 2.0.1-1
ii node-shebang-command 1.2.0-1
ii node-shebang-regex 2.0.0-1
ii node-signal-exit 3.0.2-1
ii node-slash 1.0.0-1
ii node-slide 1.1.6-2
ii node-sorted-object 2.0.1-1
ii node-spdx-correct 1.0.2-1
ii node-spdx-exceptions 2.0.0-1
ii node-spdx-expression-parse 1.0.4-1
ii node-spdx-license-ids 1.2.2-1
ii node-sshpk 1.13.1+dfsg-2
ii node-ssri 5.2.4-2
ii node-stream-each 1.2.2-2
ii node-stream-iterate 1.2.0-4
ii node-stream-shift 1.0.0-1
ii node-strict-uri-encode 2.0.0-1
ii node-string-decoder 1.2.0-1
ii node-string-width 2.1.1-1
ii node-strip-ansi 4.0.0-1
ii node-strip-eof 1.0.0-2
ii node-strip-json-comments 2.0.1-2
ii node-supports-color 6.1.0-2~bpo10+1
ii node-tar 4.4.6+ds1-3
ii node-term-size 1.2.0+dfsg-2
ii node-text-table 0.2.0-2
ii node-through 2.3.8-1
ii node-through2 2.0.5-2
ii node-timed-out 4.0.1-4
ii node-tough-cookie 2.3.4+dfsg-1
ii node-tunnel-agent 0.6.1-1
ii node-tweetnacl 0.14.5+dfsg-3
ii node-typedarray 0.0.6-1
ii node-uid-number 0.0.6-1
ii node-unique-filename 1.1.0+ds-2
ii node-unique-string 1.0.0-1
ii node-unpipe 1.0.0-1
ii node-url-parse-lax 1.0.0-1
ii node-util-deprecate 1.0.2-1
ii node-uuid 3.3.2-2
ii node-validate-npm-package-name 3.0.0-1
ii node-verror 1.10.0-1
ii node-wcwidth.js 1.0.0-1
ii node-which 1.3.0-2
ii node-which-module 2.0.0-1
ii node-wide-align 1.1.0-1
ii node-widest-line 1.2.2-1
ii node-wrap-ansi 4.0.0-1
ii node-wrappy 1.0.2-1
ii node-write-file-atomic 2.3.0-1
ii node-xdg-basedir 3.0.0-1
ii node-xtend 4.0.1-2
ii node-y18n 3.2.1-2
ii node-yallist 3.0.3-1
ii node-yargs 10.0.3-2
ii node-yargs-parser 11.1.1-1+deb10u1
ii nodejs 10.19.0~dfsg1-1
npm recommends no packages.
npm suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: node-dot-prop
Source-Version: 4.1.1-1+deb10u2
Done: Xavier Guimard <y...@debian.org>
We believe that the bug you reported is fixed in the latest version of
node-dot-prop, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 960...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Xavier Guimard <y...@debian.org> (supplier of updated node-dot-prop package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 May 2020 09:42:34 +0200
Source: node-dot-prop
Architecture: source
Version: 4.1.1-1+deb10u2
Distribution: buster
Urgency: medium
Maintainer: Debian Javascript Maintainers
<pkg-javascript-de...@lists.alioth.debian.org>
Changed-By: Xavier Guimard <y...@debian.org>
Closes: 960283
Changes:
node-dot-prop (4.1.1-1+deb10u2) buster; urgency=medium
.
* Fix regression introduced in CVE-2020-8116 fix (Closes: #960283)
Checksums-Sha1:
30135beeb15d5675d40e49e1892ec0a37461f1b4 2071 node-dot-prop_4.1.1-1+deb10u2.dsc
1caced1543c1d8100e5841ba2d1fc341647f607a 3064
node-dot-prop_4.1.1-1+deb10u2.debian.tar.xz
Checksums-Sha256:
39aa443c0d8face167fc624a8ee8e7d1dbd2fdda070bd30d090b1c7e1eaeb424 2071
node-dot-prop_4.1.1-1+deb10u2.dsc
cce49d8269f2514505e1b094f8380accc817baa1bc2fba0e6e8b988abac22e67 3064
node-dot-prop_4.1.1-1+deb10u2.debian.tar.xz
Files:
e1585fa1d136b214f286f14504877682 2071 web optional
node-dot-prop_4.1.1-1+deb10u2.dsc
9bdeca6a2c20d992a0ebaa0ee592fecd 3064 web optional
node-dot-prop_4.1.1-1+deb10u2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=rVne
-----END PGP SIGNATURE-----
--- End Message ---
