-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 Mar 2020 06:18:23 +0100 Source: dojo Architecture: source Version: 1.14.2+dfsg1-1+deb10u2 Distribution: buster Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 953585 953587 Changes: dojo (1.14.2+dfsg1-1+deb10u2) buster; urgency=medium . * Team upload * Fix prototype pollution in deepCopy method (Closes: #953585, CVE-2020-5258) * Fix Prototype Pollution in jqMix method (Closes: #953587, CVE-2020-5259) Checksums-Sha1: 82adffedac4c6148bedd12d1fb900bb19a2da9f1 2411 dojo_1.14.2+dfsg1-1+deb10u2.dsc 19db452856e5bebdab4007b116ba99a72ac8c3fb 16128 dojo_1.14.2+dfsg1-1+deb10u2.debian.tar.xz Checksums-Sha256: 74ee0198ce25303ce1ee9164f2d3c27f12aa1a375d71504e2f6decf453530ef3 2411 dojo_1.14.2+dfsg1-1+deb10u2.dsc ae8720a69c0868397234b4759b49f1481effb30fc20efd919f7308f51839dd4c 16128 dojo_1.14.2+dfsg1-1+deb10u2.debian.tar.xz Files: 3df7f976716c88147796f8808e47124b 2411 javascript optional dojo_1.14.2+dfsg1-1+deb10u2.dsc ef5fb1eae4116c1e560ccf517bfa2928 16128 javascript optional dojo_1.14.2+dfsg1-1+deb10u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl8j3+0ACgkQ9tdMp8mZ 7ukx1A//fvmfMkvmb5aiYHhC7zb7aFIQK3tE4G83iVmfpNnqB7XB+o+be7QHsZDK hKv88vtkZlJ1KaFiY0MnTQdkxr8K0fQ0QXHcEJSveJ5YMHy2sC5GeZf7Z116rVjj 53jQ6upd9ccGo2WYicNStEqJ2O/lYAX0MpUXg3oIcGEQ51nydyrEn1bA4+UwjXC5 SGRRAkeFKOGLjMBN2NV6qzc+sC3oC7vJuv2il3OLCPK4l03+ev/YwK5xEYKEnvIR xpkc8aVBdoAkmLyh+x4212Fz+OIvVULYToyAEaEB+YYzoh8FfqfBUYuFxRopUALf FRDksLSJIBtiJVEwOwJ4zKzRnAoh2wxpUrf54X//ABFSY6mcLph+c8xPAMrAIpCN BCNt68fcpgIgDvpfaY8DLYVtOcnifr6hIJAiF3Xnvs2Xi+r/3UAidBfnyEuoohXL Lz/Wsmo+86dgVGVkZQdeBfovE7QlbStu9SmLahglI5w8XI9HshKlbKznfyOX5tvH XkrZIC28btjKIVAUPz12cWTChsI7WAwof9Pvpmgt3yORxFTXhYoIdYZe5u5ztSpH fB1p8h5kVgB7H6Bw1/d08Ef39rIezBWtAayKjiMISDi4CUOASZWy7/8WxC9DS1pv gd4tOocX18DUg6Wiiv9jwSKs2HXF5T1MH2LtgpMFfzPBCzXMXDw= =Ok8B -----END PGP SIGNATURE-----