-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 09 Mar 2021 14:42:16 -0500 Source: jquery Architecture: source Version: 3.3.1~dfsg-3+deb10u1 Distribution: buster Urgency: high Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Roberto C. Sánchez <roberto@debian.org> Changes: jquery (3.3.1~dfsg-3+deb10u1) buster; urgency=high . * Non-maintainer upload by the LTS Team. * Prevent untrusted code execution when passing untrusted HTML to DOM manipulation methods. (CVE-2020-11022) * Prevent untrusted code execution when passing HTML containing <option> elements to DOM manipulation methods. (CVE-2020-11023) Checksums-Sha1: 3625d4287ccbd3c38501c9c2e5a674b7e899e2c9 2102 jquery_3.3.1~dfsg-3+deb10u1.dsc 819e2f4ade197b108c57d6b893f5eb24578f387f 258688 jquery_3.3.1~dfsg.orig.tar.xz ef01f1824a98d1803dbcaadea39cf6b1f11450c9 28056 jquery_3.3.1~dfsg-3+deb10u1.debian.tar.xz 085234d2800f3b3f4602d7dce23017c5b299a237 7219 jquery_3.3.1~dfsg-3+deb10u1_amd64.buildinfo Checksums-Sha256: 12bf09b59222bd900e2b10759df278c15d7c82c7434a3513759b06418b0d464e 2102 jquery_3.3.1~dfsg-3+deb10u1.dsc 0b668291a27a8d716b595d80972197a799d837e016b1312383961cb39ee7be1d 258688 jquery_3.3.1~dfsg.orig.tar.xz 24dff1effea0ae7c05973874fc41cd0637c103d972a830a61cb20dd7df474d51 28056 jquery_3.3.1~dfsg-3+deb10u1.debian.tar.xz 7e26bdd27ede5faa5b13f69363ac9fe6e21285363b16863329b4432c742fcc42 7219 jquery_3.3.1~dfsg-3+deb10u1_amd64.buildinfo Files: ecd66e5b9ccf84d499c2e3e0e7bc2f85 2102 javascript optional jquery_3.3.1~dfsg-3+deb10u1.dsc 0d12d07192850117dc7362124fceca05 258688 javascript optional jquery_3.3.1~dfsg.orig.tar.xz c4382080d83604a27e645fcc55a5ba47 28056 javascript optional jquery_3.3.1~dfsg-3+deb10u1.debian.tar.xz af9764a420b211924896a7a989c8f385 7219 javascript optional jquery_3.3.1~dfsg-3+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIYZ1DR4ae5UL01q7ldFmTdL1kUIFAmBH/zMACgkQldFmTdL1 kUKoRA//XLWpQ78zQj+cZG3AVFxd2JeZnEvVv9HhLTKXuZ/Hp9VFoPSPkPYK10Qy EDHKjvWq9dnENeLvH2ka8nM6A3SWHiKg90x/Bsu15jZzdV02c1G3GE03YUUH8UjN YylgWA/bPRQjuTb7gvQqLj8p6FAnZ9ZktG1PPydkroKKwEZ5kEEeRDSN/Ou+Wrk4 pmfHeqVVqk17Nsza9hGBlUBetUnhTjaFJPCFwJcnUrOAhfEB2fE3xEbTqYzD6XYT MICMI3afpUE80L8EziLY2N4lNVn6aRheWJEJtf6/SzYFD6RQSdOjALfLvzO3MUvG fGxhRbDpbVk2Ojw0tPywKKXzqJmvmDq0bbeC+66Brs7fE4Cc5sOT9QBppuCLaS+N LZqsDR4ihopMiAvcO98NyQrdm13nRHS/MVeCHps8riytXLtuREDHXD3W+On0X1jg lS4t4XU+UkmihaUcxBb84k3EDaXh8As8Kd+PEt9EyD0S+YFg2Ncd4tbnLpLjgPlt nBDTxNr0/sEQuW0vxtyT+0v/QIr6OS/Hx/s/IUeB+2hvp9zi2kQeW9GGGxT6KxmD MeZaekvNAT6v+8zGe8B7wkJUNfirrYhOnFv9vp3jpo5qpBGBbeBAlD3QVAp2UWud 9V8PjaUYNERnne5vFAfL5eVxqqtAiaVTpCairP/IvGvNJQ5AiCQ= =RxAx -----END PGP SIGNATURE-----