-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 20 Feb 2021 15:04:37 -0500
Source: jquery
Binary: libjs-jquery
Architecture: source
Version: 3.1.1-2+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Roberto C. Sánchez <roberto@debian.org>
Description:
libjs-jquery - JavaScript library for dynamic web applications
Changes:
jquery (3.1.1-2+deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* Prevent untrusted code execution when passing untrusted HTML to DOM
manipulation methods. (CVE-2020-11022)
* Prevent untrusted code execution when passing HTML containing <option>
elements to DOM manipulation methods. (CVE-2020-11023)
Checksums-Sha1:
32be3f0a4cd8dc5faa65a660e1876e36875a9038 2142 jquery_3.1.1-2+deb9u2.dsc
72912ce0eef6c4bdd9547e020a86dda0341b1d44 23832 jquery_3.1.1-2+deb9u2.debian.tar.xz
54df2bbb95bbbf0ca8e7c9028faf74f1e13ec752 7852 jquery_3.1.1-2+deb9u2_amd64.buildinfo
Checksums-Sha256:
a625a521f0e4824dfb979e7edc4a676ae2de7f701e0ff25e0060bd0853aa03f8 2142 jquery_3.1.1-2+deb9u2.dsc
3774263f8a772bb0638b8e8c49fa65b746ebd23c5a5c5ec16683b9c016756848 23832 jquery_3.1.1-2+deb9u2.debian.tar.xz
eaff431b10c58445cf492d5ffe81025449e7ef6544aff7d1b989afad4ef0301d 7852 jquery_3.1.1-2+deb9u2_amd64.buildinfo
Files:
dcd3ce2c0543e61660215be4c885ffd5 2142 web optional jquery_3.1.1-2+deb9u2.dsc
0238e4255f675826abb6f79b9d2e3698 23832 web optional jquery_3.1.1-2+deb9u2.debian.tar.xz
9fdf9ca82e9ef0f75ea773505b863fed 7852 web optional jquery_3.1.1-2+deb9u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEIYZ1DR4ae5UL01q7ldFmTdL1kUIFAmAy1ycACgkQldFmTdL1
kUL/PhAAvrxU3i5vZV4Mu0KWtYrdd1Gx0T+2HPo3gtRaeDr6WWqkyCRK2H4zHhGr
Zv9k6OZ1xT0UIJDKMBR6nzOp4tFwKhEwT7HTROTRLFJqrp1mlOzDTsAEjFAyvhwl
Gs5x1n/0F9ATwfq52C1LA076ebuPbjVlutic1mmg9KEq/5X1yHApsCSXhaNUKvtk
5a/w6fei3zisRAM7+IbouDzu9E1J75qVZFpLwtuV87E9IyTZN4hziD1Qe3DMlioq
+Y+ZiMOANxZgqa2EYTVI6Ony45s5evj1DyiRrFydcRjsx9wlqbSMiYi0yfkO095S
Xa0wxJNhhcx/efsisiKHvZCw0ASVunmz8EnUKb4agVzqCq6hkEs5ibx3v7Y77IQT
LsJgSKqh91ug4FjtHVdYnmjLQFynIi0WlO3vqcMOkswI9Otc8W6jISkwREv4VzP2
mYko3HOJVHq4uQTFOCtOmgqlcAXdUgAws3X/u3MfP0u0neeGbW4ensJkyI7PNJGH
QOkVO9w2NOKQ/7q/o0XnncFtVRauj5zNKsG17cg+H6biW5Adciy6Jl8l3g3pzSk5
HQ3aWzVFawQFY5nCUnNwdMhMWymTYRGACuO7JdLuy2KjQvNH8C/PYuE2pNTRhnrY
9vRvDg6nzVUjhyfyQQxtpyvFCOcVU/YN43+W2EZ7qw8xopmZ9a8=
=II7W
-----END PGP SIGNATURE-----
