-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Oct 2024 11:46:49 -0400 Source: mozjs128 Built-For-Profiles: noudeb Architecture: source Version: 128.3.0-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Jeremy Bícha <jbicha@ubuntu.com> Launchpad-Bugs-Fixed: 2083344 Changes: mozjs128 (128.3.0-1) unstable; urgency=high . * New upstream release (LP: #2083344) - CVE-2024-9396 Potential memory corruption when cloning certain objects - CVE-2024-9400 Potential memory corruption during JIT compilation - CVE-2024-9402 Memory safety bugs * Remove libatomic patch applied in new release * Revert "Add -latomic to LDFLAGS to try to fix armel build" Checksums-Sha1: a88114d0e4bddd0e3a161b91e68d9c5e2f5815ad 2387 mozjs128_128.3.0-1.dsc a5fd8c712371281f07fe8c23a57672f94ea7cd39 157101508 mozjs128_128.3.0.orig.tar.xz 85d1a1759b553ae210209ab7ec381b8009e4d7f7 66444 mozjs128_128.3.0-1.debian.tar.xz ddf771085b769ee2c4e8c408309bfa065207652c 8247 mozjs128_128.3.0-1_source.buildinfo Checksums-Sha256: a01cbd53d46f265c8f1b6184bdbeb87a8c6023f4bc85ec8645430a20cdf7ab11 2387 mozjs128_128.3.0-1.dsc 59235ef622c324c6eef6d4e89f31bb07973e44b67a0f0a62fd93439ae5792093 157101508 mozjs128_128.3.0.orig.tar.xz e203cb97b59138d2670c98e60f6fc9b571ec9413986262f0a98a52561234ab91 66444 mozjs128_128.3.0-1.debian.tar.xz ad2ec05bc248e07acb4eb852c0b53afa29f6e7eb614c94deb85bba9e82daec07 8247 mozjs128_128.3.0-1_source.buildinfo Files: 8d46a60f4e954e244b9e9708d040aeee 2387 libs optional mozjs128_128.3.0-1.dsc b5df2cefde7aeb7562f722e64b99d7ac 157101508 libs optional mozjs128_128.3.0.orig.tar.xz d43e07f57139980dbb42e860414306b8 66444 libs optional mozjs128_128.3.0-1.debian.tar.xz d678d781e2cdf4786ca8bf6fd701923c 8247 libs optional mozjs128_128.3.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmb8G1IACgkQ5mx3Wuv+ bH3HFQ//Wwc0NQalmWI6le/p9VFVxUuxhbJ+196Xg7Y5f1EVuUXmvKChoFeSrsQv Wuxc84eFVUP7/q0YJWG5VZiTG4ERKnYy07KteFNTw37qwgrePgiqWZ75iLNzkRfO 9PmIFtxEmCcYsEOabgRFT2yhi/vqARae7wcOFuDLgiGgwOhAsop3yCCREXXmwVJ2 Kn5DaggUlaoT6uc18DNvS0lFxuLcZf8Oh8ia00uCBjSZfUvCI7Vj5aPNUjWQm2+l 1LMi4arUKzfgWbVrEJ4uVqx/Eo+Z1ugMNFAIBjIx6pQ8CU+CPwYpjtiqDI/0p1y4 eDWvYOwaIDPMmh3lxb/7g5BDuLuMrVhh7ORobqOt1XX3tvqP4nQX0pCdaYFg3Znh maX5rGeIQH1uOckZryRvlMfWSbsIuOUMXhLdB/iPCHAu5Xz+LWSjfd5ZQisjhnI8 4RRO28CwMfT9b5/ziegfizBtVW3gXM1fFZGr8P+af0KopmQySoE8kjYVAhlNO+xg KpJjX1Q638xt7dx5Hb0oO6l6XRDr+JRQCpHe2DPtcSviA3IOhMyhoKj686NAyuBw zYp0b3D8j0nwnqnhCZJF7NCrwVn4zhctEAGiQ43vbY7b92+by4L0IQv//1gT1cLf Sy0myYKCjEVF0MGQQI/qoeVTwPf4gZ/Xgn/4HPKxw4OGiWs3CJA= =2TTu -----END PGP SIGNATURE-----
