-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Jan 2025 08:29:17 -0900 Source: mozjs128 Built-For-Profiles: noudeb Architecture: source Version: 128.6.0-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Jeremy Bícha <jbicha@ubuntu.com> Changes: mozjs128 (128.6.0-1) unstable; urgency=high . * New upstream release - CVE-2025-0240: Compartment mismatch when parsing JavaScript JSON module - CVE-2025-0241: Memory corruption when using JavaScript Text Segmentation Checksums-Sha1: 110ae868dc4a24ce7d504cf875865aa2068bbeef 2407 mozjs128_128.6.0-1.dsc 17703462c11d26a740a5a0d5de588bff6d6c1a99 157072996 mozjs128_128.6.0.orig.tar.xz 6d1c7341ed758738d7ba629cc01b0522bb1c80d0 68696 mozjs128_128.6.0-1.debian.tar.xz 13803bf98d6792e426f352c63ad8c683c971b9e4 9014 mozjs128_128.6.0-1_source.buildinfo Checksums-Sha256: 4fa8cd204176f15a9f21175dccc39ffe63ccd525ca5d2663cda6fbb66aeb8543 2407 mozjs128_128.6.0-1.dsc b6733ac588b368358a10d94c803ffc20440ed5f5ee2e0880636663fe8be4a549 157072996 mozjs128_128.6.0.orig.tar.xz d2a6d086cfec7d240aeed212c6d6746acd8c9adf1108f4c5f1e45dd2cfdd1a1f 68696 mozjs128_128.6.0-1.debian.tar.xz 97a123a9597eee7296bf87d8e61aac993d54886c3998da212ee2335fdc044d1b 9014 mozjs128_128.6.0-1_source.buildinfo Files: 83d0d79c26d0ad900b8dac55d2b96d6b 2407 libs optional mozjs128_128.6.0-1.dsc 96c0b20e79f645cc9cc27b8556ced11a 157072996 libs optional mozjs128_128.6.0.orig.tar.xz 2ae6a5bdeaad509ec086a7c306226723 68696 libs optional mozjs128_128.6.0-1.debian.tar.xz 12706548e6cae718d241396358c94c1d 9014 libs optional mozjs128_128.6.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmd+v+kACgkQ5mx3Wuv+ bH1C6RAAupbRMxUi3XNG8JnSGBprFuA/yMkFqj75A3m55/6ZeKZS/Ou3d3G4P2DS Ufy50tT1Z0Xiu8lPxHMWD9s6IRqzQZx88mBLIh76rRiO+RogHw/oQYP6Bz5HgUyD k9GgV3WIEB6vo6Z4LL8AwPpuwwg5ZB+URViia9TL1vT7FXAkRcEeJkxCkjhJjaOD UeyjLAlQlnx8hFyrKKX1tPSLZJsZ5gEg2OzSAlx2Oa8bzY4bdwGIjWl8RLlSGoBR jUJ3LI0wfGu7+WvyXtz9bUCyTLFfYJkQYvaPDlLqOVqbpLj87G4yDvmktRZszSU3 z0m/TPclD2OHUr/gigHWMN8A7mZDIYPDmrRPwtPsYWwtWoVWIEM0jpjEJ/dEa8ib KqBdL+snZzs7fJ8dPprjEF593WNHIFH+VzfvU1Zg2lDnhkJF0PF0JC78vPWrpYXw Af6bWocnnQ3vyGyxqCRO3on4PnbyjewsN/xJVV2E03Yub39J7bxah9wWe79siFoi l/NuysiEMyzC37ng4q3sOm6dNA/pJFhNfWrL45V2mA7kFHwfpiPDcv8aKVNIqgDq lnle41CyXYCZVryLAY9omiFYAsWW1FBA6/J5WnNAbJ89qr2LWdITrkzMb4h1jqL1 OQZd0DQKUfUTIZbOmjygIyGpPklBCf4lPYTxWihgOOlDR57kJJM= =XaAc -----END PGP SIGNATURE-----