-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 25 Feb 2026 12:10:14 -0500
Source: mozjs140
Built-For-Profiles: noudeb
Architecture: source
Version: 140.8.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Changes:
mozjs140 (140.8.0-1) unstable; urgency=high
.
* New upstream release
- CVE-2026-2763: Use-after-free in the JavaScript Engine component
- CVE-2026-2764: Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-2765: Use-after-free in the JavaScript Engine component
- CVE-2026-2766: Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-2783: Information disclosure due to JIT miscompilation
- CVE-2026-2785: Invalid pointer in the JavaScript Engine component
- CVE-2026-2786: Use-after-free in the JavaScript Engine component
Checksums-Sha1:
5b283194226e3636e06cf8748f66e52399343350 2376 mozjs140_140.8.0-1.dsc
7ad8f7a0235b6ed36eebf5be5fe4862b27396fc5 199973664 mozjs140_140.8.0.orig.tar.xz
4b76362f9c9d1d9120dda46115fa3ea42e552267 56244 mozjs140_140.8.0-1.debian.tar.xz
90505c9be9326dfd202184f9ab18a6d78fe44d39 8159 mozjs140_140.8.0-1_source.buildinfo
Checksums-Sha256:
70872c04c49cc6b53d0df992b94878fcc89afd1d12e6a1ef617c2858e349c20e 2376 mozjs140_140.8.0-1.dsc
15b5f6628fdb18bc6fe0b7ffdde9eafbd5d6aad13302ee413638f0b0b0a7a39c 199973664 mozjs140_140.8.0.orig.tar.xz
cdcad3ae7eab58c1800c3d94a07cdcb11a7c0e8a561b3643c3dc474525ff31d8 56244 mozjs140_140.8.0-1.debian.tar.xz
5839d530f25e4f6b21bc4a63868b6c00ac628164e0dab491e86c5102a6e7645e 8159 mozjs140_140.8.0-1_source.buildinfo
Files:
65c744575d94f8721e23776c56b37702 2376 libs optional mozjs140_140.8.0-1.dsc
08b1ddfb25f45fda221f9b1772851683 199973664 libs optional mozjs140_140.8.0.orig.tar.xz
5ffb8638951298fee8ae253f696c8c96 56244 libs optional mozjs140_140.8.0-1.debian.tar.xz
8c5266f515f4637978c12ab7eeb93276 8159 libs optional mozjs140_140.8.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=FeWb
-----END PGP SIGNATURE-----
