-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 21 Apr 2026 12:12:43 -0400
Source: mozjs140
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 140.10.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Changes:
mozjs140 (140.10.0-1) unstable; urgency=high
.
* New upstream release
- CVE-2026-6754: Use-after-free in the JavaScript Engine component
- CVE-2026-6757: Invalid pointer in the JavaScript WebAssembly component
- CVE-2026-6785: Memory safety bugs
- CVE-2026-6786: Memory safety bugs
* Revert "Use rustc -Clto=thin on all architectures": no longer needed
* Update Standards Version to 4.7.4
Checksums-Sha1:
f77ab8e0d7cb7e1edafd9efa97bd975f545447eb 2383 mozjs140_140.10.0-1.dsc
efdc1afa0e0773a09bcb62140002eeb6fc4fd6cd 199984860 mozjs140_140.10.0.orig.tar.xz
18215b7a2a13bf7a2e7996567f7ae128ecf20361 58248 mozjs140_140.10.0-1.debian.tar.xz
9b8ec42e90e74712d798f8451fb65b8bd97ee673 8068 mozjs140_140.10.0-1_source.buildinfo
Checksums-Sha256:
6f84221073db0d6b67a26f56a5522214de591142e93ba97a6f49a86db3aaa6ad 2383 mozjs140_140.10.0-1.dsc
58e16b8b42a572892c764772b0b9584a502789d0a59e2ec292486b83dd9d154e 199984860 mozjs140_140.10.0.orig.tar.xz
2a69affa4efdeea4ef5e3fcd4a24d0b28d92a354c9bdc8620ed0a1808523fe56 58248 mozjs140_140.10.0-1.debian.tar.xz
8188732dd5e9589e240c6c0c8ac482ef3f1628be5bcbbde3c82bbadb87bc4d48 8068 mozjs140_140.10.0-1_source.buildinfo
Files:
b979a5b9fbf12d691f10d99564a9db89 2383 libs optional mozjs140_140.10.0-1.dsc
46c1b5a7715c2d02091cde2665f96781 199984860 libs optional mozjs140_140.10.0.orig.tar.xz
1d3a2693a9a5d8aa18d45db0804fb881 58248 libs optional mozjs140_140.10.0-1.debian.tar.xz
5467dcfd282b02e07514b7ed31cd2449 8068 libs optional mozjs140_140.10.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Itw2
-----END PGP SIGNATURE-----
