-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 18 May 2026 18:31:56 -0400
Source: mozjs140
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 140.11.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Changes:
mozjs140 (140.11.0-1) unstable; urgency=high
.
* New upstream release
- CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 140.10.1
- CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1
- CVE-2026-8391: Other issue in the JavaScript Engine component
- CVE-2026-8388: Incorrect boundary conditions in the JavaScript Engine: JIT component
- CVE-2026-8974: Memory safety bugs fixed in Firefox ESR 140.11
Checksums-Sha1:
5ac03412b77e04d7938c40f7d8e2e3b4bc3cdef9 2383 mozjs140_140.11.0-1.dsc
ac7756324cafc8937130dfa134365351ba239153 199995720 mozjs140_140.11.0.orig.tar.xz
f534e07020a8c012b59f2b11ffee3e8afe8505ab 58244 mozjs140_140.11.0-1.debian.tar.xz
67715557a959a1899967096929d2ad4c659d6ea5 8080 mozjs140_140.11.0-1_source.buildinfo
Checksums-Sha256:
3270cddf1b49cdacc42d7900298a8ac08107694ff248b3f63e2742fc3bba9657 2383 mozjs140_140.11.0-1.dsc
8188b533a789e17fdbcd57defcd4b109a28ce15b0d1a7f7c6862fbba21aade85 199995720 mozjs140_140.11.0.orig.tar.xz
4aa9c4def290cba7d250b46fee9e0b6c34ff74875da99beeac93a8c83aefb78e 58244 mozjs140_140.11.0-1.debian.tar.xz
ef06ce469f956186c24059b3bf26a7004427efe1ae741d3e80dc18eb54971029 8080 mozjs140_140.11.0-1_source.buildinfo
Files:
f724f3e21d01e526b160ad48fb8e7346 2383 libs optional mozjs140_140.11.0-1.dsc
6ad442b4aa5a140274b1f0e3ec6b2856 199995720 libs optional mozjs140_140.11.0.orig.tar.xz
7bfe99300754fe7c65cac9d01616dbe2 58244 libs optional mozjs140_140.11.0-1.debian.tar.xz
0cbc5cd6e7afbf6702e21f1363959b94 8080 libs optional mozjs140_140.11.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmoMYewACgkQ5mx3Wuv+
bH3tJhAAuOEVzOtUgyGAST8XwaTyyFf5ks7InjGK5R05LiuRuOKb+ENyA7JIebak
fHGK+6qfxLFDtKw7FVd3Ux4/6Ucu09H3vidPC0Mq6wMN5//oktbOr1ZXWzPWTJUX
ollIVGPNi5w0IswWX8lojl9PaXrZ2nQxIhXePwYZxemZnkIygGyvy4xEciIHmeSg
0rk6AVI0VEXw5kZ5AxTsuZQcRUevF9prve88mxW4rGbc86FdMkbpJlT3z97KwLn9
DIYP3odsHEBVHpPESuzYEG6pELoQGG+TpTdBFS2+JUPwcSpCzQwvHDvXofoWyKEl
+TdTESGh5UfE/Zm9RIHm5p6SD+DHTmRbZpztCMM4XOx0wx4ptO3mfxK+1o16UwPO
toDz7cqIHF93lmpjtGgcBdhrvjLBil1Lt4TeHTkgQL8mG9jW58bErFxMzjatyyBF
UJUzGfk3IjcffKAtjbDcdChVQWBjsjtwhN0VE6r6Kxz+qhAj7dOkUSLK2znxd7QT
WBDA3P/EY2T4SYAnRmuojYMQELyyv5DI4aHSh/Y2y77r+4GejZQJ9Q57LcFPgM1r
JPE3ngex1lOgRduFaiSJ8AN1qfvn66JahnpzAskM3rUxMqsRDTcxvm3ye26Z2ZPX
9yilhDDpDs1CjDmwf4pXGsX/t8QjaXXBr8FT/0KfKABkBUUb29c=
=HZQJ
-----END PGP SIGNATURE-----
