-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 22 Jul 2026 11:28:49 +0200
Source: mozjs140
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 140.13.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Changes:
mozjs140 (140.13.0-1) unstable; urgency=high
.
* New upstream release
- CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component
- CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-16360: Memory safety bugs fixed in Firefox ESR 140.13
- CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly
component
- CVE-2026-16368: Incorrect boundary conditions in the
JavaScript: WebAssembly component
- CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component
- CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13
Checksums-Sha1:
9c8f30e66e004a347eefa616f06557fdb8935d3c 2361 mozjs140_140.13.0-1.dsc
5fb87130366080c7ce6215e5b7af0ca5e56e6bdc 199964132 mozjs140_140.13.0.orig.tar.xz
c526d82aa2bd8ae721151877f55e04d053b251d0 58304 mozjs140_140.13.0-1.debian.tar.xz
cf9d04dc2c1ec5f46ff24597916efe99539cdb95 7915 mozjs140_140.13.0-1_source.buildinfo
Checksums-Sha256:
c151bc17a064ea61a598e9a5e47c593ec293333b26e31eca73988c472af4f2a2 2361 mozjs140_140.13.0-1.dsc
eb1d52e48e978d1e2b4012252deeda91a51347624c0c75e7ceac24685c736be0 199964132 mozjs140_140.13.0.orig.tar.xz
ec2021522516cddd806dc3bce29c1ac8bbd67323ccaf9588390b29723737eda3 58304 mozjs140_140.13.0-1.debian.tar.xz
87a3ca7f76368aa7152df31317ff0135fc243be468081964986afeed94534560 7915 mozjs140_140.13.0-1_source.buildinfo
Files:
22bb88dbe456bc795e6b3c6b8725d7f7 2361 libs optional mozjs140_140.13.0-1.dsc
b0d9a439eaa3e618bfa67daee4d77db0 199964132 libs optional mozjs140_140.13.0.orig.tar.xz
3b6d5bfd4d2054a0bcce1a71a0dc8fef 58304 libs optional mozjs140_140.13.0-1.debian.tar.xz
bcfae1ff4e23e351aac8f3269ec61ffa 7915 libs optional mozjs140_140.13.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=F6a9
-----END PGP SIGNATURE-----
