-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Oct 2026 23:46:48 +0200 Source: twitter-bootstrap3 Architecture: source Version: 3.4.1+dfsg-3+deb12u2 Distribution: bookworm-security Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Closes: 1105899 Changes: twitter-bootstrap3 (3.4.1+dfsg-3+deb12u2) bookworm-security; urgency=medium . * Team upload * Fix CVE-2025-1647 (Closes: #1105899) Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS) DOM-based cross-site scripting (XSS) via DOM clobbering occurs when an attacker manipulates the Document Object Model (DOM) to overwrite or "clobber" an existing DOM object, leading to the execution of malicious scripts, particularly document.implementation variable. Checksums-Sha1: 4dcac61e05cc26a567295d5e24407d5957182ba8 2401 twitter-bootstrap3_3.4.1+dfsg-3+deb12u2.dsc 0c1b1b026a103e470bb29f0d54445e44d2ab8f49 2011336 twitter-bootstrap3_3.4.1+dfsg.orig.tar.xz 873f0723c94e98f2959ca39d900540f2367ee52f 55916 twitter-bootstrap3_3.4.1+dfsg-3+deb12u2.debian.tar.xz c12a593bd4a7a3081d28d9ce689f0e133bcec0c3 7307 twitter-bootstrap3_3.4.1+dfsg-3+deb12u2_source.buildinfo Checksums-Sha256: 1ffa4cce7f13fc22396917d2808cea71cd629f28f005d4899d6e5e5ddb2b6ba5 2401 twitter-bootstrap3_3.4.1+dfsg-3+deb12u2.dsc 9eb17937c62ff1133779bdca0b2ee62bfc3a8fc3348aef3b197e6020c9ce3528 2011336 twitter-bootstrap3_3.4.1+dfsg.orig.tar.xz a33e66cb3c89473a7320656116d93b4375ee80a52b0124749c37baf4d227366a 55916 twitter-bootstrap3_3.4.1+dfsg-3+deb12u2.debian.tar.xz 22efd5a2589b8f43e784552d149e09d2ce59302aecb65a9413ed7058e49e9ec0 7307 twitter-bootstrap3_3.4.1+dfsg-3+deb12u2_source.buildinfo Files: 92dbabbafa2c0aa7ba641d1f99244fd1 2401 javascript optional twitter-bootstrap3_3.4.1+dfsg-3+deb12u2.dsc 504ddae4ecdda987cbe48168d176ab41 2011336 javascript optional twitter-bootstrap3_3.4.1+dfsg.orig.tar.xz 67f509c864479f54e12d4da00c24fed1 55916 javascript optional twitter-bootstrap3_3.4.1+dfsg-3+deb12u2.debian.tar.xz 6141cc9fa64d74a2fdb7a94c82596ecd 7307 javascript optional twitter-bootstrap3_3.4.1+dfsg-3+deb12u2_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJqyBjeCRAAOhotqkEIX0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmdT0WI4WauKOD8f06k+lQa3K2IDGzszD9ZZLKHhRufN 3xYhBF0Bh7lAokW617D1agA6Gi2qQQhfAADYDg//YbyVBYUWyYLidkAK21OaFpnY PamqsJJDavBoIj8EItahJswub3rE95bZx39j3X8rrTIWPW2tJQvbKzQxNOHA3s2n e5gA/vmYyTK9QpFh+fK7+SkX5iufV6XJr5BHgV5nD48Lma3vKi3RGpbvUu1n2Heg TH1rjI5KuFrX0ScYmI16Nb0CEpA9eESAAzlXvsc2l/azAIIwb8V6QnoJrxUuKWQx dEXfS21xJtbVSStszYuE/zGxERnDp4WnZDm8lYqsUAFk4quGCzpwUn3pRBA0gjg1 j7FXefDVMYLUNrcsweHhYrUN7boLPkttJlcboH5OYA6iiWkawyu0qT57ZfN1xrm0 9kF1eIAqvyxjOEoXmIeOTmK4ndhChCKgNFSvpBq1vkdsCCGkbq0cQW3rqwWysRos Hf8u4SbIxID46wIqft/5zvUOXPfael+FASkKAr6xiq72h0EcrBRclQTupDZ0d1YC 4UyGe13mpYwerERN3mg4rJr0P7OM5PzC0Aetw9hmLh8ED8VEQRkkUXHHp75DaJHa so1nF8FFG/OQENoS6c/Ezehc+Qrann2Avpf7iaToRg3lz+WVaK4kJW2ks5r4pqMP eaoYKiOGUMUUwB0YsAX+hM8DL/ybDWF5sxA7+h64u4XSJJEHM6NxFaLYw1Zh/MgY ZYLiTuJyay5KxFeu38w= =Hg0R -----END PGP SIGNATURE-----
