Accepted mozjs102 102.15.1-1~deb12u1 (source) into proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 19 Sep 2023 12:35:27 -0400
Source: mozjs102
Built-For-Profiles: noudeb
Architecture: source
Version: 102.15.1-1~deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Closes: 1037158
Changes:
mozjs102 (102.15.1-1~deb12u1) bookworm; urgency=medium
.
* New upstream release (Closes: #1037158)
- CVE-2023-4046: Incorrect value used during WASM compilation
- CVE-2023-37202: Potential use-after-free from compartment mismatch
in SpiderMonkey
- CVE-2023-37211: Memory safety bugs
- CVE-2023-34416: Memory safety bugs
* Update debian/upstream/signing-key.asc per upstream rotation
Checksums-Sha1:
c8badb6dad0ae0dab78c05380fe672e69fd1e4aa 2313 mozjs102_102.15.1-1~deb12u1.dsc
5f52b728309d25a987e271d82b858a3940d5916d 145662876 mozjs102_102.15.1.orig.tar.xz
dbd8f39c724130369119088d54a9a076e6492716 64528 mozjs102_102.15.1-1~deb12u1.debian.tar.xz
ebc0890009781559b55d8190a1b9ed2476b10740 15622 mozjs102_102.15.1-1~deb12u1_source.buildinfo
Checksums-Sha256:
ceeaf8c7c64b64313925b10c332fc13efa4d740e4733135b8c5e88fb38c6b4ff 2313 mozjs102_102.15.1-1~deb12u1.dsc
d0c68941d8a96529f131b01a574a45e8c29933a985a409c317455e58a4df9832 145662876 mozjs102_102.15.1.orig.tar.xz
4bd50042a8a9a434f26e887771c76a0518acd3b9a56d1674901de285846d9cfa 64528 mozjs102_102.15.1-1~deb12u1.debian.tar.xz
705d283d2f0006200649866df326d4200149d519ee81d0df2a74759e36c435f2 15622 mozjs102_102.15.1-1~deb12u1_source.buildinfo
Files:
adfb40841447841509ec648a14206101 2313 libs optional mozjs102_102.15.1-1~deb12u1.dsc
8eecbd987bceaef6e2a66a731fe1503b 145662876 libs optional mozjs102_102.15.1.orig.tar.xz
57e719db1a6fe5df22177f46853b19dd 64528 libs optional mozjs102_102.15.1-1~deb12u1.debian.tar.xz
8def62369dca057d4e7be170d0aebb6b 15622 libs optional mozjs102_102.15.1-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Wrqn
-----END PGP SIGNATURE-----
Reply to: