-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 25 Jul 2025 10:01:16 +0200 Source: mozjs128 Built-For-Profiles: noudeb Architecture: source Version: 128.13.0-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Jeremy Bícha <jeremy@ubuntu.com> Changes: mozjs128 (128.13.0-1) unstable; urgency=high . * New upstream release - CVE-2025-8027: JavaScript engine only wrote partial return value to stack - CVE-2025-8028: Large branch table could lead to truncated instruction - CVE-2025-8033: Incorrect JavaScript state machine for generators Checksums-Sha1: 31e30e3534bff6bfc3bf6db550d31bf8d2cc497b 2416 mozjs128_128.13.0-1.dsc eeaf45fe7540c49efa34b9b228abde62cbe3f82d 156545708 mozjs128_128.13.0.orig.tar.xz 96817da977f2c3f9edc89ffbf66f07a8b3818e6c 53680 mozjs128_128.13.0-1.debian.tar.xz f15d7f9fddfa17314cc75a765efe36e94f34c2a6 8959 mozjs128_128.13.0-1_source.buildinfo Checksums-Sha256: 9377454e94c46580b6cb3d44f46091de42b1cc2e59aeb62031051c8c6815fd25 2416 mozjs128_128.13.0-1.dsc 8ec7639960c32d26b2aa56e7916b94b41e3efc436a28389bf1ef08234e7adb4d 156545708 mozjs128_128.13.0.orig.tar.xz 959fb82a5a5a04ca7e17fd76a5dafa0f5563c5e86cd5286de3a17b570ccb934d 53680 mozjs128_128.13.0-1.debian.tar.xz ec456634fb401cd8997e766ce0fe0af1534c0b326f3117f7ffb7879801c0d163 8959 mozjs128_128.13.0-1_source.buildinfo Files: 238343595e22db0da81877167f61f6f0 2416 libs optional mozjs128_128.13.0-1.dsc d729ea6395bec92bca24932386053d09 156545708 libs optional mozjs128_128.13.0.orig.tar.xz 5a7f5f71e8c3d62acc5d17093d988c0e 53680 libs optional mozjs128_128.13.0-1.debian.tar.xz 8400c3dc6662641417d1e5a739441407 8959 libs optional mozjs128_128.13.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmiEiIoACgkQ5mx3Wuv+ bH3/4RAAy/TxU4EEAkEYn1n00v2hj66oMfAJvFVsK+FV5DMe+khDd40n3aK9y/Q1 7cle/4C5ERAmjgKKwCYZQsWvGdtl9qMqMfDfeK+XcXe1vE0XRrVvHCfw17IvpwEG ZK1ARDZlzXeHlGRw626h8+P2Wszg4uhOnnfKXVl4FVJcpa23tZ6nj1tD2/nK6V1H ASEcIzcvF2K8G+ZFI8PDpuZeokTKaGwJqryWZJ1K5lMe8d4m7c5eKxZzWg8L0VSU udLTGOz8Rq7CS09GYeqOTf28FPY9KP6WkDGaT/JQ8dKLi4bNpLNNbWzWBgrekJQN 6I0lgD6PEvDqOtbLbXbOC0TPmjbZA/ZCIseIezXP89nbSJxKWp27glLvt7ekZaRH qYSyfEdpQi8kDf5QolXt6Uqs5/cgKFDvJ1O720+oI0qbRNfUBGg4bAej8A57dfHT /ku6rsYgMWDYVU5LXm2gZfp5IghSYD1BWD/oCOvqiCOhVyJeODqso6hh3qAYjkDa 2S0rAV62UJ44oNdhodClEvEDofwiF3PlNILVGnqcuxRjX5s95S8bIDtLJ65WWQ9v AmSE3fbAYboyNoWCdyC4aD2nz2Zf6mRIB8DvhMEDrjWneMw7+A3pso/ftgPY1FUT upBlReplRFNdwFQBDbLf/SyjcrtZoo+XcwrU+fm408TSW2+03Is= =fAuk -----END PGP SIGNATURE-----
Attachment:
pgp9xA6SGJrtY.pgp
Description: PGP signature