-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 16 Apr 2024 07:52:09 -0400
Source: mozjs115
Built-For-Profiles: noudeb
Architecture: source
Version: 115.10.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Launchpad-Bugs-Fixed: 2061860
Changes:
mozjs115 (115.10.0-1) unstable; urgency=high
.
* New upstream release (LP: #2061860)
- CVE-2024-3852: GetBoundName in the JIT returned the wrong object
- CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement
- CVE-2024-3857: Incorrect JITting of arguments led to use-after-free
during garbage collection
Checksums-Sha1:
17475fb1b0b7c2a3b504ced8130686b692ee3e15 2393 mozjs115_115.10.0-1.dsc
a657661a3024c5c27b92a0b9b4ba62b1b6040b59 145639392 mozjs115_115.10.0.orig.tar.xz
bbd7ac0db3028d8534c472960d7a55e3046a0ec6 69840 mozjs115_115.10.0-1.debian.tar.xz
ed7a33a4549dcf25d1fd4a9fd90103e57d24711d 7375 mozjs115_115.10.0-1_source.buildinfo
Checksums-Sha256:
d31a133550e70f840ca4aac66e92593d4c7b60c38c5cbc636a3e0f98d20527f1 2393 mozjs115_115.10.0-1.dsc
9f59a734cd5d5444b1afc2f83c1c7c8098fc781c04bf856550f64f240e644219 145639392 mozjs115_115.10.0.orig.tar.xz
beed09c7f5d35949da1254d8846ee571a384edc37456de24b3858542aa8fc57d 69840 mozjs115_115.10.0-1.debian.tar.xz
9f1a4c353ef9d90b0f10af45c68d7b27219c48e24e3dd521a276ba3cf5c8664e 7375 mozjs115_115.10.0-1_source.buildinfo
Files:
1bb2546ca2ef0ba1dcb6cbb59c753751 2393 libs optional mozjs115_115.10.0-1.dsc
1c7c1983e08033e549c805ebc06018ab 145639392 libs optional mozjs115_115.10.0.orig.tar.xz
169b6482f2918ad07c13a461514cc845 69840 libs optional mozjs115_115.10.0-1.debian.tar.xz
aec6f7d64e59bb3a8c84ddb393b4b705 7375 libs optional mozjs115_115.10.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=I1FC
-----END PGP SIGNATURE-----
Attachment:
pgpqBjtHrzdFX.pgp
Description: PGP signature