[From nobody Sat Jul 4 11:35:07 2026 Received: (at 1121953-close) by bugs.debian.org; 4 Jul 2026 10:32:44 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 82; hammy, 150; neutral, 143; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:52646) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxfw-004cqK-1G for 1121953-close@bugs.debian.org; Sat, 04 Jul 2026 10:32:44 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxfu-002AYW-2c for 1121953-close@bugs.debian.org; Sat, 04 Jul 2026 10:32:42 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=XW6S8NlhP458LpfvNlKZT7PfbJAps0p87Aw0FPoqyws=; b=JH9f/t38HxjaAoKHFCXfLMO68r qgmafxyPXJ7Iur/ejnUDUexUvsnH4YjUgQCaMCMa7sEVy2gyI98zhEndz0rxQDwjZ5bKtj3wKHgDd mVFeGJ33RK81hJrEqeWofIzZdVlFIiuMXOum41G+mFiQJyFBS4Q2PLuofm/u5kDN5WLzy6sGhV/uX 7G+o7lLOzzf25pfNrFTi8LVEuE8BYNxmnW6cKxE+XJowpnTAqnpy5gnM9PLJgPh7IPEpbzQdzRjra AEshvL5OE3H1AEU5+VLqwzOMEjCN+LvoqOR/+LAxRtR9dhMeSAj9nE43eUv8gz/iUgKJoXrgPx42n tmb+vnFw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wfxft-00000008rSx-2okh; Sat, 04 Jul 2026 10:32:41 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Adrian Bunk <bunk@debian.org> To: 1121953-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: rhino Debian: DAK Debian-Changes: rhino_1.7.14.1-0+deb12u1_source.changes Debian-Source: rhino Debian-Version: 1.7.14.1-0+deb12u1 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1121953: fixed in rhino 1.7.14.1-0+deb12u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6433351722243452282==" Message-Id: <E1wfxft-00000008rSx-2okh@fasolo.debian.org> Date: Sat, 04 Jul 2026 10:32:41 +0000 --===============6433351722243452282== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: rhino Source-Version: 1.7.14.1-0+deb12u1 Done: Adrian Bunk <bunk@debian.org> We believe that the bug you reported is fixed in the latest version of rhino, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1121953@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Adrian Bunk <bunk@debian.org> (supplier of updated rhino package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Jul 2026 11:34:09 +0300 Source: rhino Architecture: source Version: 1.7.14.1-0+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1121953 Changes: rhino (1.7.14.1-0+deb12u1) bookworm; urgency=3Dmedium . * Non-maintainer upload. * New upstream release. - CVE-2025-66453: High CPU usage and potential DoS when passing specific numbers to toFixed() (Closes: #1121953) Checksums-Sha1: b375318f1a74576df4e8b1b1adff303bf30ec3f1 2077 rhino_1.7.14.1-0+deb12u1.dsc 5735ba0cadef1c26ee6a594d2bb4a6b2d6d0de94 2948500 rhino_1.7.14.1.orig.tar.xz b48637d3ea22b5ac8505f3237a74725381a009ce 17292 rhino_1.7.14.1-0+deb12u1.debi= an.tar.xz Checksums-Sha256: 5a98a7e08efb581363ab4f3bf3682f5d508dd81d1b01e2c3ea33f0c07f39676b 2077 rhino_= 1.7.14.1-0+deb12u1.dsc 1469c8db28015b9ce55ca3bbcb17d1dffc9f0d846e2d11a5350fa5939f07eb7a 2948500 rhi= no_1.7.14.1.orig.tar.xz 714d23cb5765e64aa45d13a4d29c8c750f36d9c13db9f7245097c4e266beb4f6 17292 rhino= _1.7.14.1-0+deb12u1.debian.tar.xz Files: 6800175a0ad6895727cdf534d64bce72 2077 interpreters optional rhino_1.7.14.1-0= +deb12u1.dsc d955a1a4f3783ebd4b316920f390020a 2948500 interpreters optional rhino_1.7.14.= 1.orig.tar.xz 3c141b29c26e0c9db094cd04c6da879d 17292 interpreters optional rhino_1.7.14.1-= 0+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmpHi2IACgkQiNJCh6LY mLHRphAAht5zOdm0KvcDUV1N21qK55PaWWG8OU3TSMqZAle9KQ82wgHH2g5Af5Ah EkgFu9snHRPBRmwop7P22/TDC0ojygVnkCblWlr011JuGdhC3gcNJBG+6d5TqjyA NBxK/Wy3msJtFqMTeMeQWu8U+Pbug5VvHLCSYlAA5EFKg6XtEDBMLPgB+/cd7Mio pPoc7CKufu3NCFV656hZW9mJ5WJ9x9KfEbaoO9jisEM5o4nOc31/+BmpkJbbPciq 3c5paVd+NLz0wNTO/djtCLHkDe6JZpL3rg5XuJ+qOL76uYyYO5QGsKl1AtqImK+z 0HYzseJwcx/0+g2F0Q+MyAgGCwsNC1PY4pUQyoUiXT19lGkv8PL12WWQ3IcVZv/P M62iB7IesNNBNiSM+6gJo1Jm0jrdhhhVwCtgQum/yW105P1cZwZkqD4WvfqVl3e9 QNoirGBeg4yBjLlRr2viyNZ9FPqpM//wgzq/g4lW/WFMNyWxuTFooJ0OnyoH15P4 2Uxl6G6XFg1kdcUxDmn5MW+1ElyI0nBJIyDjkX8P84Hq+eZ7zEp5UOeiggircNv+ NhOhsrUsaF7dlL5u4pBRbAFtaeOsDtSaTr1UjVfZzqwQeEujaMFAtFu5y8VKYX7J UAjSv6kmkm55uqWCrYIN582XmwrZCiZl1fMQ1HcfRhP+EP+lofA=3D =3DpMOp -----END PGP SIGNATURE----- --===============6433351722243452282== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakjhSQAKCRCb9qggYcy5 IY69AP9ah+JL6Edq0TsN5DjxBDPLeZva03fLm9kglwnzdgSiUQD+N8qpNEk5ck7A 4CsEOSn1iE5JYxba8sY8Z9d9TFKdzQ8= =5kMx -----END PGP SIGNATURE----- --===============6433351722243452282==-- ]