[From nobody Sat Jul  4 11:05:05 2026
Received: (at 1121953-close) by bugs.debian.org; 4 Jul 2026 10:03:11 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,
 HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST
 autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 79; hammy, 150; neutral, 143; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz,
 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:34120)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wfxDL-004XPS-13 for 1121953-close@bugs.debian.org;
 Sat, 04 Jul 2026 10:03:11 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by muffat.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wfxDL-002fS2-0o for 1121953-close@bugs.debian.org;
 Sat, 04 Jul 2026 10:03:11 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=0+AS39FXjT7IvLOiQs0TO4vPIaeXIOvqqlZ//wqmrLE=; b=pG/4uplD02EUCjIasou8Lxikas
 wQagzBgTGf4vZYU/kPyuY3f53xqqy/JgsKA8CYQTlgKHhPAnIAAJiIkzDSPMtx8uXAxK1jVM2oFDP
 QzbLVXtVeXPn6ExqTBNmh1AYU+5cWoR8MzbhMv0qPADwN7bXqxFdy+MRPtiEuS5Xv+ZWF8TeshcoB
 rMoUn+A02CvcfuO81df7HYTyeyCzOKC7D2DlTucbY4EDegPF99lvwBmS0GMOsoEk3tDWyhCtI3k9w
 XDlFACP9fx684kxE3f2vN9R5BUvhBifQOzU5jox5W063u4cQfNnDD6xYv+J0U5NtT3rdlk81rpK8p
 N8i+Lq1w==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wfxDK-00000008mON-0v0S; Sat, 04 Jul 2026 10:03:10 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: Adrian Bunk &lt;bunk@debian.org&gt;
To: 1121953-close@bugs.debian.org
X-DAK: dak process-policy
X-Debian: DAK
X-Debian-Package: rhino
Debian: DAK
Debian-Changes: rhino_1.7.15.1-0.1~deb13u1_source.changes
Debian-Source: rhino
Debian-Version: 1.7.15.1-0.1~deb13u1
Debian-Architecture: source
Debian-Suite: proposed-updates
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1121953: fixed in rhino 1.7.15.1-0.1~deb13u1
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============0633374272496317908==&quot;
Message-Id: &lt;E1wfxDK-00000008mON-0v0S@fasolo.debian.org&gt;
Date: Sat, 04 Jul 2026 10:03:10 +0000

--===============0633374272496317908==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: rhino
Source-Version: 1.7.15.1-0.1~deb13u1
Done: Adrian Bunk &lt;bunk@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
rhino, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1121953@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adrian Bunk &lt;bunk@debian.org&gt; (supplier of updated rhino package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Jul 2026 10:18:53 +0300
Source: rhino
Architecture: source
Version: 1.7.15.1-0.1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Java Maintainers &lt;pkg-java-maintainers@lists.alioth.debian=
.org&gt;
Changed-By: Adrian Bunk &lt;bunk@debian.org&gt;
Closes: 1121953
Changes:
 rhino (1.7.15.1-0.1~deb13u1) trixie; urgency=3Dmedium
 .
   * Non-maintainer upload.
   * Rebuild for trixie.
 .
 rhino (1.7.15.1-0.1) unstable; urgency=3Dmedium
 .
   * Non-maintainer upload.
   * New upstream release.
     - CVE-2025-66453: High CPU usage and potential DoS when passing
       specific numbers to toFixed() (Closes: #1121953)
Checksums-Sha1:
 e7b2f76dbab7b75d17fbf63421e0ea83687de068 2085 rhino_1.7.15.1-0.1~deb13u1.dsc
 803965e62558c1726774a3d81c8c2f7b4f64f719 2993636 rhino_1.7.15.1.orig.tar.xz
 c15149de3c3a126bba56d59e6cd0772c1c71870c 17204 rhino_1.7.15.1-0.1~deb13u1.de=
bian.tar.xz
Checksums-Sha256:
 aea3311041466152cb9903968fcbab2f6f919c6b585afdc0992874baca709735 2085 rhino_=
1.7.15.1-0.1~deb13u1.dsc
 b87921e3f3d836f8d5280678912ca8a88a20afb066173402d91d8178fb160278 2993636 rhi=
no_1.7.15.1.orig.tar.xz
 52ab92f6ebf34a2e7f228dc5dc5870295be3b235a51ddd42ffc67969bd7e2c52 17204 rhino=
_1.7.15.1-0.1~deb13u1.debian.tar.xz
Files:
 e0e5aa6b09a7c1be401c241fa74cac59 2085 interpreters optional rhino_1.7.15.1-0=
.1~deb13u1.dsc
 9dafbad6234145d16c3c649760574b03 2993636 interpreters optional rhino_1.7.15.=
1.orig.tar.xz
 ebffd7bf609e60593c1e13556ba2175a 17204 interpreters optional rhino_1.7.15.1-=
0.1~deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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3D
=3Dzu81
-----END PGP SIGNATURE-----


--===============0633374272496317908==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCakjaXgAKCRCb9qggYcy5
IT7WAP9WctpHlD8Sr+r2lshLCrdix+0GW1zLSNAEVTxGUU7TnwEA02oSEPquD+5f
kD72IX1IcYT6u4C33Q/e3Rw1tyaq3QU=
=46tg
-----END PGP SIGNATURE-----

--===============0633374272496317908==--
]