mozjs140_140.7.0-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Jan 2026 14:18:54 -0500
Source: mozjs140
Built-For-Profiles: noudeb
Architecture: source
Version: 140.7.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha at ubuntu.com>
Changes:
 mozjs140 (140.7.0-1) unstable; urgency=high
 .
   * New upstream release
     - CVE-2026-0884: Use-after-free in the JavaScript Engine component
     - CVE-2026-0885: Use-after-free in the JavaScript GC component
     - CVE-2026-0891: Memory safety bugs
   * Remove three patches that are no longer needed.
     One is for armel which has been unable to build mozjs for a while, the
     other two are for mips* and ia64 which aren't used in Debian any more.
     Technically, the mips patch is useful for underpowered build machines
     but it doesn't appear there are any building mozjs currently.
     It's also from 4 years ago so hopefully machines have more RAM now.
Checksums-Sha1:
 7645012ee0489f16504669f30bb53f5928c2c2a7 2409 mozjs140_140.7.0-1.dsc
 1c0bed29a5a41312e2a99b5f1c1521dda609bf0f 199952824 mozjs140_140.7.0.orig.tar.xz
 7632a6b7fb3174b36440dc995d51997a0279826c 53560 mozjs140_140.7.0-1.debian.tar.xz
 28beb824e4bf69878c3c2ae7b3699eeaf043ebe9 8100 mozjs140_140.7.0-1_source.buildinfo
Checksums-Sha256:
 e6a9a7475e80557fe1b30089e607159fa196a81158a49ef30c5bb26fb2262ff8 2409 mozjs140_140.7.0-1.dsc
 34ff126960cffc91a233dd751cd0bf39943cc1494bcdf45474ac487c3782a5ca 199952824 mozjs140_140.7.0.orig.tar.xz
 42a7760e50dfae8200fedb58d72b9d7bb635d76aa4c6a9edec31f6ed0500d5dc 53560 mozjs140_140.7.0-1.debian.tar.xz
 4843bdd83db447ba402cdecbdda55411817bb244429abc0886a42f69fb934807 8100 mozjs140_140.7.0-1_source.buildinfo
Files:
 ef4f6f4164ef68a4aed75c7e2b7022a9 2409 libs optional mozjs140_140.7.0-1.dsc
 c8e3c14ab071abaad97e42348fd27434 199952824 libs optional mozjs140_140.7.0.orig.tar.xz
 52927ba7c634b69d40d314a1fc5317c6 53560 libs optional mozjs140_140.7.0-1.debian.tar.xz
 368604868680da177c99eb10465e20d5 8100 libs optional mozjs140_140.7.0-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=NefR
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20260123/bdaebe88/attachment.sig>