[Pkg-javascript-devel] vega.js_5.33.1+ds+~cs5.3.0-4_sourceonly.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Apr 2026 21:24:58 +0200
Source: vega.js
Architecture: source
Version: 5.33.1+ds+~cs5.3.0-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel at lists.alioth.debian.org>
Changed-By: Xavier Guimard <yadd at debian.org>
Closes: 1125183 1125184
Changes:
 vega.js (5.33.1+ds+~cs5.3.0-4) unstable; urgency=medium
 .
   * Fix XSS in vega-interpreter (Closes: #1125183, CVE-2025-59840)
   * Fix XSS in vega-selections (Closes: #1125184, CVE-2025-65110)
Checksums-Sha1: 
 f6779659aa4118840c36342b73afb443b4ff3a18 3477 vega.js_5.33.1+ds+~cs5.3.0-4.dsc
 2d8bcf1d1d4945563b45aa3e0bf345ebb9b979c2 10380 vega.js_5.33.1+ds+~cs5.3.0-4.debian.tar.xz
Checksums-Sha256: 
 01f299ed8b1229fe3378a7adc143771c19285fee0f550a79cc0afdd5159e6fdb 3477 vega.js_5.33.1+ds+~cs5.3.0-4.dsc
 2bb96aff6fe8a70517df5f151acfe4a7360207cc23b66107717ce939b012cdf6 10380 vega.js_5.33.1+ds+~cs5.3.0-4.debian.tar.xz
Files: 
 0d0eb3ce0aafea73f82f3ff295629dd3 3477 javascript optional vega.js_5.33.1+ds+~cs5.3.0-4.dsc
 0bda13351a9ab695f2e5ff3ddde0828c 10380 javascript optional vega.js_5.33.1+ds+~cs5.3.0-4.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=YvKM
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20260405/b5b02253/attachment.sig>