Having the old, patched SpiderMonkey should be avoided but it may still be accepted. The Security Team must be notified:
http://wiki.debian.org/EmbeddedCodeCopies -- Pau Garcia i Quiles http://www.elpauer.org (Due to my workload, I may need 10 days to answer)
