*** This bug is a security vulnerability ***

Public security bug reported:

Impact
------
mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by 
gjs to power GNOME Shell and some GNOME apps.

I looked through
https://github.com/mozilla/gecko-dev/commits/esr91/js
and searched for referenced bug numbers in
https://www.mozilla.org/en-US/security/advisories/
for Firefox ESR releases since Ubuntu's 91.10

Testing Done
------------
TODO

Other Info
----------
We probably need to rebuild gjs at the same time to avoid 
https://bugs.debian.org/1017063

This is the final mozjs91 release
https://wiki.mozilla.org/Release_Management/Calendar

Packaging is maintained at
https://salsa.debian.org/gnome-team/mozjs/-/tree/ubuntu/91/jammy

** Affects: mozjs91 (Ubuntu)
     Importance: Undecided
         Status: Triaged

** Affects: mozjs91 (Ubuntu Jammy)
     Importance: Undecided
         Status: Incomplete


** Tags: jammy upgrade-software-version

** Also affects: mozjs91 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Changed in: mozjs91 (Ubuntu Jammy)
       Status: New => Triaged

** Description changed:

  Impact
  ------
  mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by 
gjs to power GNOME Shell and some GNOME apps.
  
  I looked through
  https://github.com/mozilla/gecko-dev/commits/esr91/js
  and searched for referenced bug numbers in
  https://www.mozilla.org/en-US/security/advisories/
  for Firefox ESR releases since Ubuntu's 91.10
  
- 
  Testing Done
  ------------
  TODO
  
  Other Info
  ----------
+ We probably need to rebuild gjs at the same time to avoid 
https://bugs.debian.org/1017063
+ 
  This is the final mozjs91 release
  https://wiki.mozilla.org/Release_Management/Calendar
  
  Packaging is maintained at
  https://salsa.debian.org/gnome-team/mozjs/-/tree/ubuntu/91/jammy

** Changed in: mozjs91 (Ubuntu Jammy)
       Status: Triaged => Incomplete

** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to mozjs91 in Ubuntu.
https://bugs.launchpad.net/bugs/1987325

Title:
  Update mozjs91 to 91.13.0

Status in mozjs91 package in Ubuntu:
  Triaged
Status in mozjs91 source package in Jammy:
  Incomplete

Bug description:
  Impact
  ------
  mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by 
gjs to power GNOME Shell and some GNOME apps.

  I looked through
  https://github.com/mozilla/gecko-dev/commits/esr91/js
  and searched for referenced bug numbers in
  https://www.mozilla.org/en-US/security/advisories/
  for Firefox ESR releases since Ubuntu's 91.10

  Testing Done
  ------------
  TODO

  Other Info
  ----------
  We probably need to rebuild gjs at the same time to avoid 
https://bugs.debian.org/1017063

  This is the final mozjs91 release
  https://wiki.mozilla.org/Release_Management/Calendar

  Packaging is maintained at
  https://salsa.debian.org/gnome-team/mozjs/-/tree/ubuntu/91/jammy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mozjs91/+bug/1987325/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to