*** This bug is a security vulnerability *** Public security bug reported:
Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.10 Testing Done ------------ TODO Other Info ---------- We probably need to rebuild gjs at the same time to avoid https://bugs.debian.org/1017063 This is the final mozjs91 release https://wiki.mozilla.org/Release_Management/Calendar Packaging is maintained at https://salsa.debian.org/gnome-team/mozjs/-/tree/ubuntu/91/jammy ** Affects: mozjs91 (Ubuntu) Importance: Undecided Status: Triaged ** Affects: mozjs91 (Ubuntu Jammy) Importance: Undecided Status: Incomplete ** Tags: jammy upgrade-software-version ** Also affects: mozjs91 (Ubuntu Jammy) Importance: Undecided Status: New ** Changed in: mozjs91 (Ubuntu Jammy) Status: New => Triaged ** Description changed: Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.10 - Testing Done ------------ TODO Other Info ---------- + We probably need to rebuild gjs at the same time to avoid https://bugs.debian.org/1017063 + This is the final mozjs91 release https://wiki.mozilla.org/Release_Management/Calendar Packaging is maintained at https://salsa.debian.org/gnome-team/mozjs/-/tree/ubuntu/91/jammy ** Changed in: mozjs91 (Ubuntu Jammy) Status: Triaged => Incomplete ** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to mozjs91 in Ubuntu. https://bugs.launchpad.net/bugs/1987325 Title: Update mozjs91 to 91.13.0 Status in mozjs91 package in Ubuntu: Triaged Status in mozjs91 source package in Jammy: Incomplete Bug description: Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.10 Testing Done ------------ TODO Other Info ---------- We probably need to rebuild gjs at the same time to avoid https://bugs.debian.org/1017063 This is the final mozjs91 release https://wiki.mozilla.org/Release_Management/Calendar Packaging is maintained at https://salsa.debian.org/gnome-team/mozjs/-/tree/ubuntu/91/jammy To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mozjs91/+bug/1987325/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp

