After talking to seb128 and 3v1n0, it turns out we actually did a proper MIR for mozjs in the past and should consider this as a normal version bump that doesn't need a full MIR as this is still based on the same source.
https://bugs.launchpad.net/ubuntu/+source/mozjs38/+bug/1683937 https://wiki.ubuntu.com/SecurityTeam/FAQ#mozjs
After talking to seb128 and 3v1n0, it turns out we actually did a proper MIR for mozjs in the past and should consider this as a normal version bump that doesn't need a full MIR as this is still based on the same source.
https:/ /bugs.launchpad .net/ubuntu/ +source/ mozjs38/ +bug/1683937 /wiki.ubuntu. com/SecurityTea m/FAQ#mozjs
https:/