Activity log for bug #1978961

Date Who What changed Old value New value Message
2022-06-16 13:52:59 Jeremy Bícha bug added bug
2022-06-16 13:53:08 Jeremy Bícha mozjs91 (Ubuntu): status New Incomplete
2022-06-16 13:53:26 Jeremy Bícha cve linked 2022-28285
2022-06-16 13:53:39 Jeremy Bícha cve linked 2022-31740
2022-06-16 13:56:55 Jeremy Bícha description Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.7 and found two bugs. There may be other security-relevant bug fixes in the new version. Testing Done ------------ I completed a build test. Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.7 and found two bugs. There may be other security-relevant bug fixes in the new version. This update also fixes a build test failure that would have interfered with other security or bugfix updates. LP: #1976260 Testing Done ------------ I completed a build test. Other Info ---------- The final mozjs91 release is expected in late August: https://wiki.mozilla.org/Release_Management/Calendar
2022-06-16 14:17:22 Jeremy Bícha description Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.7 and found two bugs. There may be other security-relevant bug fixes in the new version. This update also fixes a build test failure that would have interfered with other security or bugfix updates. LP: #1976260 Testing Done ------------ I completed a build test. Other Info ---------- The final mozjs91 release is expected in late August: https://wiki.mozilla.org/Release_Management/Calendar Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.7 and found two bugs. There may be other security-relevant bug fixes in the new version. This update also fixes a build test failure that would have interfered with other security or bugfix updates. LP: #1976260 Testing Done ------------ I completed a build test. I successfully logged into the default Ubuntu session (uses GNOME Shell) on Ubuntu 22.04 LTS with the updated mozjs91 and ran a few GJS apps (GNOME Characters, GNOME Weather). Other Info ---------- The final mozjs91 release is expected in late August: https://wiki.mozilla.org/Release_Management/Calendar
2022-06-16 14:17:56 Jeremy Bícha mozjs91 (Ubuntu): status Incomplete Confirmed
2022-06-16 14:18:39 Jeremy Bícha attachment added mozjs91-lp1978961.debdiff https://bugs.launchpad.net/ubuntu/+source/mozjs91/+bug/1978961/+attachment/5597741/+files/mozjs91-lp1978961.debdiff
2022-06-16 14:19:15 Jeremy Bícha bug added subscriber Ubuntu Security Sponsors Team
2022-06-16 14:19:33 Jeremy Bícha description Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.7 and found two bugs. There may be other security-relevant bug fixes in the new version. This update also fixes a build test failure that would have interfered with other security or bugfix updates. LP: #1976260 Testing Done ------------ I completed a build test. I successfully logged into the default Ubuntu session (uses GNOME Shell) on Ubuntu 22.04 LTS with the updated mozjs91 and ran a few GJS apps (GNOME Characters, GNOME Weather). Other Info ---------- The final mozjs91 release is expected in late August: https://wiki.mozilla.org/Release_Management/Calendar Impact ------ mozjs91 is the SpiderMonkey JavaScript engine from Firefox ESR. It is used by gjs to power GNOME Shell and some GNOME apps. I looked through https://github.com/mozilla/gecko-dev/commits/esr91/js and searched for referenced bug numbers in https://www.mozilla.org/en-US/security/advisories/ for Firefox ESR releases since Ubuntu's 91.7 and found two bugs. There may be other security-relevant bug fixes in the new version. This update also fixes a build test failure that would have interfered with other security or bugfix updates. LP: #1976260 Testing Done ------------ I completed a build test. I successfully logged into the default Ubuntu session (uses GNOME Shell) on Ubuntu 22.04 LTS with the updated mozjs91 and ran a few GJS apps (GNOME Characters, GNOME Weather). Other Info ---------- The final mozjs91 release is expected in late August: https://wiki.mozilla.org/Release_Management/Calendar Packaging is maintained at https://salsa.debian.org/gnome-team/mozjs/-/tree/ubuntu/91/jammy
2022-06-27 11:43:26 Launchpad Janitor mozjs91 (Ubuntu): status Confirmed Fix Released