On 5/11/19 1:29 AM, Xi Ruoyao via blfs-dev wrote:
Hi folks,

Now BLFS is using mozjs-60 package from ftp.gnome.org.  But it's the "original"
mozjs-60.1.0 without any update.  Arch is now using latest mozjs-60.6.3, even
Ubuntu is using a newer mozjs-60.2.3.

I downloaded Firefox ESR 60.6.3 code and removed everything unrelated to JS
engine I could find.  Then I built and installed mozjs-60.6.3 into my system.  I
found my GNOME was broken but I could rebuild Gjs to fix it.

The extracted mozjs-60.6.3 tarball (it's just a Firefox tarball with many
directories removed) has been uploaded to:

http://www.linuxfromscratch.org/~xry111/mozjs-60.6.3.tar.xz

Now, is it worthy to update mozjs-60 version in BLFS book, following Firefox ESR
60?

I honestly think we should keep it the same version. Based off the fact that GJS needs to be recompiled, I feel it is too much work to implement because users will install it, most likely not read any warnings, and then write to the lists. That'll cause extra noise where all we can say is "FBBG, READ".

Is there a changelog? if so, can you find any security fixes in there (look for CVE numbers)?

--
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to