Bug#1035931: cjs: Please don't use mozjs78

2023-05-17 Thread Jeremy Bícha
On Wed, May 17, 2023 at 4:18 PM Bastian Germann  wrote:
> On Thu, 11 May 2023 07:24:34 -0400 =?UTF-8?Q?Jeremy_B=C3=ADcha?= 
>  wrote:
> > cjs uses mozjs78. mozjs78 is the SpiderMonkey JavaScript engine from
> > Firefox 78 ESR. Firefox 78 ESR received monthly security updates until
> > October 2021. Since mozjs78 is no longer supported, please switch to
> > mozjs102.
> >
> > This was done upstream recently in the (still unreleased) 5.7.
> >
> > https://github.com/linuxmint/cjs/commits/master
>
> This is tagged as https://github.com/linuxmint/cjs/releases/tag/master.mint21 
> so maybe this is worth importing now?
> It would be nice to get rid of the old mozjs78 with bookworm.

It is very late for a change like this to make it into Bookworm. But
if the Debian Cinnamon maintainers feel comfortable with the change,
they can talk to the Debian Release Team (and maybe the Security Team)
about it.

Thank you,
Jeremy Bícha



Bug#1035931: cjs: Please don't use mozjs78

2023-05-11 Thread Jeremy Bícha
Source: cjs
Version: 5.6.0-1
Severity: serious
Tags: security sid

cjs uses mozjs78. mozjs78 is the SpiderMonkey JavaScript engine from
Firefox 78 ESR. Firefox 78 ESR received monthly security updates until
October 2021. Since mozjs78 is no longer supported, please switch to
mozjs102.

This was done upstream recently in the (still unreleased) 5.7.

https://github.com/linuxmint/cjs/commits/master

Thank you,
Jeremy Bícha