[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

** No longer affects: mozjs102 (Ubuntu) ** No longer affects: mozjs102 (Ubuntu Jammy) ** No longer affects: mozjs102 (Ubuntu Kinetic) ** Summary changed: - [jammy] Update gjs to 1.74 using mozjs102 102.3 + [jammy] Update gjs to 1.74 using mozjs102 ** Description changed: Impact --

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Per comment #8, I think this should still be blocked on bug 1994010 or else we risk jammy getting flooded with that crash like kinetic still is: https://errors.ubuntu.com/?release=Ubuntu%2022.10=gnome- shell=week -- You received this bug notification because you are a member of Desktop Packages,

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

This appears to be covered by the GNOME SRU exception. However, the bug description does not reference this exception, and also does not follow the template at . Please update accordingly. ** Changed in: gjs (Ubuntu Jammy)

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

The version of gjs in the proposed pocket of Jammy that was purported to fix this bug report has been removed because one or more bugs that were to be fixed by the upload have failed verification and been in this state for more than 10 days. ** Tags removed: verification-needed-jammy ** Changed

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

I am dropping block-proposed-kinetic because Kinetic already has the increased crash rate. ** Tags removed: block-proposed-kinetic -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1993214

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Given comment #12, I'm adding a block-proposed tag to this bug. Is this something we could use to improve the test plan of this package by any chance? Since it seems to have introduced crashes on kinetic. ** Tags added: block-proposed-jammy ** Tags added: block-proposed-kinetic -- You received

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

We are not going to release these yet, we are blocked on comment #8. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1993214 Title: [jammy] Update gjs to 1.74 using mozjs102 102.3 Status

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

@mdeslaur yes, basically all stable-series daily builds always build with -proposed enabled. The reason for that is that we want people to be able to test proposed updates in images in case its needed for validation. We always enable -proposed for those as one of the steps *after* we release an

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

The image builds are pulling in -proposed? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1993214 Title: [jammy] Update gjs to 1.74 using mozjs102 102.3 Status in gjs package in Ubuntu:

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Apparently since we switched to mozjs102, the jammy image builds FTBFS because mozjs102 is in universe. I see it's in main for all the other series so after a few checks I'll promote it to main in jammy. -- You received this bug notification because you are a member of Desktop Packages, which is

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

I think bug 1994010 should be fixed before this proceeds. It's the top gnome-shell crash on kinetic by a long way and looks likely to spread to jammy if gjs and mozjs get upgraded. https://errors.ubuntu.com/?release=Ubuntu%2022.10=gnome- shell=week I mentioned this on mattermost a week ago but

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

I installed gjs 1.74.0-0ubuntu1 (which pulled in libmozjs-102-0) on Ubuntu 22.04 LTS and successfully completed Test Case 1 and Test Case 2 from https://wiki.ubuntu.com/DesktopTeam/TestPlans/gjs I installed libmozjs-102-0 102.6.0-0ubuntu0.22.10.1 on Ubuntu 22.10 and successfully completed Test

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

** Changed in: mozjs102 (Ubuntu) Status: Confirmed => Fix Released ** Changed in: gjs (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gjs in Ubuntu.

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Hello Jeremy, or anyone else affected, Accepted mozjs102 into kinetic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mozjs102/102.6.0-0ubuntu0.22.10.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package.

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Hello Jeremy, or anyone else affected, Accepted gjs into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/gjs/1.74.0-0ubuntu1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Hello Jeremy, or anyone else affected, Accepted mozjs102 into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/mozjs102/102.6.0-0ubuntu0.22.04.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package.

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

mozjs102 and gjs packages have been uploaded for jammy, and mozjs102 for kinetic, into the security team PPA here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages Once they are finished building, they can be pocket-copied by an archive admin into the -proposed

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Marc, 102.6 was officially released today, so I've gone ahead and updated my jammy mozjs branch for it. I added the CVEs you mentioned and found one more I found from 102.4. I don't see any new ones for 102.6 I've also created a ubuntu/102/kinetic branch for mozjs102 for kinetic. Since it doesn't

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

Looks like a few more CVEs have been published between 102.3 in karmic and 102.5 in lunar: 102.4 CVE-2022-42928 bug 1791520 102.5 CVE-2022-45406 bug 1791975 102.5 CVE-2022-45409 bug 1796901 Perhaps we should move to 102.5? I have to admit, bumping to a new major release of mozjs sounds risky.

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

** Description changed: Impact -- GNOME Shell uses the SpiderMonkey JavaScript engine from Firefox ESR (mozjs). Firefox 92 ESR has reached end of life; therefore, we should switch to the 102 ESR series for security updates for the next year. This requires updating gjs from 1.72

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

** Description changed: Impact -- GNOME Shell uses the SpiderMonkey JavaScript engine from Firefox ESR (mozjs). Firefox 92 ESR has reached end of life; therefore, we should switch to the 102 ESR series for security updates for the next year. This requires updating gjs from 1.72

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

** Description changed: Impact -- GNOME Shell uses the SpiderMonkey JavaScript engine from Firefox ESR (mozjs). Firefox 92 ESR has reached end of life; therefore, we should switch to the 102 ESR series for security updates for the next year. This requires updating gjs from 1.72

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

** Description changed: Impact -- GNOME Shell uses the SpiderMonkey JavaScript engine from Firefox ESR (mozjs). Firefox 92 ESR has reached end of life; therefore, we should switch to the 102 ESR series for security updates for the next year. This requires updating gjs from 1.72

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

** Description changed: Impact -- GNOME Shell uses the SpiderMonkey JavaScript engine from Firefox ESR (mozjs). Firefox 92 ESR has reached end of life; therefore, we should switch to the 102 ESR series for security updates for the next year. This requires updating gjs from 1.72