Ubuntu
mozjs102 package

mozjs102 102.11.0-1 source package in Ubuntu

Changelog

mozjs102 (102.11.0-1) unstable; urgency=high

  * New upstream release (LP: #2018905)
    - CVE-2023-32205: Browser prompts could have been obscured by popups
    - CVE-2023-32206: Crash in RLBox Expat driver
    - CVE-2023-32207: Potential permissions request bypass via clickjacking
    - CVE-2023-32211: Content process crash due to invalid wasm code
    - CVE-2023-32212: Potential spoof due to obscured address bar
    - CVE-2023-32213: Potential memory corruption in FileReader::DoReadData()
    - CVE-2023-32214: Potential DoS via exposed protocol handlers
    - CVE-2023-32215: Memory safety bugs

 -- Jeremy Bícha <email address hidden>  Mon, 08 May 2023 11:59:12 -0400

Upload details

Uploaded by:
Debian GNOME Maintainers
Uploaded to:
Sid
Original maintainer:
Debian GNOME Maintainers
Architectures:
any
Section:
misc
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mozjs102_102.11.0-1.dsc 2.2 KiB 89d5cf347fe4cf0cf4986bf7ed25fd2888fba27c3bfc6bb6299279872278d494
mozjs102_102.11.0.orig.tar.xz 138.9 MiB c99ae985dfd1c8ec681d1156b520347f2bfa61f87cd8ab1969914b22fad760ff
mozjs102_102.11.0-1.debian.tar.xz 52.4 KiB 675417b3504d06815bab7867df8ab62e46fec59064135d247b162f78fbba9583

Available diffs

No changes file available.

Binary packages built by this source

libmozjs-102-0: SpiderMonkey JavaScript library

 SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of
 JavaScript. It is intended to be embedded in other applications
 that provide host environments for JavaScript.
 .
 This library is intended for use in contexts where only trusted
 JavaScript code will be run, such as GNOME's gjs, Cinnamon's cjs, and
 polkit's rules parsing. It should not be used to run untrusted JavaScript
 from web pages: use a security-supported implementation such as Firefox,
 Chrome or WebKitGTK's JavaScriptCore instead.

libmozjs-102-0-dbgsym: debug symbols for libmozjs-102-0
libmozjs-102-dev: SpiderMonkey JavaScript library - development headers

 SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of
 JavaScript. It is intended to be embedded in other applications
 that provide host environments for JavaScript.
 .
 This package contains the header files which are
 needed for developing SpiderMonkey embedders.
 .
 This library is intended for use in contexts where only trusted
 JavaScript code will be run, such as GNOME's gjs, Cinnamon's cjs, and
 polkit's rules parsing. It should not be used to run untrusted JavaScript
 from web pages: use a security-supported implementation such as Firefox,
 Chrome or WebKitGTK's JavaScriptCore instead.

libmozjs-102-dev-dbgsym: debug symbols for libmozjs-102-dev