Bug#1111591: mozjs128: update to 128.14.0

Jeremy Bicha jeremy at bicha.net
Tue Aug 19 20:21:01 BST 2025


Source: mozjs128
Version: 128.13.0-1
Severity: important
Tags: trixie forky sid

The final scheduled mozjs128 release, 128.14.0, was released today
with some security fixes.

mozjs128 is only used by gjs (for GNOME Shell and several GNOME apps)
and cjs (for Cinnamon). Practically, I am not aware of any Firefox
CVEs ever being used to attack the desktop via gjs or cjs. Notably,
debian-security-support says about mozjs128 "Not covered by security
support, only suitable for trusted content". Therefore, updates for
mozjs* are handled via regular updates.

https://salsa.debian.org/debian/debian-security-support/-/blob/master/security-support.deb13#L30

https://whattrainisitnow.com/calendar/

Thank you,
Jeremy Bícha



More information about the pkg-gnome-maintainers mailing list