Ubuntu
firefox package

Firefox 78 requires nodejs >= 10.21

Bug #1882185 reported by Rico Tzschichholz on 2020-06-05

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	firefox (Ubuntu)	Triaged	High	Unassigned
	nodejs (Ubuntu)	Fix Released	High	Olivier Tilloy

Bug Description

Firefox 78 RC week starts at 22th June 2020 with a bumped nodejs requirement to 10.21 (https://bugzilla.mozilla.org/show_bug.cgi?id=1641863).

https://hg.mozilla.org/releases/mozilla-beta/rev/2e5f70995d3a

See original description

Revision history for this message

Rico Tzschichholz (ricotz) wrote on 2020-06-05:

Focal and Groovy are still providing nodejs 10.x only while the nodejs-mozilla is 12.x in Eoan and earlier.

An update to nodejs 12.18.0 is needed here to match the 10.21.0 release.

https://nodejs.org/en/download/releases/

Olivier Tilloy (osomon) on 2020-06-08

Changed in firefox (Ubuntu):
status:	New → Triaged
importance:	Undecided → High

Rico Tzschichholz (ricotz) on 2020-06-17

summary:	- Firefox 79 requires nodejs >= 10.21 + Firefox 78 requires nodejs >= 10.21
description:	updated

Revision history for this message

Rico Tzschichholz (ricotz) wrote on 2020-06-17:

Debian provides the updated nodejs versions for a merge -- https://tracker.debian.org/pkg/nodejs

10.21.0 and 12.18.0 are fixing several CVE issues.

https://nodejs.org/en/blog/

Revision history for this message

Olivier Tilloy (osomon) wrote on 2020-06-19:

nodejs-groovy.debdiff.gz Edit (23.1 MiB, text/plain)

I'm attaching a debdiff for nodejs 12.18.0 in Groovy (merging the version from unstable), please sponsor.

Changed in nodejs (Ubuntu):
status:	New → In Progress
assignee:	nobody → Olivier Tilloy (osomon)
importance:	Undecided → High

Revision history for this message

Gianfranco Costamagna (costamagnagianfranco) wrote on 2020-06-23:

Uploaded with some little changes, such as:
- keep PYTHON=python2 exported in rules file (not sure if still needed, but better safe than sorry)
- revert the node-acorn change in dependencies, it looks like not needed anymore since now acorn provides it correctly.

Revision history for this message

Launchpad Janitor (janitor) wrote on 2020-08-30:

This bug was fixed in the package nodejs - 12.18.2~dfsg-1ubuntu2

---------------
nodejs (12.18.2~dfsg-1ubuntu2) groovy; urgency=medium

  * debian/patches/3f071e3.patch:
  * debian/patches/1a9c676a141b32483b48884f8cc0330e64c8e17f.patch:
    - cherry-pick two upstream changes in v8 to fix a testsuite failure on
      ppc64el for some sha1 calculation errors (LP: #1887144)

-- Gianfranco Costamagna <email address hidden> Wed, 19 Aug 2020 20:47:23 +0200