Change log for xulrunner package in Debian

153 of 53 results
Published in wheezy-release
xulrunner (24.8.1esr-2~deb7u1) stable-security; urgency=medium


  * debian/control*, debian/extra-stuff/Makefile.in,
    debian/installer/Makefile.in, debian/rules, debian/upstream.mk,
    debian/noinstall.in: Only build xulrunner.
  * debian/branding/*, debian/browser.*, debian/debsearch.xml,
    debian/duckduckgo.xml, debian/firefox.in,
    debian/installer/package-manifest.browser, debian/l10n.filter,
    debian/l10n/*, debian/source/include-binaries, debian/vendor.js.in:
    Removed.
  * debian/patches: Unapplied and removed iceweasel-specific patches.

 -- Mike Hommey <email address hidden>  Sat, 25 Oct 2014 15:08:25 +0900
Published in lenny-release
xulrunner (1.9.0.19-16) oldstable-security; urgency=low


  * Fixes for mfsa-2012-{01,02,08}, also known as
    CVE-2012-0442, CVE-2011-3670, CVE-2012-0449.

 -- Mike Hommey <email address hidden>  Wed, 01 Feb 2012 00:43:36 +0100
Superseded in lenny-release
xulrunner (1.9.0.19-13) oldstable-security; urgency=low


  * Fixes for mfsa2011-30, including:
    CVE-2011-2982, CVE-2011-2981, CVE-2011-2378, CVE-2011-2984,
    CVE-2011-2983.
  * Fixes another cookie regression from the previous cookie regression
    fix.

 -- Mike Hommey <email address hidden>  Mon, 15 Aug 2011 14:34:43 +0200
Superseded in lenny-release
xulrunner (1.9.0.19-7) stable-security; urgency=low
  * Fixes for mfsa2010-{74-77,79,81-82,84}, also known as    CVE-2010-3776, CVE-2010-3778, CVE-2010-3769, CVE-2010-3771,    CVE-2010-3772, CVE-2010-3775, CVE-2010-3767, CVE-2010-3773,    CVE-2010-3770  * Fix for one more regression from CVE-2010-2769.  * debian/libmozjs1d.symbols: Add new symbol. -- Mike Hommey <email address hidden>  Wed, 08 Dec 2010 10:23:44 +0100
Superseded in lenny-release
xulrunner (1.9.0.19-6) stable-security; urgency=low
  * Fixes for mfsa2010-{64-69,73}, also known as    CVE-2010-3176, CVE-2010-3174, CVE-2010-3179, CVE-2010-3180,    CVE-2010-3183, CVE-2010-3177, CVE-2010-3178, CVE-2010-3765.  * Fix for mfsa2010-71 aka CVE-2010-3182, which only applies to    applications using run-mozilla.sh (e.g. not iceweasel)  * Fixes for regressions from CVE-2010-0654 and CVE-2010-2769. -- Mike Hommey <email address hidden>  Thu, 28 Oct 2010 11:15:04 +0200
Superseded in lenny-release
xulrunner (1.9.0.19-3) stable-security; urgency=low


  * Fixes for mfsa2010-{24,34-35,37,40-41,45-47}, also known as
    CVE-2010-0182, CVE-2010-1211, CVE-2010-1208, CVE-2010-1214,
    CVE-2010-2753, CVE-2010-1205, CVE-2010-2751, CVE-2010-0654,
    CVE-2010-2754.

 -- Mike Hommey <email address hidden>  Tue, 20 Jul 2010 23:53:41 +0200
Deleted in experimental-release (Reason: None provided.)
xulrunner (1.9.2.8-1) experimental; urgency=low


  * New upstream release.
  * Fixes mfsa-2010-48, also known as CVE-2010-2755.
  * js/src/nanojit/njcpudetect.h: Add missing detection for armv4t.

 -- Mike Hommey <email address hidden>  Wed, 28 Jul 2010 10:22:31 +0000
Superseded in experimental-release
xulrunner (1.9.2.7-1) experimental; urgency=high


  * New upstream release.
  * Fixes mfsa-2010-{34-47}, also known as
    CVE-2010-1211, CVE-2010-1212, CVE-2010-1208, CVE-2010-1209,
    CVE-2010-1214, CVE-2010-1215, CVE-2010-2752, CVE-2010-2753,
    CVE-2010-1205, CVE-2010-1213, CVE-2010-1207, CVE-2010-1210,
    CVE-2010-2751, CVE-2010-0654, CVE-2010-2754.

  * debian/control*:
    - Add build-depends on libglib2.0-dev (>= 2.18.0) for filemonitor.
      Closes: #587636.
    - Bump libnss build-depends to fit what configure is looking for.
      Closes: #587637.
    - Remove conflict/replace for very old packages.
    - Bump Standards-Version to 3.9.0.0.
    - Fit the Uploaders field to reality.
  * debian/mozconfig.in, debian/rules: Check if mozconfig system library
    options will properly set the right variables. Closes: #587639
  * debian/reftest-app/application.ini: Set a MaxVersion in our reftest-app
    application.ini.
  * debian/extra-stuff/Makefile.in: Use Preprocessor.py instead of
    preprocessor.pl in debian/extra-stuff.
  * debian/rules:
    - Only set -std=gnu++0x flag when using g++ 4.4+.
    - Don't install dependentlibs.list.
    - Bump shlibs.
  * debian/libmozjsSO_VERSION.symbols.in: Add new symbols.

  * xpcom/reflect/xptcall/src/md/unix/*ppc_linux*: Add support for powerpcspe.
    Closes: #586072.
  * xulrunner/installer/mozilla-plugin.pc.in: Fix mozilla-plugin.pc.in CFLAGS.
    Closes: #581384.
  * modules/plugin/Makefile.in: Build the test plugin on GNU/kfreebsd.

 -- Mike Hommey <email address hidden>  Wed, 21 Jul 2010 03:26:49 +0200
Deleted in squeeze-release (Reason: None provided.)
Deleted in sid-release (Reason: None provided.)
xulrunner (1.9.1.11-1) unstable; urgency=high


  * New upstream release.
  * Fixes mfsa-2010-{34-37,39-42,45-47}, also known as
    CVE-2010-1211, CVE-2010-1208, CVE-2010-1209, CVE-2010-1214,
    CVE-2010-2752, CVE-2010-2753, CVE-2010-1205, CVE-2010-1213,
    CVE-2010-2751, CVE-2010-0654, CVE-2010-2754.

  * debian/control*:
    - Add build-depends on libglib2.0-dev (>= 2.18.0) for filemonitor.
      Closes: #587636.
    - Bump libnss build-depends to fit what configure is looking for.
      Closes: #587637.
    - Remove conflict/replace for very old packages.
    - Bump Standards-Version to 3.9.0.0.
    - Fit the Uploaders field to reality.
  * debian/mozconfig.in, debian/rules: Check if mozconfig system library
    options will properly set the right variables. Closes: #587639
  * debian/reftest-app/application.ini: Set a MaxVersion in our reftest-app
    application.ini.
  * debian/extra-stuff/Makefile.in: Use Preprocessor.py instead of
    preprocessor.pl in debian/extra-stuff.
  * debian/python-xpcom.postinst: Run update-python-modules -p after
    python-xpcom installation so that xulrunner trigger doesn't choke.
    Closes: #582071.
  * debian/rules: Only set -std=gnu++0x flag when using g++ 4.4+.

  * xpcom/reflect/xptcall/src/md/unix/*ppc_linux*: Add support for powerpcspe.
    Closes: #586072.

 -- Mike Hommey <email address hidden>  Tue, 20 Jul 2010 23:42:15 +0200
Superseded in experimental-release
xulrunner (1.9.2.4-2) experimental; urgency=low


  * Import the sole change from new upstream release 1.9.2.6:
    - modules/libpref/src/init/all.js: Increase the OOPP hang timeout.

 -- Mike Hommey <email address hidden>  Mon, 28 Jun 2010 09:34:08 +0200
Superseded in lenny-release
xulrunner (1.9.0.19-1) stable-security; urgency=low


  * New upstream release.
  * Fixes mfsa-2010-{16-21}, also known as
    CVE-2010-0174, CVE-2010-0175, CVE-2010-0176, CVE-2010-0177,
    CVE-2010-0178, CVE-2010-0179.
  * modules/libpr0n/decoders/png/nsPNGDecoder.cpp: Fix breakage with png
    decoder update in 1.9.0.19.

 -- Mike Hommey <email address hidden>  Tue, 30 Mar 2010 22:45:04 +0200
Superseded in experimental-release
xulrunner (1.9.2.4-1) experimental; urgency=low


  * New upstream release.
  * Fixes mfsa-2010-{26,28-33}, also known as
    CVE-2010-1200, CVE-2010-1202, CVE-2010-1203, CVE-2010-1198,
    CVE-2010-1196, CVE-2010-1199, CVE-2010-1125, CVE-2010-1197,
    CVE-2008-5913.
    Closes: #532516

  * modules/libpr0n/encoders/png/nsPNGEncoder.cpp: Use png_set_filter to make
    libpng not use write filters. bz#564410.
  * netwerk/protocol/http/src/nsHttpChannel.cpp: Make sure to call
    OnStartRequest even if we're failing on an SSL CONNECT. bz#561536.
    Closes: #553635.
  * memory/jemalloc/jemalloc.c: Use syscall() for mmap and munmap, and disable
    ncpus use in jemalloc to work around deadlocks. Replaces the previous patch
    to use a small pool of static memory during initialization. bz#435683

  * debian/test.mk: Re-enable PNG xpcshell tests that were failing when using
    system library.

 -- Mike Hommey <email address hidden>  Wed, 23 Jun 2010 12:39:34 +0200
Superseded in squeeze-release
Superseded in sid-release
xulrunner (1.9.1.10-1) unstable; urgency=high


  * New upstream release.
  * Fixes mfsa-2010-{26-33}, also known as
    CVE-2010-1200, CVE-2010-1201, CVE-2010-1202, CVE-2010-0183,
    CVE-2010-1198, CVE-2010-1196, CVE-2010-1199, CVE-2010-1125,
    CVE-2010-1197, CVE-2008-5913.
    Closes: #532516

  * debian/rules: Strip symbols in the spidermonkey-bin package.
  * debian/control.*:
    - xulrunner-1.9.x needs to depend on a strict version of libmozjs.
      Closes: #580173.
    - libmozjs2d breaks older xulrunner-1.9.1. Closes: #580104.

  * modules/libpr0n/encoders/png/nsPNGEncoder.cpp: Use png_set_filter to make
    libpng not use write filters. bz#564410.
  * netwerk/protocol/http/src/nsHttpChannel.cpp: Make sure to call
    OnStartRequest even if we're failing on an SSL CONNECT. bz#561536.
    Closes: #553635.
  * memory/jemalloc/jemalloc.c: Use syscall() for mmap and munmap, and disable
    ncpus use in jemalloc to work around deadlocks. Replaces the previous patch
    to use a small pool of static memory during initialization. bz#435683

  * debian/test.mk: Re-enable PNG xpcshell tests that were failing when using
    system library.

 -- Mike Hommey <email address hidden>  Wed, 23 Jun 2010 11:48:22 +0200
Superseded in experimental-release
xulrunner (1.9.2.4~build2-3) experimental; urgency=low


  * debian/rules, debian/xulrunner-BASE_VERSION.install.in: Don't install
    plugin-container when building without ipc support.

 -- Mike Hommey <email address hidden>  Wed, 05 May 2010 08:54:37 +0200
Superseded in experimental-release
xulrunner (1.9.2.3-3) experimental; urgency=low


  * debian/control*, debian/rules: Don't include spidermonkey-bin debugging
    symbols in libmozjs-dbg. There is actually not much to be debugged in smjs
    itself, while the need to conflict with all other libmozjs-dbg packages is
    a big caveat. Closes: #579251.
  * debian/rules:
    - Disable necko wifi on unsupported platforms. Closes: #578463.
    - Build with -std=gnu++0x.

  * toolkit/xre/nsAppRunner.cpp:
    - KDE/Gnome startup notification not disappearing when app window is up.
      bz#416053. Closes: #562970.
    - KDE/Gnome startup notification not disappearing for the first time
      startup (needsRestart). bz#534845.
  * configure*: : Revert change to force not to use -fshort-wchar.
  * embedding/components/find/src/nsFind.cpp, layout/base/nsCSSRendering.cpp,
    layout/generic/nsTextFrameThebes.cpp,
    modules/libpr0n/decoders/jpeg/nsJPEGDecoder.cpp,
    modules/plugin/base/public/npruntime.h,
    xpcom/tests/TestEncoding.cpp: Fix compiler errors with g++ 4.4 with
    -std=gnu++0x of the form: error: narrowing conversion ... inside { }.
    bz#502301.
  * config/system-headers, js/src/config/system-headers: No need to put ffi.h
    in system-headers, it was already there.
  * modules/plugin/base/public/nsIPluginTag.idl,
    modules/plugin/base/src/nsPluginHost.*: Keep nsIPluginTag binary
    compatibility and add fullpath to a nsIPluginTag_1_9_2 interface.
  * debian/extra-stuff/addonsInfo.js, debian/extra-stuff/debUpdateNotifier.js:
    Use the nsIPluginTag_1_9_2 interface when available, in debian/extra-stuff
    components.
  * netwerk/streamconv/converters/nsBinHexDecoder.cpp: Additional fix for
    g++ 4.4 -std=gnu++0x errors. This fixes FTBFS on arm, ppc and s390.
  * xulrunner/installer/libxul-embedding.pc.in: Put -ldl in the proper field
    in libxul-embedding.pc.
  * xpcom/glue/nsStringAPI.h, xpcom/string/public/nsLiteralString.h,
    xpcom/base/nscore.h: Do build time detection of 2-bytes wchar_t and
    char16_t support. bz#559278. Closes: #577677.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in,
    xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_sh.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_linux_sh.cpp: Add xptcall
    support for SH4 processors. Closes: #553593. bz#382214.
    Thanks Nobuhiro Iwamatsu and others.
  * js/src/nanojit/NativeARM.cpp, js/src/nanojit/avmplus.h,
    js/src/nanojit/njcpudetect.h: Add nanojit support for ARMv4T. Thanks Albin
    Tonnerre for the initial patch. bz#552624. Fixes FTBFS on armel.
  * js/src/jsbit.h, js/src/jslog2.cpp, js/src/jstl.h: Change parameter type of
    JS_{CEILING,FLOOR}_LOG2W and js_FloorLog2wImpl to be JSSize. This fixes
    FTBFS on s390. bz#557270.
  * xpcom/threads/nsProcessCommon.cpp: Fix remaining race condition when
    calling nsProcess.Kill. bz#543441.
  * layout/base/tests/Makefile.in: Hack to avoid building and running
    TestPoisonArea for now. It currently fails to build on several
    architectures, and also freezes on others (at least arm), so we disable it
    until things are sorted out.

 -- Mike Hommey <email address hidden>  Sat, 01 May 2010 11:19:10 +0200
Superseded in sid-release
Superseded in squeeze-release
xulrunner (1.9.1.9-7) unstable; urgency=low


  * debian/control*, debian/rules: Don't include spidermonkey-bin debugging
    symbols in libmozjs-dbg. There is actually not much to be debugged in smjs
    itself, while the need to conflict with all other libmozjs-dbg packages is
    a big caveat. Closes: #579251.
  * debian/extra-stuff/addonsInfo.js, debian/extra-stuff/debUpdateNotifier.js:
    Use the nsIPluginTag_1_9_2 interface when available, in debian/extra-stuff
    components.

  * xpcom/reflect/xptcall/src/md/unix/Makefile.in,
    xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_sh.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_linux_sh.cpp: Add xptcall
    support for SH4 processors. Closes: #553593. bz#382214.
  * xpcom/threads/nsProcessCommon.cpp: Fix remaining race condition when
    calling nsProcess.Kill. bz#543441.

 -- Mike Hommey <email address hidden>  Sat, 01 May 2010 10:03:32 +0200
Superseded in experimental-release
xulrunner (1.9.2.3-2) experimental; urgency=low


  * debian/remove.nonfree: There are still some .cvsignore files in the
    upstream tarballs.
  * debian/extra-stuff/packages-static.xulrunner: Install debian.jar and
    debian.manifest ; without them, the upgrade notifier doesn't work.

 -- Mike Hommey <email address hidden>  Fri, 02 Apr 2010 20:55:13 +0200
Superseded in sid-release
xulrunner (1.9.1.9-3) unstable; urgency=low


  * debian/rules, debian/test.mk: Move reftest-app cleanup to debian/test.mk.
  * debian/python-xpcom.prerm.in: python-xpcom prerm needs to be pre-processed.
  * debian/remove.nonfree: There are still some .cvsignore files in the
    upstream tarballs.
  * debian/extra-stuff/packages-static.xulrunner: Install debian.jar and
    debian.manifest ; without them, the upgrade notifier doesn't work.

 -- Mike Hommey <email address hidden>  Fri, 02 Apr 2010 20:50:15 +0200
Superseded in sid-release
xulrunner (1.9.1.8-6) unstable; urgency=low


  * debian/extra-stuff/filemonitor/Makefile.in,
    debian/extra-stuff/packages-static.xulrunner,
    debian/xulrunner-BASE_VERSION.install.in,
    debian/extra-stuff/Makefile.in: Revert previous change to move Debian
    specific components into
    $GRE_DIR/distribution/bundles/debian/components.
  * toolkit/xre/nsXREDirProvider.*: Revert previous change to load
    distribution bundles from GRE directory, too. See bz#551132 comment #7.
  * extensions/java/xpcom/Makefile.in: Disable tests for javaxpcom.
  * debian/rules:
    - Change the way the test suite is called. At the same time, prepend
      test suite output with the test suite name, so that the various test
      results can be easily filtered.
    - Build javaxpcom jars whenever /usr/bin/javac can be found. This
      simplifies how the packages are built.
    - Do a global dh_testdir test instead of running it in individual rules.
  * js/src/nanojit/NativeARM.*: Fix ever-growing stack in JIT on ARM.
    bz#545747.
  * layout/reftests/first-letter/399941-[89]*.html: Don't fail reftest
    first-letter tests because of a background bug. bz#512487.
  * layout/svg/crashtests/crashtests.list: Skip 441368-1.svg crash test,
    as it triggers an almost infinite loop.
  * toolkit/components/downloads/test/unit/test_bug_406857.js: Don't block
    on test_bug_406857.js when example.com is not reachable. bz#553995.
    Closes: #571390.
  * storage/src/mozStorageService.cpp: Don't error-out when run-time
    libsqlite is older than build-time libsqlite In Debian, we have shlibs
    to handle this.
  * debian/rules, debian/reftest-app, debian/control: Run reftest and
    crashtest to get more code coverage on all architectures. Prepare for
    surprises.
  * layout/reftests/font-face/local-1*.html: Use Bitstream Vera as an
    alternative font in reftest font-face/local-1. bz#554029.
  * modules/libpr0n/test/reftest/apng/reftest.list: Disable apng reftest
    when apng support is not built.
  * modules/libpr0n/test/reftest/pngsuite-ancillary/reftest.list: Skip png
    tests that are known to fail. bz#471917.
  * layout/reftests/bugs/reftest.list: reftest 424074-1-ref2.xul passes
    depending on the gtk theme. bz#554036.
  * debian/control: Build depend on the fonts that are required for the
    reftests.
  * toolkit/components/search/nsSearchService.js: Download search engine
    icons when searchplugin is read-only. bz#554265.
  * debian/extra-stuff/debUpdateNotifier.js: Fall back to the application
    name as defined in application.ini when the application doesn't
    contain a brandShortName in its branding chrome.
  * debian/extra-stuff/Makefile.in, debian/extra-stuff/debUpdateNotifier.js,
    debian/extra-stuff/debUpdateNotifier.properties: Allow to localize the
    debUpdateNotifier popup message. At the same time, slightly reword the
    text to be more explicit about what is going to be restarted.
    Closes: #574160.
  * xulrunner/stub/nsXULStub.cpp: Resolve GRE directory symbolic link.
    bz#530196, bz#550659.
  * debian/xulrunner-BASE_VERSION.preinst.in: Remove the check for the
    chrome directory in /usr/lib/xulrunner-$VERSION It was only necessary
    in 1.9.0.x versions when it moved and was replaced by a symlink.

 -- Mike Hommey <email address hidden>  Wed, 24 Mar 2010 12:15:54 +0100
Superseded in squeeze-release
Superseded in sid-release
xulrunner (1.9.1.8-5) unstable; urgency=low


  * js/src/Makefile.in:
    - Simplify installation of nanojit headers.
    - DESTDIR support in js/src/Makefile.in. bz#482747.
    - Install js shell when running make install from js/src.
    - Install the .so symlink to the versioned library with make install.
  * configure.in, configure: Simplify how js/src/configure is called from
    main configure. bz#548273.
  * debian/rules: Use make install from js/src. This allows to install the
    js shell and C headers more easily.
  * debian/rules: Generate debhelper files before the install target.
  * debian/control.in, debian/control, debian/dh/dh_xulrunner.in: Don't rely
    on readelf -p in dh_xulrunner. Now rely on objdump -h, which should be
    available on stable and probably oldstable. This means we can lift the
    binutils dependencies.
    Note there was a binutils build dependency before, for a very old mips
    bug, but the required version was already in oldstable, so removing the
    build-dep altogether just works. Closes: #568888.
  * debian/*: Get the libmozjs SO version from js/src/Makefile.in and
    generate control files from it.
  * xpcom/glue/nsTArray.*, xpcom/glue/nsTPtrArray.h: Always align AutoArrays
    for 64-bits words, as decided with upstream.
  * debian/rules, debian/symbols.filter: Unconditionally filter any C++
    mangled symbol from libmozjs.
  * debian/rules, debian/xulrunner-BASE_VERSION.1.in: Add a (basic) manual
    page. Closes: #394567.
  * debian/control.in, debian/control:
    - Remove libkrb5-dev build dependency.
    - Don't conflict with newer pango-graphite. Closes: #572380.
  * debian/extra-stuff/Makefile.in, debian/extra-stuff/debAbout.js,
    debian/extra-stuff/packages-static.xulrunner, toolkit/content/about.dtd,
    toolkit/content/about.xhtml, toolkit/content/jar.mn: Remove the debAbout
    component and its use in the about: page. We already removed its use
    from the iceweasel package, and it was the sole user of that feature.
  * toolkit/xre/nsXREDirProvider.*: Load distribution bundles from GRE
    directory, too.
  * debian/extra-stuff/filemonitor/Makefile.in,
    debian/extra-stuff/packages-static.xulrunner,
    debian/xulrunner-BASE_VERSION.install.in,
    debian/extra-stuff/Makefile.in: Move Debian specific components into
    $GRE_DIR/distribution/bundles/debian/components.
  * debian/rules: Use dh_auto_* --parallel where appropriate.
  * xpcom/tests/TestBlockingProcess.cpp: Modify patched TestBlockingProcess
    so that it builds cross-platforms. bz#543438.
  * debian/extra-stuff/addonsInfo.js: Manually sort plugins and extensions
    list in addons info component. This will make the component compatible
    with 1.9.2.
  * debian/extra-stuff/*.js: Get plugin path from nsIPluginTag.fullpath when
    available. nsIPluginTag.filename only contains the leaf name on 1.9.2.
  * debian/extra-stuff/debUpdateNotifier.js: Remove extra whitespace in
    restart prompt.
  * debian/extra-stuff/filemonitor/debGIOFileMonitorService.cpp: Allow
    giofilemonitor to monitor files too.
  * debian/copyright: Use DEP-5 format. Also remove some licensing terms
    when they can be found in a file in subdirectories that are not used to
    build the binary packages. Thanks Gabriele Giacone for the initial work.

 -- Mike Hommey <email address hidden>  Mon, 08 Mar 2010 15:33:35 +0100
Superseded in squeeze-release
Superseded in sid-release
xulrunner (1.9.1.8-4) unstable; urgency=low


  * debian/control, debian/rules: Rename xulrunner:Recommends variable to
    gnome:Depends.
  * debian/control: Switch gnome support dependencies from Recommends to
    Suggests. Closes: #570579.
  * modules/plugin/Makefile.in: Don't build the null plugin.
  * debian/xulrunner-1.9.1.install: Don't install
    /usr/lib/xulrunner-1.9.1/plugins now it's empty.
  * debian/rules:
    - Remove media libraries headers from xulrunner-dev.
    - Only generate the fr_FR locale when it is not available on the
      system. It appears the locales-all package Provides: locales but
      localedef doesn't work with it.
    - Don't remove debian/*.shlibs.local, which are never created, in the
      clean target.
    - Don't remove debian/libmozjs2d.symbols. recursively: it's a file.
    - Generate maintainer scripts and other files on all binary-* targets.
      This will also fix the lack of proper maintainer scripts on the uploaded
      architecture.
    - Don't call dh_pysupport from override_dh_install. dh will run it anyways.
  * debian/*: Generalize the use of $(BASE_VERSION) in the packaging. This
    should make packaging different releases at the same time easier.
  * debian/mozconfig.in: Remove more obsolete mozconfig options.
  * debian/control{,.in}: Suggest libcanberra0.
  * widget/src/gtk2/Makefile.in, widget/src/gtk2/nsWindow.*: Replace
    mozDrawingarea with a single GdkWindow. bz#506433.
  * widget/src/gtk2/mozcontainer.*, widget/src/gtk2/nsWindow.cpp: Reuse the
    GdkWindow in MozContainers. bz#506433.
  * widget/src/gtk2/nsWindow.*: Destroy child nsWindows when destroying the
    parent. bz#522635. Closes: #571138.
  * widget/src/gtk2/mozcontainer.h: Header adjustment for imported changes.
    Changes from bz#506433 rely on bz#471877 being applied, and we now need
    gtkversion.h on top of gtkcontainer.h.
  * widget/src/gtk2/nsWindow.cpp: Handle side-effect sibling destruction when
    destroying child windows. bz#528386.

 -- Mike Hommey <email address hidden>  Thu, 25 Feb 2010 15:26:16 +0100
Superseded in sid-release
xulrunner (1.9.1.8-3) unstable; urgency=low


  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_mips.cpp: Fix xptcstubs on
    mipsel. The previous patch for mips broke it.
  * debian/xulrunner-1.9.1.preinst: Don't fail in preinst when
    /usr/lib/mozilla doesn't exist. Closes: #570388.
  * toolkit/components/url-classifier/src/nsUrlClassifierDBService.cpp:
    Revert work around for alignment problems on sparc.
  * xpcom/glue/nsTArray.*, xpcom/glue/nsTPtrArray.h: Force better
    nsAutoT{Ptr,}Array buffer alignment. This solves issues on sparc in a
    better way than the previous workaround that missed some other failure
    cases. bz#448658. Closes: #568214.
  * js/src/Makefile.in: Move cleanup changes to match equivalent upstream
    changes on trunk.
  * debian/rules: Re-enable test suite on arm.

 -- Mike Hommey <email address hidden>  Sun, 21 Feb 2010 08:19:35 +0100
Superseded in sid-release
xulrunner (1.9.1.8-2) unstable; urgency=low


  * The "too much magic kills the magic" release.
  * debian/rules:
    - Use configure instead of dh_auto_configure, as the latter doesn't
      support autoconf 2.13 generated configure scripts properly.
      Closes: #570311.
    - Use --no-print-directory option of make instead of -s, since dh likes
      to set MAKEFLAGS=-w.
    - Disable the test suite on arm. There is one failing test, but to debug
      it, I'd prefer the arm buildd to actually generate debs so that I don't
      have to wait 2 days to be able to debug (the buildd being significantly
      faster to build than the porterbox).
  * debian/extra-stuff/packages-static.xulrunner: Actually install the
    debUpdateNotifier component.
  * debian/control: Relax binutils dependency.

 -- Mike Hommey <email address hidden>  Thu, 18 Feb 2010 08:59:30 +0100
Superseded in sid-release
xulrunner (1.9.1.8-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2010-{01-05}, also known as
    CVE-2010-0159, CVE-2010-0160, CVE-2009-1571, CVE-2009-3988,
    CVE-2010-0162.

  * debian/control:
    + Add missing ${misc:Depends}
    + Build-depend on binutils with readelf -p support. Closes: #568888.
    + xulrunner-dev depends on binutils with readelf -p support.
    + Bump Standards-Version to 3.8.4.0.
    + Fix the xulrunner-1.9.1-dbg package description.
    + Don't allow different versions of xulrunner-1.9.1, python-xpcom and
      xulrunner-1.9.1-dbg to be installed at the same time. Likewise for
      libmozjs2d-dbg, libmozjs2d and spidermonkey-bin.Thanks Adrian von
      Bidder. Closes: #570085.
  * debian/xulrunner-1.9.1.preinst: Change permissions of /usr/lib/mozilla
    and /usr/lib/mozilla/extensions. As earlier versions of xulrunner could
    create these directories with the wrong permissions at runtime, we need
    to change their permissions if they exist.
  * debian/xulrunner-1.9.1.docs, debian/rules: Remove non installation of
    README.txt. It was setup to be installed in xulrunner-1.9.1.docs, but was
    explicitely excluded with a -X argument to dh_installdocs. Removing both
    just has the same effect.
  * debian/rules:
    + Change the way the MPL file is created.
    + Remove old comments from dh-make templates.
    + Don't unnecessarily set LD_LIBRARY_PATH when building.
  * debian/control, debian/compat, debian/rules: Switch to using dh.
  * debian/extra-stuff/addonsInfo.js:
    + Always prevent application to do something when given the
      --dump-addons-info option.
    + Avoid missing newline in dump-addons-info output when no plugins are
      installed.
  * debian/extra-stuff/debUpdateNotifier.js: Slightly reword update notifier
    restart prompt.
  * debian/extra-stuff, debian/filemonitor, debian/rules: Move
    debian/filemonitor into debian/extra-stuff.
  * xulrunner/app/Makefile.in: Revert one-liner harmless change that was the
    result of a bad merge.

  * config/config.mk, config/rules.mk, js/src/config/config.mk,
    js/src/config/rules.mk: Remove pseudo speed enhancements for
    my{config,rules}.mk as agreed with upstream. bz#541767.
  * js/src/configure.in, js/src/configure: Avoid using -fshort-wchar in
    libmozjs, as it was done in the main configure script.
  * toolkit/components/url-classifier/src/nsUrlClassifierDBService.cpp:
    Work around alignment problems on sparc. bz#448658.
  * intl/uconv/ucvlatin/nsUCS2BEToUnicode.cpp,
    intl/uconv/ucvlatin/nsUTF32ToUnicode.cpp: Fixes for misaligned accesses
    on sparc and arm. bz#544512. Closes: #568214.
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_ppc_linux.cpp,
    xpcom/reflect/xptcall/tests/TestXPTCInvoke.cpp: Fix for padding of long
    long arguments on ppc xptcall. bz#520367. Closes: #568213.
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_arm.cpp: Fix xptcinvoke on
    arm. bz#476903.
  * js/src/nanojit/NativeARM.cpp: Fix stack alignment on function calls in
    JIT on arm. bz#545747. Closes: #568212.
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_mips.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_mips.cpp: Fix xptinvoke and
    xptstubs on mips o32 big endian. Closes: #568249.
  * widget/src/gtk2/nsPrintDialogGTK.cpp: Don't show the SVG output option
    in the print dialog. bz#546093. Closes: #569809.

 -- Mike Hommey <email address hidden>  Wed, 17 Feb 2010 21:38:23 +0100
Superseded in sid-release
xulrunner (1.9.1.6-2) unstable; urgency=low


  * modules/libpref/src/prefapi.cpp: Fix crash with SwitchProxy installed.
    Closes: #559501.
  * toolkit/components/console/jsconsole-clhandler.js,
    toolkit/xre/nsAppRunner.cpp: Fix misalignments in --help command line.
    bz#458631, xulrunner part.
  * debian/extra-stuff/Makefile.in, debian/extra-stuff/addonsInfo.js,
    debian/extra-stuff/reportbug-helper-script, debian/rules,
    debian/xulrunner-1.9.1.install: Add a component that dumps addons
    information, and a helper script for reportbug
  * debian/rules: Move debAbout component into debian/extra-stuff.
  * debian/extra-stuff/debAbout.js: Simplify debAbout component by using
    XPCOMUtils.
  * debian/control, debian/rules, debian/xulrunner-1.9.1-gnome-support.install,
    debian/xulrunner-1.9.1.install: Merge xulrunner-1.9.1-gnome-support into
    xulrunner-1.9.1.
  * toolkit/mozapps/update/src/nsUpdateService.js.in: Avoid creating the
    updates directory when update service is disabled. bz#538933.
  * toolkit/xre/nsXREDirProvider.cpp: Avoid creating
    /usr/lib/mozilla/extensions 0700 when running as root. bz#538929.
    Closes: #559926.
  * build/Makefile.in, build/automation-build.mk, build/automation.py.in,
    build/pgo/Makefile.in, layout/tools/reftest/Makefile.in,
    testing/mochitest/Makefile.in: Don't remove build/automationutils.py
    on make clean. bz#525047.
  * Makefile.in, config/config.mk, config/rules.mk, js/src/config/config.mk,
    js/src/config/rules.mk: Avoid creating config/my{config,rules}.mk.
    bz#541767.
  * build/automation-build.mk: Remove automation.py in make clean. bz#541768.
  * build/Makefile.in: Remove leaktest files in make clean. bz#541769.
  * js/src/Makefile.in: Remove generated files from js/src during make
    distclean. bz#541770.
  * js/src/xpconnect/src/Makefile.in: Cleanup idl-parser leftovers in make
    clean. bz#541774.
  * xulrunner/installer/Makefile.in: Properly clean
    xulrunner/installer/*.system.conf.
  * debian/control: Remove build dependency against liblcms1-dev.
  * configure.in, configure: Remove --enable-system-lcms check, which somehow
    resisted merges with upstream.
  * debian/mozconfig: cookie, permissions and spellcheck are no longer
    extensions.
  * debian/control, debian/mozconfig, debian/rules, debian/test/*: Remove the
    custom test application and use upstream xpcshell-tests instead.
  * debian/rules:
    + Remove useless setting of JAVA_HOME when ./configure'ing.
    + Correctly handle the nocheck DEB_BUILD_OPTIONS flag.
    + Replace findstring with filter when checking DEB_BUILD_OPTIONS.
    + Remove xpcshell-tests that are known and expected to fail, at least for
      now.
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in: Avoid extension
    manager failure when there is no branding (like in the testsuite).
    Workaround for bz#455238.
  * extensions/java/xpcom/Makefile.in: Disable javaxpcom tests at build time
    when DEB_NO_JAR is unset.
  * debian/extra-stuff/Makefile.in: Add basic places preferences by default.
    These are required for places to work properly in xul applications that
    wouldn't set them.
  * js/src/config/check-sync-dirs.py, js/src/config/check-sync-exceptions:
    Add (obvious) exceptions for js/src/config/check-sync-dirs.py. We also
    modify the script so that given directories can be ignored. bz#542468.
  * debian/rules, debian/control: Also run "make check" in the test target.
  * extensions/python/xpcom/Makefile.in: Disable python-xpcom tests for now.
  * debian/control: Build-Conflict with libhildonmime-dev and libosso-dev.
  * config/rules.mk, js/src/config/rules.mk: Synchronize config/rules.mk and
    js/src/config/rules.mk for check-sync-dirs.py.
  * debian/rules, debian/extra-stuff/packages-static.xulrunner,
    debian/extra-stuff/Makefile.in: Avoid installing test programs by using
    upstream "installer". We use the installer files from firefox so that
    most files are properly listed already, to which we add xulrunner and
    debian specific files.
  * js/src/config/rules.mk, config/rules.mk, debian/rules: Gross workaround
    to avoid installing test idl and include files in the SDK. bz#542749.
  * debian/rules: Only fix permissions in /usr/include and /usr/share.
  * debian/control:
    + Change xulrunner-1.9.1's section to libs. Closes: #551701.
    + Bump libcairo2-dev build dependency. Upstream decided once more to
      enforce runtime dependencies as build time *sigh*.
  * js/src/Makefile.in: Install missing nanojit and .tbl headers from js/src.
    bz#542789.
  * debian/rules: Properly install mozjs header files in /usr/include.
    Closes: #560404.
  * chrome/src/nsChromeRegistry.*, chrome/test/unit/test_bug519468.js,
    toolkit/xre/nsXREDirProvider.cpp: Allow intl.locale.matchOS to be
    modified in user profile. bz#519468. Closes: #417961.
  * chrome/src/nsChromeRegistry.cpp, chrome/test/unit/test_bug519468.js:
    Override intl.locale.matchOS if general.useragent.locale is set in user
    profile. This allows the Quick Locale Switcher extension to work.
    bz#542999
  * debian/rules: Allow to pass TEST_PATH to xpcshell-tests, in which case we
    don't run make check. This allows to run a given xpcshell test.
  * debian/libmozjs-dev.install, debian/libmozjs-dev.links: Install
    libmozjs.so through dh_install instead of dh_link.
  * debian/xulrunner-1.9.1.install, debian/xulrunner-1.9.1.prerm: Make
    .autoreg part of the package.
  * debian/rules: Fail dh_install when it doesn't install everything (except
    the libmozillainterfaces-java stuff)
  * debian/rules: Remove the file comparison scripts. We now use dh_install
    --fail-missing, and the upstream installer guarantees debian/tmp content
    from dist/bin.
  * debian/control, debian/rules: Use fr_FR.UTF-8 locale during tests.
  * xpcom/threads/nsProcessCommon.cpp: Avoid crashing when trying to kill a
    nsProcess that is already terminated. bz#543441.
  * xpcom/tests/TestBlockingProcess.cpp: Don't use stdin to block the
    TestBlockingProcess. This made the nsIProcess unit test fail in pbuilder.
    bz#543438.
  * debian/rules: Add a test to ensure dh_xulrunner works properly.
  * debian/dh/dh_xulrunner.in:
    + Add hint about the dh sequence addon in dh_xulrunner manpage.
    + Also add a note about dh_shlibdeps required to be run beforehand.
    + Fix dh_xulrunner after the xpcom glue changes in 1.9.1.6-1.
      Closes: #567746.
    + Avoid displaying errors when an ELF file doesn't contain an .rodata
      section.
  * xpcom/tests/Makefile.in: Cleanup xpcom/tests/TestScriptable.h on make
    clean. bz#543464.
  * build/Makefile.in: Cleanup build/automationutils.pyc on make clean.
    bz#543469.
  * debian/rules: Remove unused {DEBIAN,UPSTREAM}_VERSION variables.
  * debian/filemonitor/*, debian/rules, debian/xulrunner-1.9.1.install:
    Add a file monitoring component, based on GIOFileMonitor.
  * debian/extra-stuff/Makefile.in, debian/extra-stuff/debUpdateNotifier.js:
    Add an update notifier component. This component uses the file monitor
    component to track plugins, extensions, GRE and application updates, and
    prompts for restart in case a system upgrade occurred. The prompt still
    needs to be enhanced and localized.

 -- Mike Hommey <email address hidden>  Tue, 02 Feb 2010 08:44:43 +0100
Superseded in lenny-release
xulrunner (1.9.0.16-1) stable-security; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{65,68-70}, also known as
    CVE-2009-3979, CVE-2009-3981, CVE-2009-3983, CVE-2009-3984,
    CVE-2009-3985, CVE-2009-3986.

 -- Mike Hommey <email address hidden>  Wed, 16 Dec 2009 10:26:48 +0100
Superseded in squeeze-release
Superseded in sid-release
xulrunner (1.9.1.6-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{65-70}, also known as
    CVE-2009-3979, CVE-2009-3980, CVE-2009-3982, CVE-2009-3388,
    CVE-2009-3389, CVE-2009-3983, CVE-2009-3984, CVE-2009-3985,
    CVE-2009-3986.
  * xpcom/glue/standalone/nsGlueLinkingDlopen.cpp: Revert changes introduced
    in 1.9~b4-1 that should not be necessary anymore. This code also
    FTBFS'ed with gcc-4.4. Closes: #560462.

 -- Mike Hommey <email address hidden>  Wed, 16 Dec 2009 11:41:36 +0100
Superseded in squeeze-release
Superseded in sid-release
xulrunner (1.9.1.5-2) unstable; urgency=low


  * configure.in, configure: Work around FTBFS on mips by disabling TLS
    support.
  * debian/control:
    + python-xpcom Breaks epiphany-gecko (<< 2.28) instead of conflicting
      with epiphany-browser. Closes: #556622.
    + libmozjs2d Breaks xulrunner-1.9.1 (<< 1.9.1.4). Closes: #556658.
    + Make xulrunner-1.9.1-gnome-support depend on libgnomeui-0.
      Closes: #555162.
  * js/src/configure.in, js/src/configure,
    media/libsydneyaudio/src/Makefile.in: Fix FTBFS on hurd-i386. Thanks
    Samuel Thibault. Closes: #556244.
  * xulrunner/installer/libxul-embedding*.pc.in: Add -ldl. Closes: #556888.
  * js/jsd/jsd_xpc.cpp: Fix JS debugger crash on 64-bit: don't truncate PC
    to jsuint in jsds_FilterHook. bz#510040. Closes: #542768.
  * toolkit/content/inlineSpellCheckUI.js: Support both - and _ separators
    in dictionary names when making them user friendly. bz#514151.

 -- Mike Hommey <email address hidden>  Mon, 23 Nov 2009 20:04:19 +0100
Superseded in sid-release
xulrunner (1.9.1.5-1) unstable; urgency=low


  * New upstream release.
  * debian/remove.nonfree: Synchronize with Iceape 2.0.
  * debian/copyright: Update with missing information, and remove lcms
    licensing as it was dropped in 1.9.1.4.
  * debian/mozconfig: Remove obsolete options.
  * debian/rules:
    + Put -Wl,--as-needed in front of OS_LDFLAGS.
    + Update config.{guess,sub} in js/src/build/autoconf, too.
    + Don't modify platform.ini.
  * debian/control:
    + xulrunner-1.9.1 breaks iceweasel versions earlier than 3.5.5-1, as
      their GRE version range is not broad enough.
    + Build depend on libreadline-dev before libreadline5-dev.
      Closes: #553873.
    + Force a runtime dependency on libcairo2 >= 1.8.8 for @font-face
      support. Closes: #537350.
    + Bump Standards-Version to 3.8.3.0.
    + Tighten libmozjs-dev dependency on libmozjs2d.
  * memory/jemalloc/jemalloc.c: Remove remainings of an old patch that was
    applied upstream in jemalloc.
  * extensions/python/xpcom/src/loader/Makefile.in,
    extensions/python/xpcom/src/module/Makefile.in: Fix rpath in the
    pyxpcom components.

 -- Mike Hommey <email address hidden>  Thu, 12 Nov 2009 21:22:29 +0100
Superseded in sid-release
xulrunner (1.9.1.4-1) unstable; urgency=low


   * New upstream release.
   * Fixes mfsa-2009-{52,53-57,59,61-64}, also known as
     CVE-2009-3370, CVE-2009-3274, CVE-2009-3371, CVE-2009-3372,
     CVE-2009-3373, CVE-2009-3374, CVE-2009-1563, CVE-2009-3375,
     CVE-2009-3376, CVE-2009-3377, CVE-2009-3378, CVE-2009-3379,
     CVE-2009-3380, CVE-2009-3381, CVE-2009-3383.
   * debian/control:
     + Bump sqlite build dependency to 3.6.16.
     + libmozjs2d-dbg conflicts with libmozjs1d-dbg. Closes: #550626.
   * debian/libmozjs1d.symbols, debian/rules: Add new symbols and bump shlibs.

 -- Mike Hommey <email address hidden>  Wed, 28 Oct 2009 16:15:45 +0100
Superseded in sid-release
xulrunner (1.9.1.3-3) unstable; urgency=low


  * debian/xulrunner-1.9.1.links: Point dictionaries to /usr/share/hunspell.
    Closes: #549875.

 -- Mike Hommey <email address hidden>  Sat, 10 Oct 2009 11:10:46 +0200
Superseded in experimental-release
xulrunner (1.9.1.3-2) experimental; urgency=low


  * debian/xulrunner-dev.install, debian/rules, debian/dh/*: Add a
    dh_xulrunner (deb)helper and a "xulrunner" dh sequence to add the
    "proper" xulrunner dependency to shlibs:Depends.
  * debian/xulrunner-1.9.1.install: Install the update.locale file.
    Closes: #540784.
  * debian/control, debian/rules: Build against default-jdk, but keep
    support for java-gcj-compat-dev. Closes: #526305.
  * debian/control: xulrunner-1.9.1-dbg conflicts with xulrunner-1.9-dbg.
    Closes: #537628.
  * js/src/Makefile.in: Properly build twice in a row (picked from upstream
    mercurial repo). Closes: #546770.
  * Don't build oss and wireless geoloc support on *bsd and hurd.
    Thanks Petr Salinger. Closes: #547269.

 -- Mike Hommey <email address hidden>  Wed, 16 Sep 2009 17:54:36 +0200
Superseded in experimental-release
xulrunner (1.9.1.3-1) experimental; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{47,49,50}, also known as
    CVE-2009-3070, CVE-2009-3071, CVE-2009-3072, CVE-2009-3074,
    CVE-2009-3075, CVE-2009-3077, CVE-2009-3078.
  * debian/control:
    + Build depend on newer libnss3-dev.
    + Build depend on libiw-dev to build wifi monitor component.
      Closes: #543339

 -- Mike Hommey <email address hidden>  Thu, 10 Sep 2009 21:52:12 +0200
Superseded in squeeze-release
Superseded in sid-release
xulrunner (1.9.0.14-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{47-50}, also known as
    CVE-2009-3070, CVE-2009-3071, CVE-2009-3072, CVE-2009-3074,
    CVE-2009-3075, CVE-2009-3076, CVE-2009-3077, CVE-2009-3078.
  * debian/control: Build depend on newer libnss3-dev.

 -- Mike Hommey <email address hidden>  Thu, 10 Sep 2009 08:08:06 +0200
Superseded in experimental-release
xulrunner (1.9.1.2-1) experimental; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{38,44,45,46}, some of which are also known as
    CVE-2009-2654, CVE-2009-2470.

 -- Mike Hommey <email address hidden>  Thu, 20 Aug 2009 07:36:51 +0200
Superseded in sid-release
xulrunner (1.9.0.13-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-44, also known as CVE-2009-2654.

 -- Mike Hommey <email address hidden>  Thu, 20 Aug 2009 07:10:26 +0200
Superseded in squeeze-release
Superseded in lenny-release
xulrunner (1.9.0.13-0lenny1) stable-security; urgency=high


  * New upstream release.
  * Fixes mfsa-2009-44, also known as CVE-2009-2654.
  * security/manager/ssl/src/nsNSSCallbacks.{h,cpp},
    security/manager/ssl/src/nsNSSComponent.cpp: Leave out OCSP responders,
    as they require latest nss which we don't have in Lenny.
  * security/manager/ssl/src/nsNSSCertHelper.cpp: Define
    CERT_RFC1485_EscapeAndQuote function when it is not defined in nss headers.

 -- Mike Hommey <email address hidden>  Thu, 20 Aug 2009 19:48:22 +0200
Superseded in experimental-release
xulrunner (1.9.1.1-2) experimental; urgency=low


  * js/src/Makefile.in: Avoid linking with system-installed libmozjs when
    linking js binary to it.
  * debian/rules, debian/symbols.filter: Workaround bug in gcc < 4.4
    exporting hidden vtables and VTTs on armel. Closes: #537775.
  * modules/libpref/src/prefapi.cpp: Avoid writing out locked prefs default
    value in user preferences. Closes: #512111.
  * debian/rules:
    + Don't fail to build with DEB_BUILD_OPTIONS=noopt.
    + Avoid duplicating LDFLAGS during the build.
  * debian/control: Change the Maintainer field and add Uploaders. Welcome
    to Antonio Jose Lopez Morillo.

 -- Mike Hommey <email address hidden>  Thu, 30 Jul 2009 00:12:30 +0200
Superseded in sid-release
xulrunner (1.9.0.12-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{34,35,37,39,40}, also known as
    CVE-2009-2462, CVE-2009-2463, CVE-2009-2464, CVE-2009-2465,
    CVE-2009-2466, CVE-2009-2467, CVE-2009-2469, CVE-2009-2471,
    CVE-2009-2472.
  * debian/libmozjs1d.symbols: Add new symbol.

 -- Mike Hommey <email address hidden>  Wed, 22 Jul 2009 20:51:07 +0200
Superseded in experimental-release
xulrunner (1.9.1.1-1) experimental; urgency=low


  * New upstream release. Fixes 0-day JIT flaw.
  * js/src/jsbuiltins.cpp: Really don't export js_SetTraceableNativeFailed.
    Closes: #536530.
  * configure.in, configure, debian/control: Build against sqlite 3.6.x.
  * debian/control:
    + Build-depend on nspr 4.8.
    + Change section for libmozjs2d-dbg, xulrunner-1.9.1-dbg and
      libmozillainterfaces-java.
  * debian/rules: Add support for DEB_BUILD_OPTIONS's nocheck.
  * debian/control: Bump Standards-Version to 3.8.2.0.
  * debian/copyright: Fix GPL and LGPL text location.
  * debian/copyright, debian/xulrunner-1.9.1.README.Debian: Fix typos.
  * toolkit/mozapps/downloads/src/nsHelperAppDlg.js.in: Fix bad application
    message. Closes: #494694.

 -- Mike Hommey <email address hidden>  Fri, 17 Jul 2009 23:31:38 +0200
Superseded in experimental-release
xulrunner (1.9.1-1) experimental; urgency=low


  * New upstream release.
  * debian/control: Build-Depend on libhunspell-dev >= 1.2.
  * config/config.mk: Revert previous fix for FTBFS because of internal
    version of hunspell, which is okay now.
  * content/svg/content/src/Makefile.in,
  * gfx/thebes/src/gfxASurface.cpp: Fix FTBFS when system cairo provides
    directfb surfaces. bz#501239.
  * js/src/xpconnect/shell/xpcshell.cpp: Fix FTBFS of xpcshell when
    EDITLINE is set. bz#501241.
  * js/src/jsdate.{h,cpp}: Make js_IntervalNow part of the friendly API.
    bz#491617.
  * js/src/jsapi.{h,cpp}: Expose js_StrictlyEqual() to consumers. bz#491646.
  * config/autoconf.mk.in, configure.in, configure, js/src/Makefile.in:
    Revert changes to allow to build a standalone js binary, as it is now
    built by default upstream.
  * js/src/Makefile.in, js/src/js.cpp, js/src/jstracer.cpp: Allow to build
    the js shell against the libmozjs shared library. bz#501300.
  * config/autoconf.mk.in, configure.in, configure, js/src/Makefile.in,
    js/src/config/autoconf.mk.in, js/src/configure.in, js/src/configure:
    Build js shell and xpcshell against libreadline.
  * js/src/jsobj.cpp, js/src/jscntxt.cpp: Don't export some functions that
    are not defined in headers. This way, they don't end up being C++
    mangled as well.
  * config/autoconf.mk.in, debian/rules,
    extensions/python/xpcom/src/loader/Makefile.in,
    extensions/python/xpcom/src/module/Makefile.in,
    xulrunner/installer/Makefile.in: Use a variable for xulrunner base
    version in various places.
  * config/autoconf.mk.in, debian/*: s/1.9/1.9.1/g.
  * build/unix/run-mozilla.sh, debian/rules, debian/xulrunner-1.9.1.install,
    xulrunner/stub/Makefile.in, xulrunner/stub/nsXULStub.cpp: Remove
    libjemalloc and workarounds as it is now statically linked.
  * config/rules.mk, js/src/config/rules.mk: Move SO_VERSION handling in
    js/src's copy of config/rules.mk.
  * js/src/jsobj.{h,cpp}, js/src/xpconnect/src/xpcquickstubs.cpp: Make
    js_obj_defineGetter and js_obj_defineSetter friend API.
  * debian/control: Add build dependency on libasound2-dev.
  * debian/rules: Properly install js shell binary:
  * debian/control, debian/libmozjs*, debian/rules,
    debian/xulrunner-1.9.1.links, js/src/Makefile.in: Update symbols,
    and bump soname.
  * js/src/jsbuiltins.h: Don't export js_SetTraceableNativeFailed, which
    is only used internally. Otherwise, this is one more different symbol
    between JIT and non-JIT builds.
  * debian/libmozjs2d.symbols.jit, debian/rules: Add missing symbol for
    JIT-enabled builds.
  * js/src/nanojit/Assembler.cpp: Implement sync_instruction_memory for
    sparc linux. bz#502369.
  * debian/copyright: Update copyright information.

 -- Mike Hommey <email address hidden>  Wed, 08 Jul 2009 00:07:55 +0200
Superseded in sid-release
xulrunner (1.9.0.11-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{24-32}, also known as
    CVE-2009-1392, CVE-2009-1832, CVE-2009-1833, CVE-2009-1834,
    CVE-2009-1835, CVE-2009-1836, CVE-2009-1837, CVE-2009-1838,
    CVE-2009-1839, CVE-2009-1840, CVE-2009-1841.

 -- Mike Hommey <email address hidden>  Fri, 12 Jun 2009 07:36:01 +0200
Superseded in squeeze-release
Superseded in lenny-release
xulrunner (1.9.0.11-0lenny1) stable-security; urgency=high


  * New upstream release.
  * Fixes mfsa-2009-{24-32}, also known as
    CVE-2009-1392, CVE-2009-1832, CVE-2009-1833, CVE-2009-1834,
    CVE-2009-1835, CVE-2009-1836, CVE-2009-1837, CVE-2009-1838,
    CVE-2009-1839, CVE-2009-1840, CVE-2009-1841.
  * configure.in, configure: Don't require sqlite >= 3.6.7.

 -- Mike Hommey <email address hidden>  Fri, 12 Jun 2009 09:23:08 +0200
Superseded in sid-release
xulrunner (1.9.0.10-1) unstable; urgency=high


  * New upstream release.
  * Fixes mfsa-2009-23 also known as CVE-2009-1313 (Regression crash).
    Closes: #525740.

 -- Mike Hommey <email address hidden>  Tue, 28 Apr 2009 07:26:33 +0200
Superseded in sid-release
xulrunner (1.9.0.9-1) unstable; urgency=high


  * New upstream release.
  * Fixes mfsa-2009-{14-19,21,22}, also known as
    CVE-2009-1302, CVE-2009-1303, CVE-2009-1304, CVE-2009-1305,
    CVE-2009-0652, CVE-2009-1306, CVE-2009-1307, CVE-2009-1308,
    CVE-2009-1309, CVE-2009-1311, CVE-2009-1312.

 -- Mike Hommey <email address hidden>  Wed, 22 Apr 2009 20:59:09 +0200
Superseded in lenny-release
xulrunner (1.9.0.7-0lenny2) stable-security; urgency=high


  * Non-maintainer upload by the security team.
  * Fix msfa-2009-13 (CVE-2009-1044)
  * Fix mfsa-2009-12 (CVE-2009-1169)

 -- Noah Meyerhans <email address hidden>  Fri, 27 Mar 2009 23:31:21 -0400
Superseded in sid-release
xulrunner (1.9.0.8-1) unstable; urgency=high


  * New upstream release.
  * Fixes mfsa-2009-{12,13}, also known as
    CVE-2009-1169 and CVE-2009-1044.

 -- Mike Hommey <email address hidden>  Sat, 28 Mar 2009 10:32:35 +0100
Superseded in squeeze-release
Superseded in sid-release
xulrunner (1.9.0.7-1) unstable; urgency=high


  * New upstream release.
  * Fixes mfsa-2009-{07-09}, also known as
    CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774,
    CVE-2009-0775, CVE-2009-0776.

 -- Mike Hommey <email address hidden>  Sun, 08 Mar 2009 11:20:05 +0100
Superseded in squeeze-release
Superseded in lenny-release
Superseded in sid-release
xulrunner (1.9.0.6-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2009-{01,02,04-06}, also known as
    CVE-2009-0352, CVE-2009-0353, CVE-2009-0354, CVE-2009-0356,
    CVE-2009-0357, CVE-2009-0358.

 -- Mike Hommey <email address hidden>  Wed, 04 Feb 2009 08:00:40 +0100
Superseded in lenny-release
Superseded in sid-release
xulrunner (1.9.0.5-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2008-{60,63-68}, also known as
    CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5505,
    CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510,
    CVE-2008-5511, CVE-2008-5512.
  * debian/control: conflict with pango-graphite, to avoid all problems
    it causes.

 -- Mike Hommey <email address hidden>  Sat, 20 Dec 2008 10:55:24 +0100
Superseded in lenny-release
Superseded in sid-release
xulrunner (1.9.0.4-2) unstable; urgency=low


  * debian/xulrunner-1.9.preinst: Brown paper bag fix to avoid failure on
    install (upgrades were fine).

 -- Mike Hommey <email address hidden>  Sun, 23 Nov 2008 09:34:15 +0100
Superseded in sid-release
xulrunner (1.9.0.4-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2008-{47,51-58}, also known as
    CVE-2008-0017, CVE-2008-4582, CVE-2008-5015, CVE-2008-5016,
    CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021,
    CVE-2008-5022, CVE-2008-5023, CVE-2008-5024.
  * debian/postinst.in: Use a temporary directory as $HOME when running
    xpcshell. Thanks Theppitak Karoonboonyanan. Closes: #495311.
  * debian/rules:
    + Exclude jemalloc from kfreebsd packages, as it is not built.
      Thanks Petr Salinger. Closes: #501476.
    + Use LDFLAGS instead of CFLAGS to set -Wl,--no-relax on alpha.
  * modules/libpr0n/src/imgRequest.cpp: Apply patch from bz#373701 to
    properly close streaming HTTP connections and avoid sucking bandwidth.
    Closes: #491144.
  * browser/app/mozilla.in: Do exec instead of uselessly forking.
    Closes: #496626.
  * memory/jemalloc/jemalloc.c: Apply patch from bz#460933 to avoid
    possible deadlock on fork with jemalloc enabled.
  * xpcom/glue/nsThreadUtils.cpp: Better fix to avoid crashes such as bug
    #481925. Might fix bug #503926, too.
  * debian/xulrunner-1.9.preinst: If /usr/lib/xulrunner-1.9/chrome is an
    empty directory, remove it. This will allow dpkg to create the symbolic
    link correctly. Closes: #482415, #486334, #486354, #492488.
  * toolkit/components/url-classifier/src/Makefile.in: Disable optimization
    on alpha as it leads to crashes when using this component.
  * uriloader/exthandler/nsMIMEInfoImpl.h,
    uriloader/exthandler/unix/nsMIMEInfoUnix.cpp,
    uriloader/exthandler/unix/nsOSHelperAppService.cpp,
    uriloader/exthandler/unix/nsOSHelperAppService.h: Revert change from
    release 1.9.0.1-1.
  * uriloader/exthandler/unix/nsMIMEInfoUnix.cpp: Properly launch
    applications set in $HOME/.mailcap. Replaces the previous patch in
    a much simpler way.

 -- Mike Hommey <email address hidden>  Sat, 22 Nov 2008 12:50:09 +0100
Superseded in sid-release
Superseded in lenny-release
xulrunner (1.9.0.3-1) unstable; urgency=low


  * New upstream release.
  * Fixes mfsa-2008-{40-44}, also known as
    CVE-2007-3837, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060,
    CVE-2008-4065, CVE-2008-4066, CVE-2008-4066, CVE-2008-4067.
  * debian/xulrunner-1.9.install: Don't install dependentlibs.list. It's
    causing problems with gdb and is not necessary on our builds.
  * debian/control: Bumped Standards-Version to 3.8.0.1. No changes.
  * xulrunner/app/Makefile.in: Use browser/app/mozilla.in instead of
    xulrunner/app/mozilla.in. The browser version has received more love
    upstream, and properly remove the xremote code, which has been handled
    by the binary itself for a while, and causes some problems on PPC at
    least.
  * build/unix/run-mozilla.sh, debian/postinstrm.in, debian/rules,
    xulrunner/stub/nsXULStub.cpp: Disable jemalloc by default, because of all
    the kinds of random problems it causes, but let advanced users load it by
    setting the MOZILLA_JEMALLOC environment variable. Closes: #490360.
  * debian/rules: Create sdk/bin as a symlink to /usr/lib/xulrunner-1.9.
    Closes: #491693
  * modules/plugin/base/src/nsPluginHostImpl.cpp: Don't register plugins if
    the MOZILLA_DISABLE_PLUGINS environment variable is set.

 -- Mike Hommey <email address hidden>  Sun, 28 Sep 2008 16:30:37 +0200
153 of 53 results