From: Raspbian automatic forward porter <root@raspbian.org>
Date: Mon, 7 Sep 2026 07:59:35 +0000 (+0100)
Subject: Merge version 140.13.0esr-2+rpi1 and 140.14.0esr-2 to produce 140.14.0esr-2+rpi1
X-Git-Tag: archive/raspbian/140.14.0esr-2+rpi1^0
X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=c1f45f79045c47f2ebc6266e59e1ec66c62be562;p=firefox-esr.git

Merge version 140.13.0esr-2+rpi1 and 140.14.0esr-2 to produce 140.14.0esr-2+rpi1
---

c1f45f79045c47f2ebc6266e59e1ec66c62be562
diff --cc debian/changelog
index 61c81021f3e,74f7da563ea..5361748a92e
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,41 -1,25 +1,64 @@@
- firefox-esr (140.13.0esr-2+rpi1) forky-staging; urgency=medium
++firefox-esr (140.14.0esr-2+rpi1) forky-staging; urgency=medium
 +
 +  [changes brought forward from 60.3.0esr-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Wed, 05 Dec 2018 06:56:52 +0000]
 +  * Hack broken rust target selection so it produces the right target
 +    on raspbian.
 +  * Fix clean target.
 +
 +  [changes introduce in 60.8.0esr-1+rpi1 by Peter Michael Green]
 +  * Use a fake homedir for build (Closes: 933757).
 +
 +  [changes introduced in 68.2.0esr-1+rpi1 by Peter Michael Green]
 +  * Disable webrtc, it seems to fail to build on raspbian.
 +  * Try to disable Neon
 +
 +  [changes introduced in 78.3.0esr-2+rpi1 by Peter Michael Green]
 +  * Clean up pycache directories.
 +  * Disable neon in qcms.
 +
 +  [changes brought over from thunderbird 1:91.3.2-1+rpi1 by Peter Michael Green]
 +  * Use a #define instead of a typedef for double_t in fdlibm to prevent conflicting
 +    definitions error.
 +
 +  [changes brought over from thunderbird 1:102.1.1-1+rpi1 by Peter Michael Green]
 +  * Disable more armv7/neon stuff.
 +
 +  [changes introduced in 102.2.0esr-1+rpi1 by Peter Michael Green]
 +  * Disable jit (or at least try to)
 +    + Pass disable-jit from debian/rules
 +    + Nerf jit detection in s/moz.configure
 +
 +  [changes introduced in 115.3.0esr-1+rpi1 by Peter Michael Green]
 +  * Disable conflicting include in js/src/jit/shared/AtomicOperations-shared-jit.cpp
 +
 +  [changes introduced in 128.11.0esr-1+rpi1 by Peter Michael Green]
 +  * Update rust target hack to accomodate changes in upstream target selection.
 +  * Workaround asm bug with bx lr (see: https://github.com/EmbarkStudios/crash-handling/issues/5)
 +
-  -- Raspbian forward porter <root@raspbian.org>  Thu, 30 Jul 2026 02:24:25 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Mon, 07 Sep 2026 07:59:29 +0000
++
+ firefox-esr (140.14.0esr-2) unstable; urgency=medium
+ 
+   * third_party/rust/glslopt/.cargo-checksum.json,
+     third_party/rust/glslopt/glsl-optimizer/include/c11/threads_posix.h:
+     Fix conficting types for once_flag and call_once. Fixes: #1128875.
+ 
+  -- Mike Hommey <glandium@debian.org>  Wed, 19 Aug 2026 09:51:19 +0900
+ 
+ firefox-esr (140.14.0esr-1) unstable; urgency=medium
+ 
+   * New upstream release.
+   * Fixes for mfsa2026-70, also known as:
+     CVE-2026-74934, CVE-2026-74935, CVE-2026-74936, CVE-2026-74939,
+     CVE-2026-74940, CVE-2026-74941, CVE-2026-74942, CVE-2026-74943,
+     CVE-2026-74944, CVE-2026-74945, CVE-2026-74946, CVE-2026-74948,
+     CVE-2026-74949, CVE-2026-74953, CVE-2026-74957, CVE-2026-74959,
+     CVE-2026-74960, CVE-2026-74962, CVE-2026-74963, CVE-2026-74964,
+     CVE-2026-74965, CVE-2026-74967, CVE-2026-74969, CVE-2026-74971,
+     CVE-2026-74972, CVE-2026-74973, CVE-2026-74974, CVE-2026-74976,
+     CVE-2026-74983, CVE-2026-74987, CVE-2026-74990.
+ 
+  -- Mike Hommey <glandium@debian.org>  Wed, 19 Aug 2026 08:11:51 +0900
  
  firefox-esr (140.13.0esr-2) unstable; urgency=medium