- firefox-esr (102.13.0esr-1~deb12u1+rpi1) bookworm-staging; urgency=medium
++firefox-esr (115.3.0esr-1+rpi1) trixie-staging; urgency=medium
+
+ [changes brought forward from 60.3.0esr-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Wed, 05 Dec 2018 06:56:52 +0000]
+ * Hack broken rust target selection so it produces the right target
+ on raspbian.
+ * Fix clean target.
+
+ [changes introduce in 60.8.0esr-1+rpi1 by Peter Michael Green]
+ * Use a fake homedir for build (Closes: 933757).
+
+ [changes introduced in 68.2.0esr-1+rpi1 by Peter Michael Green]
+ * Disable webrtc, it seems to fail to build on raspbian.
+ * Try to disable Neon
+
+ [changes introduced in 78.3.0esr-2+rpi1 by Peter Michael Green]
+ * Clean up pycache directories.
+ * Disable neon in qcms.
+
+ [changes brought over from thunderbird 1:91.3.2-1+rpi1 by Peter Michael Green]
+ * Use a #define instead of a typedef for double_t in fdlibm to prevent conflicting
+ definitions error.
+
+ [changes brought over from thunderbird 1:102.1.1-1+rpi1 by Peter Michael Green]
+ * Disable more armv7/neon stuff.
+
+ [changes introduced in 102.2.0esr-1+rpi1 by Peter Michael Green]
+ * Disable jit (or at least try to)
+ + Pass disable-jit from debian/rules
+ + Nerf jit detection in s/moz.configure
+
- -- Raspbian forward porter <root@raspbian.org> Sat, 29 Jul 2023 23:04:55 +0000
++ -- Peter Michael Green <plugwash@raspbian.org> Thu, 09 Nov 2023 17:20:43 +0000
+
- firefox-esr (102.13.0esr-1~deb12u1) bookworm-security; urgency=medium
+ firefox-esr (115.3.0esr-1) unstable; urgency=medium
* New upstream release.
- * Fixes for mfsa2023-23, also known as:
- CVE-2023-37201, CVE-2023-37202, CVE-2023-37207, CVE-2023-37208,
- CVE-2023-37211.
+ * Fixes for mfsa2023-42, also known as:
+ CVE-2023-5169, CVE-2023-5171, CVE-2023-5176.
+
+ * debian/control*, debian/rules: Work around bug 1052002 by force-using
+ clang-14.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 27 Sep 2023 05:43:46 +0900
+
+ firefox-esr (115.2.1esr-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fix for mfsa2023-40, also known as CVE-2023-4863.
+
+ * debian/upstream.mk, debian/repack.py: Get l10n sources from zip archives.
+ Thanks David Turner for the initial implementation.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 13 Sep 2023 06:30:23 +0900
+
+ firefox-esr (115.2.0esr-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fixes for mfsa2023-36, also known as:
+ CVE-2023-4573, CVE-2023-4574, CVE-2023-4575, CVE-2023-4577,
+ CVE-2023-4051, CVE-2023-4578, CVE-2023-4053, CVE-2023-4580,
+ CVE-2023-4581, CVE-2023-4583, CVE-2023-4584, CVE-2023-4585.
+
+ * debian/watch: Refresh.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 30 Aug 2023 06:03:46 +0900
+
+ firefox-esr (115.1.0esr-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fixes for mfsa2023-31, also known as:
+ CVE-2023-4045, CVE-2023-4046, CVE-2023-4047, CVE-2023-4048,
+ CVE-2023-4049, CVE-2023-4050, CVE-2023-4055, CVE-2023-4056,
+ CVE-2023-4057.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 02 Aug 2023 06:15:06 +0900
+
+ firefox-esr (115.0.2esr-1) unstable; urgency=medium
+
+ * New upstream release.
+
+ * security/nss/lib/freebl/unix_rand.c,
+ security/nss/cmd/shlibsign/shlibsign.c: Unapply changes for Hurd, as
+ there is no rustc there.
+
+ -- Mike Hommey <glandium@debian.org> Fri, 14 Jul 2023 13:40:53 +0900
+
+ firefox (115.0.2-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fixes for mfsa2023-26, also known as CVE-2023-3600.
+
+ * debian/control*, debian/compat: Bump debhelper compat level to 12.
+ * debian/rules:
+ - Stop compressing debug info at link time.
+ - Use dh_missing.
+ - Disable dwz for libxul.
+ - Disable debug symbols on riscv64, because linking takes so long that
+ buildds kill the build after 420 minutes of "inactivity".
+ - Remove libgtk2 exclusion in dh_shlibdeps call. The dependency is long
+ gone.
+ - Stop cleaning up configure. It is unnecessary nowadays.
+ - Rely on dh_update_autotools_config instead of manual grunt work.
+ - Stop overriding dh_clean.
+ * debian/browser.mozconfig.in, debian/control.in, debian/rules,
+ debian/upstream.mk: Remove support for stretch.
+ * debian/symbols.apt.conf, debian/symbols.mk, debian/symbols.sources.list:
+ Remove symbol dumping scripts. They haven't been used to upload symbols
+ for a long time, and Mozilla now pulls the symbols rather than us
+ uploading them.
+
+ * build/unix/elfhack/elf.cpp, build/unix/elfhack/elfhack.cpp,
+ build/unix/elfhack/elfxx.h: More properly handle files > 4GB in elfhack.
+ bz#1840931.
+ * media/libaom/moz.build: After all, we did need that patch. bz#1842933.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 12 Jul 2023 09:16:06 +0900
+
+ firefox (115.0.1-1) unstable; urgency=medium
+
+ * New upstream release.
+
+ * debian/patches: Consolidate patches in two categories instead of four.
+ Also remove some unuseful patches:
+ + xpcom/reflect/xptcall/md/unix/moz.build,
+ xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_sh.cpp,
+ xpcom/reflect/xptcall/src/md/unix/xptcstubs_linux_sh.cpp: Remove xptcall
+ support for SH4. We don't have rustc on SH4 anyways.
+ + media/libaom/moz.build: libaom neon flags are better set as of bz#1791482
+ and shouldn't require a patch.
+
+ * gfx/skia/moz.build: Work around GCC ICE on ppc64el.
+
+ -- Mike Hommey <glandium@debian.org> Tue, 11 Jul 2023 06:39:31 +0900
+
+ firefox (115.0-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fixes for mfsa2023-22, also known as:
+ CVE-2023-3482, CVE-2023-37201, CVE-2023-37202, CVE-2023-37203,
+ CVE-2023-37204, CVE-2023-37205, CVE-2023-37206, CVE-2023-37207,
+ CVE-2023-37208, CVE-2023-37209, CVE-2023-37210, CVE-2023-37211,
+ CVE-2023-37212.
* debian/rules, media/ffvpx/config_unix64.h: Work around
- https://sourceware.org/bugzilla/show_bug.cgi?id=30578.
+ https://sourceware.org/bugzilla/show_bug.cgi?id=30578. Closes: #1040328.
+
+ * gfx/skia/moz.build: Undefine the mips builtin macro on mips in skia.
+ bz#1841197.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 05 Jul 2023 06:46:25 +0900
+
+ firefox (114.0.2-1) unstable; urgency=medium
+
+ * New upstream release.
+
* debian/upstream.mk: Unstable is trixie.
+ * debian/rules: Use in-tree NSS on bookworm.
+
+ -- Mike Hommey <glandium@debian.org> Thu, 22 Jun 2023 13:54:23 +0900
+
+ firefox (114.0-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fixes for mfsa2023-20, also known as:
+ CVE-2023-34414, CVE-2023-34415, CVE-2023-34416, CVE-2023-34417.
+
+ * debian/browser.install.in: Install gfxtest and vaapitest.
- -- Mike Hommey <glandium@debian.org> Wed, 05 Jul 2023 05:33:32 +0900
+ -- Mike Hommey <glandium@debian.org> Wed, 07 Jun 2023 05:52:21 +0900
- firefox-esr (102.12.0esr-1~deb12u1) bookworm-security; urgency=medium
+ firefox (113.0.2-1) unstable; urgency=medium
* New upstream release.
- * Fixes for mfsa2023-19, also known as:
- CVE-2023-34414, CVE-2023-34416.
- -- Mike Hommey <glandium@debian.org> Wed, 07 Jun 2023 05:34:19 +0900
+ * dom/base/nsTextFragment.cpp, dom/base/nsTextFragmentGeneric.h,
+ dom/base/nsTextFragmentGenericFwd.h: Isolate SSE2 requirements to
+ SSE-compiled file. bz#1827566.
- firefox-esr (102.11.0esr-1) unstable; urgency=medium
+ -- Mike Hommey <glandium@debian.org> Sat, 27 May 2023 05:00:29 +0900
+
+ firefox (113.0-1) unstable; urgency=medium
+
+ * New upstream release.
+ * Fixes for mfsa2023-16, also known as:
+ CVE-2023-32205, CVE-2023-32206, CVE-2023-32207, CVE-2023-32208,
+ CVE-2023-32209, CVE-2023-32210, CVE-2023-32211, CVE-2023-32212,
+ CVE-2023-32213, CVE-2023-32215, CVE-2023-32216.
+
+ * debian/control, debian/l10n/browser-l10n.control: Refresh locales.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 10 May 2023 06:47:20 +0900
+
+ firefox (112.0.1-1) unstable; urgency=medium
* New upstream release.
- * Fixes for mfsa2023-17, also known as:
- CVE-2023-32205, CVE-2023-32206, CVE-2023-32207, CVE-2023-32211,
- CVE-2023-32212, CVE-2023-32213, CVE-2023-32215.
- -- Mike Hommey <glandium@debian.org> Wed, 10 May 2023 06:32:15 +0900
+ * gfx/thebes/gfxFont.cpp, gfx/thebes/gfxFontEntry.cpp: Don't attempt
+ to use font extents if we didn't get a valid 'head' table, or if
+ it's not an sfnt resource. bz#1827950. Closes: #1034363.
- firefox-esr (102.10.0esr-1) unstable; urgency=medium
+ -- Mike Hommey <glandium@debian.org> Thu, 20 Apr 2023 06:12:33 +0900
+
+ firefox (112.0-1) unstable; urgency=medium
* New upstream release.
- * Fixes for mfsa2023-14, also known as:
- CVE-2023-29533, CVE-2023-29535, CVE-2023-29536, CVE-2023-29539,
- CVE-2023-29541, CVE-2023-1945, CVE-2023-29548, CVE-2023-29550.
+ * Fixes for mfsa2023-13, also known as:
+ CVE-2023-29533, CVE-2023-29535, CVE-2023-29536, CVE-2023-29537,
+ CVE-2023-29538, CVE-2023-29539, CVE-2023-29540, CVE-2023-29541,
+ CVE-2023-29543, CVE-2023-29544, CVE-2023-29547, CVE-2023-29548,
+ CVE-2023-29549, CVE-2023-29550, CVE-2023-29551.
+
+ * debian/control*: Bump nss build dependency.
+ * debian/control: Add libavcodec60 recommendation.
+
+ * security/manager/ssl/builtins/build.rs,
+ security/manager/ssl/builtins/src/certdata.rs: Revert upstream change to
+ preserve compatibility with rustc 1.63.
+
+ -- Mike Hommey <glandium@debian.org> Wed, 12 Apr 2023 09:53:55 +0900
+
+ firefox (111.0.1-1) unstable; urgency=medium
+
+ * New upstream release.
+
+ -- Mike Hommey <glandium@debian.org> Sat, 25 Mar 2023 05:21:58 +0900
- -- Mike Hommey <glandium@debian.org> Wed, 12 Apr 2023 06:37:17 +0900
+ firefox (111.0-3) unstable; urgency=medium
- firefox-esr (102.9.0esr-2) unstable; urgency=medium
+ * dom/media/webaudio/AudioNodeEngine*: Forward declare arch-specific xsimd
+ specialization. bz#1822901.
+
+ -- Mike Hommey <glandium@debian.org> Tue, 21 Mar 2023 09:28:00 +0900
+
+ firefox (111.0-2) unstable; urgency=medium
* gfx/skia/generate_mozbuild.py, gfx/skia/moz.build: Remove explicit NEON
- flags from skia build. Closes: #982794. Thanks Emanuele Rocca.
+ flags from skia build. Thanks Emanuele Rocca.
+ * dom/media/webaudio/AudioNodeEngineGeneric.h: Use fully specified xsimd::batch
+ type. bz#1821363.
+ * third_party/libwebrtc/moz.build: Add now removed desktop_capture_generic_gn
+ directory.
- -- Mike Hommey <glandium@debian.org> Sat, 18 Mar 2023 06:53:38 +0900
+ -- Mike Hommey <glandium@debian.org> Tue, 21 Mar 2023 06:18:07 +0900
- firefox-esr (102.9.0esr-1) unstable; urgency=medium
+ firefox (111.0-1) unstable; urgency=medium
* New upstream release.
- * Fixes for mfsa2023-10, also known as:
- CVE-2023-25751, CVE-2023-28164, CVE-2023-28162, CVE-2023-25752,
- CVE-2023-28176.
+ * Fixes for mfsa2023-09, also known as:
+ CVE-2023-25750, CVE-2023-25751, CVE-2023-28160, CVE-2023-28164,
+ CVE-2023-28161, CVE-2023-28162, CVE-2023-25752, CVE-2023-28176,
+ CVE-2023-28177.
+ * debian/control*: Bump nss build dependency.
+ * debian/control, debian/l10n/browser-l10n.control: Refresh locales.
* debian/browser.mozconfig.in: Disable wasm sandboxing on s390x for now.
It doesn't work at the moment.