Change logs for xulrunner source package in Sid

  • xulrunner (1.9.1.11-1) unstable; urgency=high
    
    
      * New upstream release.
      * Fixes mfsa-2010-{34-37,39-42,45-47}, also known as
        CVE-2010-1211, CVE-2010-1208, CVE-2010-1209, CVE-2010-1214,
        CVE-2010-2752, CVE-2010-2753, CVE-2010-1205, CVE-2010-1213,
        CVE-2010-2751, CVE-2010-0654, CVE-2010-2754.
    
      * debian/control*:
        - Add build-depends on libglib2.0-dev (>= 2.18.0) for filemonitor.
          Closes: #587636.
        - Bump libnss build-depends to fit what configure is looking for.
          Closes: #587637.
        - Remove conflict/replace for very old packages.
        - Bump Standards-Version to 3.9.0.0.
        - Fit the Uploaders field to reality.
      * debian/mozconfig.in, debian/rules: Check if mozconfig system library
        options will properly set the right variables. Closes: #587639
      * debian/reftest-app/application.ini: Set a MaxVersion in our reftest-app
        application.ini.
      * debian/extra-stuff/Makefile.in: Use Preprocessor.py instead of
        preprocessor.pl in debian/extra-stuff.
      * debian/python-xpcom.postinst: Run update-python-modules -p after
        python-xpcom installation so that xulrunner trigger doesn't choke.
        Closes: #582071.
      * debian/rules: Only set -std=gnu++0x flag when using g++ 4.4+.
    
      * xpcom/reflect/xptcall/src/md/unix/*ppc_linux*: Add support for powerpcspe.
        Closes: #586072.
    
     -- Mike Hommey <email address hidden>  Tue, 20 Jul 2010 23:42:15 +0200
  • xulrunner (1.9.1.10-1) unstable; urgency=high
    
    
      * New upstream release.
      * Fixes mfsa-2010-{26-33}, also known as
        CVE-2010-1200, CVE-2010-1201, CVE-2010-1202, CVE-2010-0183,
        CVE-2010-1198, CVE-2010-1196, CVE-2010-1199, CVE-2010-1125,
        CVE-2010-1197, CVE-2008-5913.
        Closes: #532516
    
      * debian/rules: Strip symbols in the spidermonkey-bin package.
      * debian/control.*:
        - xulrunner-1.9.x needs to depend on a strict version of libmozjs.
          Closes: #580173.
        - libmozjs2d breaks older xulrunner-1.9.1. Closes: #580104.
    
      * modules/libpr0n/encoders/png/nsPNGEncoder.cpp: Use png_set_filter to make
        libpng not use write filters. bz#564410.
      * netwerk/protocol/http/src/nsHttpChannel.cpp: Make sure to call
        OnStartRequest even if we're failing on an SSL CONNECT. bz#561536.
        Closes: #553635.
      * memory/jemalloc/jemalloc.c: Use syscall() for mmap and munmap, and disable
        ncpus use in jemalloc to work around deadlocks. Replaces the previous patch
        to use a small pool of static memory during initialization. bz#435683
    
      * debian/test.mk: Re-enable PNG xpcshell tests that were failing when using
        system library.
    
     -- Mike Hommey <email address hidden>  Wed, 23 Jun 2010 11:48:22 +0200
  • xulrunner (1.9.1.9-7) unstable; urgency=low
    
    
      * debian/control*, debian/rules: Don't include spidermonkey-bin debugging
        symbols in libmozjs-dbg. There is actually not much to be debugged in smjs
        itself, while the need to conflict with all other libmozjs-dbg packages is
        a big caveat. Closes: #579251.
      * debian/extra-stuff/addonsInfo.js, debian/extra-stuff/debUpdateNotifier.js:
        Use the nsIPluginTag_1_9_2 interface when available, in debian/extra-stuff
        components.
    
      * xpcom/reflect/xptcall/src/md/unix/Makefile.in,
        xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_sh.cpp,
        xpcom/reflect/xptcall/src/md/unix/xptcstubs_linux_sh.cpp: Add xptcall
        support for SH4 processors. Closes: #553593. bz#382214.
      * xpcom/threads/nsProcessCommon.cpp: Fix remaining race condition when
        calling nsProcess.Kill. bz#543441.
    
     -- Mike Hommey <email address hidden>  Sat, 01 May 2010 10:03:32 +0200
  • xulrunner (1.9.1.9-3) unstable; urgency=low
    
    
      * debian/rules, debian/test.mk: Move reftest-app cleanup to debian/test.mk.
      * debian/python-xpcom.prerm.in: python-xpcom prerm needs to be pre-processed.
      * debian/remove.nonfree: There are still some .cvsignore files in the
        upstream tarballs.
      * debian/extra-stuff/packages-static.xulrunner: Install debian.jar and
        debian.manifest ; without them, the upgrade notifier doesn't work.
    
     -- Mike Hommey <email address hidden>  Fri, 02 Apr 2010 20:50:15 +0200
  • xulrunner (1.9.1.8-6) unstable; urgency=low
    
    
      * debian/extra-stuff/filemonitor/Makefile.in,
        debian/extra-stuff/packages-static.xulrunner,
        debian/xulrunner-BASE_VERSION.install.in,
        debian/extra-stuff/Makefile.in: Revert previous change to move Debian
        specific components into
        $GRE_DIR/distribution/bundles/debian/components.
      * toolkit/xre/nsXREDirProvider.*: Revert previous change to load
        distribution bundles from GRE directory, too. See bz#551132 comment #7.
      * extensions/java/xpcom/Makefile.in: Disable tests for javaxpcom.
      * debian/rules:
        - Change the way the test suite is called. At the same time, prepend
          test suite output with the test suite name, so that the various test
          results can be easily filtered.
        - Build javaxpcom jars whenever /usr/bin/javac can be found. This
          simplifies how the packages are built.
        - Do a global dh_testdir test instead of running it in individual rules.
      * js/src/nanojit/NativeARM.*: Fix ever-growing stack in JIT on ARM.
        bz#545747.
      * layout/reftests/first-letter/399941-[89]*.html: Don't fail reftest
        first-letter tests because of a background bug. bz#512487.
      * layout/svg/crashtests/crashtests.list: Skip 441368-1.svg crash test,
        as it triggers an almost infinite loop.
      * toolkit/components/downloads/test/unit/test_bug_406857.js: Don't block
        on test_bug_406857.js when example.com is not reachable. bz#553995.
        Closes: #571390.
      * storage/src/mozStorageService.cpp: Don't error-out when run-time
        libsqlite is older than build-time libsqlite In Debian, we have shlibs
        to handle this.
      * debian/rules, debian/reftest-app, debian/control: Run reftest and
        crashtest to get more code coverage on all architectures. Prepare for
        surprises.
      * layout/reftests/font-face/local-1*.html: Use Bitstream Vera as an
        alternative font in reftest font-face/local-1. bz#554029.
      * modules/libpr0n/test/reftest/apng/reftest.list: Disable apng reftest
        when apng support is not built.
      * modules/libpr0n/test/reftest/pngsuite-ancillary/reftest.list: Skip png
        tests that are known to fail. bz#471917.
      * layout/reftests/bugs/reftest.list: reftest 424074-1-ref2.xul passes
        depending on the gtk theme. bz#554036.
      * debian/control: Build depend on the fonts that are required for the
        reftests.
      * toolkit/components/search/nsSearchService.js: Download search engine
        icons when searchplugin is read-only. bz#554265.
      * debian/extra-stuff/debUpdateNotifier.js: Fall back to the application
        name as defined in application.ini when the application doesn't
        contain a brandShortName in its branding chrome.
      * debian/extra-stuff/Makefile.in, debian/extra-stuff/debUpdateNotifier.js,
        debian/extra-stuff/debUpdateNotifier.properties: Allow to localize the
        debUpdateNotifier popup message. At the same time, slightly reword the
        text to be more explicit about what is going to be restarted.
        Closes: #574160.
      * xulrunner/stub/nsXULStub.cpp: Resolve GRE directory symbolic link.
        bz#530196, bz#550659.
      * debian/xulrunner-BASE_VERSION.preinst.in: Remove the check for the
        chrome directory in /usr/lib/xulrunner-$VERSION It was only necessary
        in 1.9.0.x versions when it moved and was replaced by a symlink.
    
     -- Mike Hommey <email address hidden>  Wed, 24 Mar 2010 12:15:54 +0100
  • xulrunner (1.9.1.8-5) unstable; urgency=low
    
    
      * js/src/Makefile.in:
        - Simplify installation of nanojit headers.
        - DESTDIR support in js/src/Makefile.in. bz#482747.
        - Install js shell when running make install from js/src.
        - Install the .so symlink to the versioned library with make install.
      * configure.in, configure: Simplify how js/src/configure is called from
        main configure. bz#548273.
      * debian/rules: Use make install from js/src. This allows to install the
        js shell and C headers more easily.
      * debian/rules: Generate debhelper files before the install target.
      * debian/control.in, debian/control, debian/dh/dh_xulrunner.in: Don't rely
        on readelf -p in dh_xulrunner. Now rely on objdump -h, which should be
        available on stable and probably oldstable. This means we can lift the
        binutils dependencies.
        Note there was a binutils build dependency before, for a very old mips
        bug, but the required version was already in oldstable, so removing the
        build-dep altogether just works. Closes: #568888.
      * debian/*: Get the libmozjs SO version from js/src/Makefile.in and
        generate control files from it.
      * xpcom/glue/nsTArray.*, xpcom/glue/nsTPtrArray.h: Always align AutoArrays
        for 64-bits words, as decided with upstream.
      * debian/rules, debian/symbols.filter: Unconditionally filter any C++
        mangled symbol from libmozjs.
      * debian/rules, debian/xulrunner-BASE_VERSION.1.in: Add a (basic) manual
        page. Closes: #394567.
      * debian/control.in, debian/control:
        - Remove libkrb5-dev build dependency.
        - Don't conflict with newer pango-graphite. Closes: #572380.
      * debian/extra-stuff/Makefile.in, debian/extra-stuff/debAbout.js,
        debian/extra-stuff/packages-static.xulrunner, toolkit/content/about.dtd,
        toolkit/content/about.xhtml, toolkit/content/jar.mn: Remove the debAbout
        component and its use in the about: page. We already removed its use
        from the iceweasel package, and it was the sole user of that feature.
      * toolkit/xre/nsXREDirProvider.*: Load distribution bundles from GRE
        directory, too.
      * debian/extra-stuff/filemonitor/Makefile.in,
        debian/extra-stuff/packages-static.xulrunner,
        debian/xulrunner-BASE_VERSION.install.in,
        debian/extra-stuff/Makefile.in: Move Debian specific components into
        $GRE_DIR/distribution/bundles/debian/components.
      * debian/rules: Use dh_auto_* --parallel where appropriate.
      * xpcom/tests/TestBlockingProcess.cpp: Modify patched TestBlockingProcess
        so that it builds cross-platforms. bz#543438.
      * debian/extra-stuff/addonsInfo.js: Manually sort plugins and extensions
        list in addons info component. This will make the component compatible
        with 1.9.2.
      * debian/extra-stuff/*.js: Get plugin path from nsIPluginTag.fullpath when
        available. nsIPluginTag.filename only contains the leaf name on 1.9.2.
      * debian/extra-stuff/debUpdateNotifier.js: Remove extra whitespace in
        restart prompt.
      * debian/extra-stuff/filemonitor/debGIOFileMonitorService.cpp: Allow
        giofilemonitor to monitor files too.
      * debian/copyright: Use DEP-5 format. Also remove some licensing terms
        when they can be found in a file in subdirectories that are not used to
        build the binary packages. Thanks Gabriele Giacone for the initial work.
    
     -- Mike Hommey <email address hidden>  Mon, 08 Mar 2010 15:33:35 +0100
  • xulrunner (1.9.1.8-4) unstable; urgency=low
    
    
      * debian/control, debian/rules: Rename xulrunner:Recommends variable to
        gnome:Depends.
      * debian/control: Switch gnome support dependencies from Recommends to
        Suggests. Closes: #570579.
      * modules/plugin/Makefile.in: Don't build the null plugin.
      * debian/xulrunner-1.9.1.install: Don't install
        /usr/lib/xulrunner-1.9.1/plugins now it's empty.
      * debian/rules:
        - Remove media libraries headers from xulrunner-dev.
        - Only generate the fr_FR locale when it is not available on the
          system. It appears the locales-all package Provides: locales but
          localedef doesn't work with it.
        - Don't remove debian/*.shlibs.local, which are never created, in the
          clean target.
        - Don't remove debian/libmozjs2d.symbols. recursively: it's a file.
        - Generate maintainer scripts and other files on all binary-* targets.
          This will also fix the lack of proper maintainer scripts on the uploaded
          architecture.
        - Don't call dh_pysupport from override_dh_install. dh will run it anyways.
      * debian/*: Generalize the use of $(BASE_VERSION) in the packaging. This
        should make packaging different releases at the same time easier.
      * debian/mozconfig.in: Remove more obsolete mozconfig options.
      * debian/control{,.in}: Suggest libcanberra0.
      * widget/src/gtk2/Makefile.in, widget/src/gtk2/nsWindow.*: Replace
        mozDrawingarea with a single GdkWindow. bz#506433.
      * widget/src/gtk2/mozcontainer.*, widget/src/gtk2/nsWindow.cpp: Reuse the
        GdkWindow in MozContainers. bz#506433.
      * widget/src/gtk2/nsWindow.*: Destroy child nsWindows when destroying the
        parent. bz#522635. Closes: #571138.
      * widget/src/gtk2/mozcontainer.h: Header adjustment for imported changes.
        Changes from bz#506433 rely on bz#471877 being applied, and we now need
        gtkversion.h on top of gtkcontainer.h.
      * widget/src/gtk2/nsWindow.cpp: Handle side-effect sibling destruction when
        destroying child windows. bz#528386.
    
     -- Mike Hommey <email address hidden>  Thu, 25 Feb 2010 15:26:16 +0100
  • xulrunner (1.9.1.8-3) unstable; urgency=low
    
    
      * xpcom/reflect/xptcall/src/md/unix/xptcstubs_mips.cpp: Fix xptcstubs on
        mipsel. The previous patch for mips broke it.
      * debian/xulrunner-1.9.1.preinst: Don't fail in preinst when
        /usr/lib/mozilla doesn't exist. Closes: #570388.
      * toolkit/components/url-classifier/src/nsUrlClassifierDBService.cpp:
        Revert work around for alignment problems on sparc.
      * xpcom/glue/nsTArray.*, xpcom/glue/nsTPtrArray.h: Force better
        nsAutoT{Ptr,}Array buffer alignment. This solves issues on sparc in a
        better way than the previous workaround that missed some other failure
        cases. bz#448658. Closes: #568214.
      * js/src/Makefile.in: Move cleanup changes to match equivalent upstream
        changes on trunk.
      * debian/rules: Re-enable test suite on arm.
    
     -- Mike Hommey <email address hidden>  Sun, 21 Feb 2010 08:19:35 +0100
  • xulrunner (1.9.1.8-2) unstable; urgency=low
    
    
      * The "too much magic kills the magic" release.
      * debian/rules:
        - Use configure instead of dh_auto_configure, as the latter doesn't
          support autoconf 2.13 generated configure scripts properly.
          Closes: #570311.
        - Use --no-print-directory option of make instead of -s, since dh likes
          to set MAKEFLAGS=-w.
        - Disable the test suite on arm. There is one failing test, but to debug
          it, I'd prefer the arm buildd to actually generate debs so that I don't
          have to wait 2 days to be able to debug (the buildd being significantly
          faster to build than the porterbox).
      * debian/extra-stuff/packages-static.xulrunner: Actually install the
        debUpdateNotifier component.
      * debian/control: Relax binutils dependency.
    
     -- Mike Hommey <email address hidden>  Thu, 18 Feb 2010 08:59:30 +0100
  • xulrunner (1.9.1.8-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2010-{01-05}, also known as
        CVE-2010-0159, CVE-2010-0160, CVE-2009-1571, CVE-2009-3988,
        CVE-2010-0162.
    
      * debian/control:
        + Add missing ${misc:Depends}
        + Build-depend on binutils with readelf -p support. Closes: #568888.
        + xulrunner-dev depends on binutils with readelf -p support.
        + Bump Standards-Version to 3.8.4.0.
        + Fix the xulrunner-1.9.1-dbg package description.
        + Don't allow different versions of xulrunner-1.9.1, python-xpcom and
          xulrunner-1.9.1-dbg to be installed at the same time. Likewise for
          libmozjs2d-dbg, libmozjs2d and spidermonkey-bin.Thanks Adrian von
          Bidder. Closes: #570085.
      * debian/xulrunner-1.9.1.preinst: Change permissions of /usr/lib/mozilla
        and /usr/lib/mozilla/extensions. As earlier versions of xulrunner could
        create these directories with the wrong permissions at runtime, we need
        to change their permissions if they exist.
      * debian/xulrunner-1.9.1.docs, debian/rules: Remove non installation of
        README.txt. It was setup to be installed in xulrunner-1.9.1.docs, but was
        explicitely excluded with a -X argument to dh_installdocs. Removing both
        just has the same effect.
      * debian/rules:
        + Change the way the MPL file is created.
        + Remove old comments from dh-make templates.
        + Don't unnecessarily set LD_LIBRARY_PATH when building.
      * debian/control, debian/compat, debian/rules: Switch to using dh.
      * debian/extra-stuff/addonsInfo.js:
        + Always prevent application to do something when given the
          --dump-addons-info option.
        + Avoid missing newline in dump-addons-info output when no plugins are
          installed.
      * debian/extra-stuff/debUpdateNotifier.js: Slightly reword update notifier
        restart prompt.
      * debian/extra-stuff, debian/filemonitor, debian/rules: Move
        debian/filemonitor into debian/extra-stuff.
      * xulrunner/app/Makefile.in: Revert one-liner harmless change that was the
        result of a bad merge.
    
      * config/config.mk, config/rules.mk, js/src/config/config.mk,
        js/src/config/rules.mk: Remove pseudo speed enhancements for
        my{config,rules}.mk as agreed with upstream. bz#541767.
      * js/src/configure.in, js/src/configure: Avoid using -fshort-wchar in
        libmozjs, as it was done in the main configure script.
      * toolkit/components/url-classifier/src/nsUrlClassifierDBService.cpp:
        Work around alignment problems on sparc. bz#448658.
      * intl/uconv/ucvlatin/nsUCS2BEToUnicode.cpp,
        intl/uconv/ucvlatin/nsUTF32ToUnicode.cpp: Fixes for misaligned accesses
        on sparc and arm. bz#544512. Closes: #568214.
      * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_ppc_linux.cpp,
        xpcom/reflect/xptcall/tests/TestXPTCInvoke.cpp: Fix for padding of long
        long arguments on ppc xptcall. bz#520367. Closes: #568213.
      * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_arm.cpp: Fix xptcinvoke on
        arm. bz#476903.
      * js/src/nanojit/NativeARM.cpp: Fix stack alignment on function calls in
        JIT on arm. bz#545747. Closes: #568212.
      * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_mips.cpp,
        xpcom/reflect/xptcall/src/md/unix/xptcstubs_mips.cpp: Fix xptinvoke and
        xptstubs on mips o32 big endian. Closes: #568249.
      * widget/src/gtk2/nsPrintDialogGTK.cpp: Don't show the SVG output option
        in the print dialog. bz#546093. Closes: #569809.
    
     -- Mike Hommey <email address hidden>  Wed, 17 Feb 2010 21:38:23 +0100
  • xulrunner (1.9.1.6-2) unstable; urgency=low
    
    
      * modules/libpref/src/prefapi.cpp: Fix crash with SwitchProxy installed.
        Closes: #559501.
      * toolkit/components/console/jsconsole-clhandler.js,
        toolkit/xre/nsAppRunner.cpp: Fix misalignments in --help command line.
        bz#458631, xulrunner part.
      * debian/extra-stuff/Makefile.in, debian/extra-stuff/addonsInfo.js,
        debian/extra-stuff/reportbug-helper-script, debian/rules,
        debian/xulrunner-1.9.1.install: Add a component that dumps addons
        information, and a helper script for reportbug
      * debian/rules: Move debAbout component into debian/extra-stuff.
      * debian/extra-stuff/debAbout.js: Simplify debAbout component by using
        XPCOMUtils.
      * debian/control, debian/rules, debian/xulrunner-1.9.1-gnome-support.install,
        debian/xulrunner-1.9.1.install: Merge xulrunner-1.9.1-gnome-support into
        xulrunner-1.9.1.
      * toolkit/mozapps/update/src/nsUpdateService.js.in: Avoid creating the
        updates directory when update service is disabled. bz#538933.
      * toolkit/xre/nsXREDirProvider.cpp: Avoid creating
        /usr/lib/mozilla/extensions 0700 when running as root. bz#538929.
        Closes: #559926.
      * build/Makefile.in, build/automation-build.mk, build/automation.py.in,
        build/pgo/Makefile.in, layout/tools/reftest/Makefile.in,
        testing/mochitest/Makefile.in: Don't remove build/automationutils.py
        on make clean. bz#525047.
      * Makefile.in, config/config.mk, config/rules.mk, js/src/config/config.mk,
        js/src/config/rules.mk: Avoid creating config/my{config,rules}.mk.
        bz#541767.
      * build/automation-build.mk: Remove automation.py in make clean. bz#541768.
      * build/Makefile.in: Remove leaktest files in make clean. bz#541769.
      * js/src/Makefile.in: Remove generated files from js/src during make
        distclean. bz#541770.
      * js/src/xpconnect/src/Makefile.in: Cleanup idl-parser leftovers in make
        clean. bz#541774.
      * xulrunner/installer/Makefile.in: Properly clean
        xulrunner/installer/*.system.conf.
      * debian/control: Remove build dependency against liblcms1-dev.
      * configure.in, configure: Remove --enable-system-lcms check, which somehow
        resisted merges with upstream.
      * debian/mozconfig: cookie, permissions and spellcheck are no longer
        extensions.
      * debian/control, debian/mozconfig, debian/rules, debian/test/*: Remove the
        custom test application and use upstream xpcshell-tests instead.
      * debian/rules:
        + Remove useless setting of JAVA_HOME when ./configure'ing.
        + Correctly handle the nocheck DEB_BUILD_OPTIONS flag.
        + Replace findstring with filter when checking DEB_BUILD_OPTIONS.
        + Remove xpcshell-tests that are known and expected to fail, at least for
          now.
      * toolkit/mozapps/extensions/src/nsExtensionManager.js.in: Avoid extension
        manager failure when there is no branding (like in the testsuite).
        Workaround for bz#455238.
      * extensions/java/xpcom/Makefile.in: Disable javaxpcom tests at build time
        when DEB_NO_JAR is unset.
      * debian/extra-stuff/Makefile.in: Add basic places preferences by default.
        These are required for places to work properly in xul applications that
        wouldn't set them.
      * js/src/config/check-sync-dirs.py, js/src/config/check-sync-exceptions:
        Add (obvious) exceptions for js/src/config/check-sync-dirs.py. We also
        modify the script so that given directories can be ignored. bz#542468.
      * debian/rules, debian/control: Also run "make check" in the test target.
      * extensions/python/xpcom/Makefile.in: Disable python-xpcom tests for now.
      * debian/control: Build-Conflict with libhildonmime-dev and libosso-dev.
      * config/rules.mk, js/src/config/rules.mk: Synchronize config/rules.mk and
        js/src/config/rules.mk for check-sync-dirs.py.
      * debian/rules, debian/extra-stuff/packages-static.xulrunner,
        debian/extra-stuff/Makefile.in: Avoid installing test programs by using
        upstream "installer". We use the installer files from firefox so that
        most files are properly listed already, to which we add xulrunner and
        debian specific files.
      * js/src/config/rules.mk, config/rules.mk, debian/rules: Gross workaround
        to avoid installing test idl and include files in the SDK. bz#542749.
      * debian/rules: Only fix permissions in /usr/include and /usr/share.
      * debian/control:
        + Change xulrunner-1.9.1's section to libs. Closes: #551701.
        + Bump libcairo2-dev build dependency. Upstream decided once more to
          enforce runtime dependencies as build time *sigh*.
      * js/src/Makefile.in: Install missing nanojit and .tbl headers from js/src.
        bz#542789.
      * debian/rules: Properly install mozjs header files in /usr/include.
        Closes: #560404.
      * chrome/src/nsChromeRegistry.*, chrome/test/unit/test_bug519468.js,
        toolkit/xre/nsXREDirProvider.cpp: Allow intl.locale.matchOS to be
        modified in user profile. bz#519468. Closes: #417961.
      * chrome/src/nsChromeRegistry.cpp, chrome/test/unit/test_bug519468.js:
        Override intl.locale.matchOS if general.useragent.locale is set in user
        profile. This allows the Quick Locale Switcher extension to work.
        bz#542999
      * debian/rules: Allow to pass TEST_PATH to xpcshell-tests, in which case we
        don't run make check. This allows to run a given xpcshell test.
      * debian/libmozjs-dev.install, debian/libmozjs-dev.links: Install
        libmozjs.so through dh_install instead of dh_link.
      * debian/xulrunner-1.9.1.install, debian/xulrunner-1.9.1.prerm: Make
        .autoreg part of the package.
      * debian/rules: Fail dh_install when it doesn't install everything (except
        the libmozillainterfaces-java stuff)
      * debian/rules: Remove the file comparison scripts. We now use dh_install
        --fail-missing, and the upstream installer guarantees debian/tmp content
        from dist/bin.
      * debian/control, debian/rules: Use fr_FR.UTF-8 locale during tests.
      * xpcom/threads/nsProcessCommon.cpp: Avoid crashing when trying to kill a
        nsProcess that is already terminated. bz#543441.
      * xpcom/tests/TestBlockingProcess.cpp: Don't use stdin to block the
        TestBlockingProcess. This made the nsIProcess unit test fail in pbuilder.
        bz#543438.
      * debian/rules: Add a test to ensure dh_xulrunner works properly.
      * debian/dh/dh_xulrunner.in:
        + Add hint about the dh sequence addon in dh_xulrunner manpage.
        + Also add a note about dh_shlibdeps required to be run beforehand.
        + Fix dh_xulrunner after the xpcom glue changes in 1.9.1.6-1.
          Closes: #567746.
        + Avoid displaying errors when an ELF file doesn't contain an .rodata
          section.
      * xpcom/tests/Makefile.in: Cleanup xpcom/tests/TestScriptable.h on make
        clean. bz#543464.
      * build/Makefile.in: Cleanup build/automationutils.pyc on make clean.
        bz#543469.
      * debian/rules: Remove unused {DEBIAN,UPSTREAM}_VERSION variables.
      * debian/filemonitor/*, debian/rules, debian/xulrunner-1.9.1.install:
        Add a file monitoring component, based on GIOFileMonitor.
      * debian/extra-stuff/Makefile.in, debian/extra-stuff/debUpdateNotifier.js:
        Add an update notifier component. This component uses the file monitor
        component to track plugins, extensions, GRE and application updates, and
        prompts for restart in case a system upgrade occurred. The prompt still
        needs to be enhanced and localized.
    
     -- Mike Hommey <email address hidden>  Tue, 02 Feb 2010 08:44:43 +0100
  • xulrunner (1.9.1.6-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2009-{65-70}, also known as
        CVE-2009-3979, CVE-2009-3980, CVE-2009-3982, CVE-2009-3388,
        CVE-2009-3389, CVE-2009-3983, CVE-2009-3984, CVE-2009-3985,
        CVE-2009-3986.
      * xpcom/glue/standalone/nsGlueLinkingDlopen.cpp: Revert changes introduced
        in 1.9~b4-1 that should not be necessary anymore. This code also
        FTBFS'ed with gcc-4.4. Closes: #560462.
    
     -- Mike Hommey <email address hidden>  Wed, 16 Dec 2009 11:41:36 +0100
  • xulrunner (1.9.1.5-2) unstable; urgency=low
    
    
      * configure.in, configure: Work around FTBFS on mips by disabling TLS
        support.
      * debian/control:
        + python-xpcom Breaks epiphany-gecko (<< 2.28) instead of conflicting
          with epiphany-browser. Closes: #556622.
        + libmozjs2d Breaks xulrunner-1.9.1 (<< 1.9.1.4). Closes: #556658.
        + Make xulrunner-1.9.1-gnome-support depend on libgnomeui-0.
          Closes: #555162.
      * js/src/configure.in, js/src/configure,
        media/libsydneyaudio/src/Makefile.in: Fix FTBFS on hurd-i386. Thanks
        Samuel Thibault. Closes: #556244.
      * xulrunner/installer/libxul-embedding*.pc.in: Add -ldl. Closes: #556888.
      * js/jsd/jsd_xpc.cpp: Fix JS debugger crash on 64-bit: don't truncate PC
        to jsuint in jsds_FilterHook. bz#510040. Closes: #542768.
      * toolkit/content/inlineSpellCheckUI.js: Support both - and _ separators
        in dictionary names when making them user friendly. bz#514151.
    
     -- Mike Hommey <email address hidden>  Mon, 23 Nov 2009 20:04:19 +0100
  • xulrunner (1.9.1.5-1) unstable; urgency=low
    
    
      * New upstream release.
      * debian/remove.nonfree: Synchronize with Iceape 2.0.
      * debian/copyright: Update with missing information, and remove lcms
        licensing as it was dropped in 1.9.1.4.
      * debian/mozconfig: Remove obsolete options.
      * debian/rules:
        + Put -Wl,--as-needed in front of OS_LDFLAGS.
        + Update config.{guess,sub} in js/src/build/autoconf, too.
        + Don't modify platform.ini.
      * debian/control:
        + xulrunner-1.9.1 breaks iceweasel versions earlier than 3.5.5-1, as
          their GRE version range is not broad enough.
        + Build depend on libreadline-dev before libreadline5-dev.
          Closes: #553873.
        + Force a runtime dependency on libcairo2 >= 1.8.8 for @font-face
          support. Closes: #537350.
        + Bump Standards-Version to 3.8.3.0.
        + Tighten libmozjs-dev dependency on libmozjs2d.
      * memory/jemalloc/jemalloc.c: Remove remainings of an old patch that was
        applied upstream in jemalloc.
      * extensions/python/xpcom/src/loader/Makefile.in,
        extensions/python/xpcom/src/module/Makefile.in: Fix rpath in the
        pyxpcom components.
    
     -- Mike Hommey <email address hidden>  Thu, 12 Nov 2009 21:22:29 +0100
  • xulrunner (1.9.1.4-1) unstable; urgency=low
    
    
       * New upstream release.
       * Fixes mfsa-2009-{52,53-57,59,61-64}, also known as
         CVE-2009-3370, CVE-2009-3274, CVE-2009-3371, CVE-2009-3372,
         CVE-2009-3373, CVE-2009-3374, CVE-2009-1563, CVE-2009-3375,
         CVE-2009-3376, CVE-2009-3377, CVE-2009-3378, CVE-2009-3379,
         CVE-2009-3380, CVE-2009-3381, CVE-2009-3383.
       * debian/control:
         + Bump sqlite build dependency to 3.6.16.
         + libmozjs2d-dbg conflicts with libmozjs1d-dbg. Closes: #550626.
       * debian/libmozjs1d.symbols, debian/rules: Add new symbols and bump shlibs.
    
     -- Mike Hommey <email address hidden>  Wed, 28 Oct 2009 16:15:45 +0100
  • xulrunner (1.9.1.3-3) unstable; urgency=low
    
    
      * debian/xulrunner-1.9.1.links: Point dictionaries to /usr/share/hunspell.
        Closes: #549875.
    
     -- Mike Hommey <email address hidden>  Sat, 10 Oct 2009 11:10:46 +0200
  • xulrunner (1.9.0.14-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2009-{47-50}, also known as
        CVE-2009-3070, CVE-2009-3071, CVE-2009-3072, CVE-2009-3074,
        CVE-2009-3075, CVE-2009-3076, CVE-2009-3077, CVE-2009-3078.
      * debian/control: Build depend on newer libnss3-dev.
    
     -- Mike Hommey <email address hidden>  Thu, 10 Sep 2009 08:08:06 +0200
  • xulrunner (1.9.0.13-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2009-44, also known as CVE-2009-2654.
    
     -- Mike Hommey <email address hidden>  Thu, 20 Aug 2009 07:10:26 +0200
  • xulrunner (1.9.0.12-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2009-{34,35,37,39,40}, also known as
        CVE-2009-2462, CVE-2009-2463, CVE-2009-2464, CVE-2009-2465,
        CVE-2009-2466, CVE-2009-2467, CVE-2009-2469, CVE-2009-2471,
        CVE-2009-2472.
      * debian/libmozjs1d.symbols: Add new symbol.
    
     -- Mike Hommey <email address hidden>  Wed, 22 Jul 2009 20:51:07 +0200
  • xulrunner (1.9.0.11-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2009-{24-32}, also known as
        CVE-2009-1392, CVE-2009-1832, CVE-2009-1833, CVE-2009-1834,
        CVE-2009-1835, CVE-2009-1836, CVE-2009-1837, CVE-2009-1838,
        CVE-2009-1839, CVE-2009-1840, CVE-2009-1841.
    
     -- Mike Hommey <email address hidden>  Fri, 12 Jun 2009 07:36:01 +0200
  • xulrunner (1.9.0.10-1) unstable; urgency=high
    
    
      * New upstream release.
      * Fixes mfsa-2009-23 also known as CVE-2009-1313 (Regression crash).
        Closes: #525740.
    
     -- Mike Hommey <email address hidden>  Tue, 28 Apr 2009 07:26:33 +0200
  • xulrunner (1.9.0.9-1) unstable; urgency=high
    
    
      * New upstream release.
      * Fixes mfsa-2009-{14-19,21,22}, also known as
        CVE-2009-1302, CVE-2009-1303, CVE-2009-1304, CVE-2009-1305,
        CVE-2009-0652, CVE-2009-1306, CVE-2009-1307, CVE-2009-1308,
        CVE-2009-1309, CVE-2009-1311, CVE-2009-1312.
    
     -- Mike Hommey <email address hidden>  Wed, 22 Apr 2009 20:59:09 +0200
  • xulrunner (1.9.0.8-1) unstable; urgency=high
    
    
      * New upstream release.
      * Fixes mfsa-2009-{12,13}, also known as
        CVE-2009-1169 and CVE-2009-1044.
    
     -- Mike Hommey <email address hidden>  Sat, 28 Mar 2009 10:32:35 +0100
  • xulrunner (1.9.0.7-1) unstable; urgency=high
    
    
      * New upstream release.
      * Fixes mfsa-2009-{07-09}, also known as
        CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774,
        CVE-2009-0775, CVE-2009-0776.
    
     -- Mike Hommey <email address hidden>  Sun, 08 Mar 2009 11:20:05 +0100
  • xulrunner (1.9.0.6-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2009-{01,02,04-06}, also known as
        CVE-2009-0352, CVE-2009-0353, CVE-2009-0354, CVE-2009-0356,
        CVE-2009-0357, CVE-2009-0358.
    
     -- Mike Hommey <email address hidden>  Wed, 04 Feb 2009 08:00:40 +0100
  • xulrunner (1.9.0.5-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2008-{60,63-68}, also known as
        CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5505,
        CVE-2008-5506, CVE-2008-5507, CVE-2008-5508, CVE-2008-5510,
        CVE-2008-5511, CVE-2008-5512.
      * debian/control: conflict with pango-graphite, to avoid all problems
        it causes.
    
     -- Mike Hommey <email address hidden>  Sat, 20 Dec 2008 10:55:24 +0100
  • xulrunner (1.9.0.4-2) unstable; urgency=low
    
    
      * debian/xulrunner-1.9.preinst: Brown paper bag fix to avoid failure on
        install (upgrades were fine).
    
     -- Mike Hommey <email address hidden>  Sun, 23 Nov 2008 09:34:15 +0100
  • xulrunner (1.9.0.4-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2008-{47,51-58}, also known as
        CVE-2008-0017, CVE-2008-4582, CVE-2008-5015, CVE-2008-5016,
        CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021,
        CVE-2008-5022, CVE-2008-5023, CVE-2008-5024.
      * debian/postinst.in: Use a temporary directory as $HOME when running
        xpcshell. Thanks Theppitak Karoonboonyanan. Closes: #495311.
      * debian/rules:
        + Exclude jemalloc from kfreebsd packages, as it is not built.
          Thanks Petr Salinger. Closes: #501476.
        + Use LDFLAGS instead of CFLAGS to set -Wl,--no-relax on alpha.
      * modules/libpr0n/src/imgRequest.cpp: Apply patch from bz#373701 to
        properly close streaming HTTP connections and avoid sucking bandwidth.
        Closes: #491144.
      * browser/app/mozilla.in: Do exec instead of uselessly forking.
        Closes: #496626.
      * memory/jemalloc/jemalloc.c: Apply patch from bz#460933 to avoid
        possible deadlock on fork with jemalloc enabled.
      * xpcom/glue/nsThreadUtils.cpp: Better fix to avoid crashes such as bug
        #481925. Might fix bug #503926, too.
      * debian/xulrunner-1.9.preinst: If /usr/lib/xulrunner-1.9/chrome is an
        empty directory, remove it. This will allow dpkg to create the symbolic
        link correctly. Closes: #482415, #486334, #486354, #492488.
      * toolkit/components/url-classifier/src/Makefile.in: Disable optimization
        on alpha as it leads to crashes when using this component.
      * uriloader/exthandler/nsMIMEInfoImpl.h,
        uriloader/exthandler/unix/nsMIMEInfoUnix.cpp,
        uriloader/exthandler/unix/nsOSHelperAppService.cpp,
        uriloader/exthandler/unix/nsOSHelperAppService.h: Revert change from
        release 1.9.0.1-1.
      * uriloader/exthandler/unix/nsMIMEInfoUnix.cpp: Properly launch
        applications set in $HOME/.mailcap. Replaces the previous patch in
        a much simpler way.
    
     -- Mike Hommey <email address hidden>  Sat, 22 Nov 2008 12:50:09 +0100
  • xulrunner (1.9.0.3-1) unstable; urgency=low
    
    
      * New upstream release.
      * Fixes mfsa-2008-{40-44}, also known as
        CVE-2007-3837, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060,
        CVE-2008-4065, CVE-2008-4066, CVE-2008-4066, CVE-2008-4067.
      * debian/xulrunner-1.9.install: Don't install dependentlibs.list. It's
        causing problems with gdb and is not necessary on our builds.
      * debian/control: Bumped Standards-Version to 3.8.0.1. No changes.
      * xulrunner/app/Makefile.in: Use browser/app/mozilla.in instead of
        xulrunner/app/mozilla.in. The browser version has received more love
        upstream, and properly remove the xremote code, which has been handled
        by the binary itself for a while, and causes some problems on PPC at
        least.
      * build/unix/run-mozilla.sh, debian/postinstrm.in, debian/rules,
        xulrunner/stub/nsXULStub.cpp: Disable jemalloc by default, because of all
        the kinds of random problems it causes, but let advanced users load it by
        setting the MOZILLA_JEMALLOC environment variable. Closes: #490360.
      * debian/rules: Create sdk/bin as a symlink to /usr/lib/xulrunner-1.9.
        Closes: #491693
      * modules/plugin/base/src/nsPluginHostImpl.cpp: Don't register plugins if
        the MOZILLA_DISABLE_PLUGINS environment variable is set.
    
     -- Mike Hommey <email address hidden>  Sun, 28 Sep 2008 16:30:37 +0200