path: root/debian/changelog

firefox (110.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/control*: Build depend on the rustc version we have in unstable.
    Closes: #1031357.

  * Cargo.lock, python/mozboot/mozboot/util.py,
    servo/components/selectors/context.rs,
    servo/components/selectors/parser.rs,
    servo/components/style/gecko/selector_parser.rs,
    servo/components/style/properties/gecko.mako.rs,
    servo/components/style/style_resolver.rs,
    servo/components/style/stylesheets/container_rule.rs,
    servo/components/style/stylist.rs,
    third_party/rust/cstr/.cargo-checksum.json,
    third_party/rust/cstr/Cargo.toml,
    third_party/rust/cstr/README.md,
    third_party/rust/cstr/src/lib.rs: Relax minimum supported rust version
    to 1.63.
  * js/src/irregexp/moz.build: Suppress false positive error for GCC.
    bz#1810584.

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Mar 2023 08:35:30 +0900

firefox (110.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2023-05, also known as:
    CVE-2023-25728, CVE-2023-25730, CVE-2023-0767, CVE-2023-25735,
    CVE-2023-25737, CVE-2023-25739, CVE-2023-25729, CVE-2023-25732,
    CVE-2023-25731, CVE-2023-25733, CVE-2023-25736, CVE-2023-25741,
    CVE-2023-25742, CVE-2023-25744, CVE-2023-25745.

  * debian/control*: Bump nss, rustc and cargo build dependencies.

  * third_party/wasm2c/src/common.h,
    third_party/wasm2c/src/prebuilt/wasm2c.include.c,
    third_party/wasm2c/src/wasm2c.c.tmpl: Use compiler macros to detect big
    endian.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 Feb 2023 09:14:45 +0900

firefox (109.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2023-01, also known as:
    CVE-2022-23597, CVE-2023-23598, CVE-2023-23601, CVE-2023-23602,
    CVE-2023-23603, CVE-2023-23604, CVE-2023-23605, CVE-2023-23606.

  * debian/control*:
    - Bump nss build dependency.
    - Bump cargo dependency back to what it's supposed to be.
  * debian/browser.mozconfig.in, debian/control*: Enable wasm sandboxing
    on bookworm.

  * build/moz.configure/compilers-util.configure,
    toolkit/moz.configure: Add more configure checks for the wasm toolchain
    setup. bz#1747145.
    toolkit/moz.configure: Allow to build without a wasi sysroot. bz#1810627
  * build/moz.configure/rust.configure: Revert the relaxing of the cargo
    dependency now that we have the right version in unstable.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Jan 2023 06:27:19 +0900

firefox (108.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Tue, 10 Jan 2023 08:00:05 +0900

firefox (108.0-2) unstable; urgency=medium

  * security/manager/ssl/tests/unit/tlsserver/cmd/moz.build,
    security/manager/ssl/tests/unit/tlsserver/lib/moz.build,
    security/moz.build: Pseudo-revert bz#1754746 and bz#1799121.
    Closes: #1026072.
  * .cargo/config.in, Cargo.lock, Cargo.toml, third_party/rust/uniffi*,
    third_party/rust/weedle2*: Make uniffi-bindgen more deterministic
    across platforms.

 -- Mike Hommey <glandium@debian.org>  Thu, 15 Dec 2022 17:42:19 +0900

firefox (108.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-51, also known as:
    CVE-2022-46871, CVE-2022-46872, CVE-2022-46873, CVE-2022-46874,
    CVE-2022-46877, CVE-2022-46878, CVE-2022-46879.

  * debian/control*: Bump rustc and nss build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Dec 2022 07:56:15 +0900

firefox (107.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 03 Dec 2022 05:49:43 +0900

firefox (107.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-47, also known as:
    CVE-2022-45403, CVE-2022-45404, CVE-2022-45405, CVE-2022-45406,
    CVE-2022-45407, CVE-2022-45408, CVE-2022-45409, CVE-2022-45410,
    CVE-2022-45411, CVE-2022-45412, CVE-2022-40674, CVE-2022-45415,
    CVE-2022-45416, CVE-2022-45417, CVE-2022-45418, CVE-2022-45419,
    CVE-2022-45420, CVE-2022-45421.

  * debian/rules:
    - Use internal libevent on buster.
    - Invoke python with PYTHONDONTWRITEBYTECODE instead of -B.
  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Nov 2022 08:10:27 +0900

firefox (106.0.5-1) unstable; urgency=medium

  * New upstream release.

  * media/ffvpx/config_unix_aarch64.h: Don't build libav with sysctl on
    Unix AArch64. bz#1791275.

 -- Mike Hommey <glandium@debian.org>  Mon, 07 Nov 2022 06:06:42 +0900

firefox (106.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-44, also known as:
    CVE-2022-42927, CVE-2022-42928, CVE-2022-42929, CVE-2022-42930,
    CVE-2022-42931, CVE-2022-42932.

  * debian/control*: Bump nss and libvpx build dependencies.
  * debian/rules: Build with vendored libvpx on bullseye.

  * mozglue/misc/SIMD.cpp, mozglue/misc/SIMD_avx2.cpp: Restrict SIMD_avx2 to
    AMD64. bz#1792158.
  * modules/fdlibm/src/math_private.h: Do not define unused float_t type in
    fdlibm. bz#1789560.
  * js/src/jit/GenerateAtomicOperations.py: Add missing includes to
    AtomicOperationsGenerated.h. bz#1792159.
  * third_party/libwebrtc/build/config/compiler/BUILD.gn,
    third_party/libwebrtc/**/moz.build: Fix webrtc FTBFS from missing sse2
    flags. bz#1795993.

 -- Mike Hommey <glandium@debian.org>  Wed, 19 Oct 2022 05:59:30 +0900

firefox (105.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 28 Sep 2022 07:40:44 +0900

firefox (105.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-40, also known as:
    CVE-2022-40959, CVE-2022-40960, CVE-2022-40958, CVE-2022-40956,
    CVE-2022-40957, CVE-2022-40962.

  * debian/control*: Bump rustc and nss build dependencies.

  * python/mozbuild/mozbuild/nodeutil.py: Relax nodejs minimum version.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Sep 2022 07:22:10 +0900

firefox (104.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Tue, 13 Sep 2022 09:08:49 +0900

firefox (104.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-33, also known as:
    CVE-2022-38472, CVE-2022-38473, CVE-2022-38475, CVE-2022-38477,
    CVE-2022-38478.

  * debian/rules, debian/control: Fix libavcodec recommends. Closes: #1017782.
  * debian/control*: Bump nss and nodejs build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Aug 2022 07:17:28 +0900

firefox (103.0.2-2) unstable; urgency=medium

  * debian/rules: Remove old and now unnecessary workarounds.

  * intl/icu/source/common/unicode/std_string.h,
    intl/icu/source/common/utypeinfo.h,
    intl/icu/source/io/unicode/ustream.h: Remove workaround for old libstdc++
    problem, which now causes problems with GCC 12 on arm.
  * third_party/libwebrtc/moz.build: Add missing webrtc directory for ppc64el
    (bz#1775202).

 -- Mike Hommey <glandium@debian.org>  Mon, 15 Aug 2022 15:46:49 +0900

firefox (103.0.2-1) unstable; urgency=medium

  * New upstream release.
  * debian/rules:
    - Use thinLTO for rust on armhf, to stay in the memory budget with an
      armhf toolchain.
    - Use MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=none instead of
      MACH_USE_SYSTEM_PYTHON=1.
  * debian/rules, debian/watch, debian/watch.in: Generate debian/watch and
    fix it.

  * js/src/jit/mips-shared/CodeGenerator-mips-shared.cpp,
    js/src/jit/mips-shared/SharedICHelpers-mips-shared-inl.h,
    js/src/jit/mips-shared/SharedICHelpers-mips-shared.h,
    js/src/jit/mips64/Assembler-mips64.h,
    js/src/jit/mips64/MacroAssembler-mips64.cpp,
    js/src/jit/mips64/Simulator-mips64.cpp,
    js/src/jit/mips64/Trampoline-mips64.cpp,
    js/src/jit/shared/Lowering-shared-inl.h,
    js/src/wasm/WasmFrameIter.cpp: Fix FTBFS on mips64. bz#1776825.
  * third_party/libwebrtc/moz.build: Work around bz#1775202 to fix FTBFS on
    ppc64el.
  * config/makefiles/rust.mk: Allow to override rust LTO flag.

 -- Mike Hommey <glandium@debian.org>  Sun, 14 Aug 2022 15:28:01 +0900

firefox (103.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-28, also known as:
    CVE-2022-36319, CVE-2022-36318, CVE-2022-36315, CVE-2022-36316,
    CVE-2022-36320, CVE-2022-2505.

  * debian/control*: Bump cbindgen and nss build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Jul 2022 10:07:35 +0900

firefox (102.0.1-3) unstable; urgency=medium

  * debian/rules: Fix the logic of the aarch64 test.

 -- Mike Hommey <glandium@debian.org>  Thu, 14 Jul 2022 11:31:47 +0900

firefox (102.0.1-2) unstable; urgency=medium

  * debian/rules: Tentatively improve detection of known failing cases on
    armhf.

 -- Mike Hommey <glandium@debian.org>  Thu, 14 Jul 2022 09:32:47 +0900

firefox (102.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/rules: Tentatively improve detection of known failing cases on
    armhf and mipsel.

 -- Mike Hommey <glandium@debian.org>  Thu, 14 Jul 2022 06:17:52 +0900

firefox (102.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-24, also known as:
    CVE-2022-34479, CVE-2022-34470, CVE-2022-34468, CVE-2022-34482,
    CVE-2022-34483, CVE-2022-34476, CVE-2022-34481, CVE-2022-34474,
    CVE-2022-34471, CVE-2022-34472, CVE-2022-2200, CVE-2022-34480,
    CVE-2022-34477, CVE-2022-34475, CVE-2022-34473, CVE-2022-34484,
    CVE-2022-34485.

  * build/moz.configure/bindgen.configure,
    gfx/webrender_bindings/webrender_ffi.h: Work around build failure with
    newer cbindgen. bz#1773259

 -- Mike Hommey <glandium@debian.org>  Wed, 29 Jun 2022 07:41:32 +0900

firefox (101.0.1-1) unstable; urgency=medium

  * New upstream release.

  * build/moz.configure/rust.configure, debian/control*: Allow to build with
    cargo in unstable.

 -- Mike Hommey <glandium@debian.org>  Fri, 10 Jun 2022 06:24:01 +0900

firefox (101.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-20, also known as:
    CVE-2022-31736, CVE-2022-31737, CVE-2022-31738, CVE-2022-31740,
    CVE-2022-31741, CVE-2022-31742, CVE-2022-31743, CVE-2022-31744,
    CVE-2022-31745, CVE-2022-1919, CVE-2022-31747, CVE-2022-31748.

  * debian/rules: Fail the build early when building for armhf on armhf
    (only works on arm64), and when building for mipsel on mipsel.
  * debian/control*: Bump rustc, cargo, cbindgen and nss build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Jun 2022 06:07:37 +0900

firefox (100.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-19, also known as CVE-2022-1802 and CVE-2022-1529.

 -- Mike Hommey <glandium@debian.org>  Sat, 21 May 2022 07:32:04 +0900

firefox (100.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-16, also known as:
    CVE-2022-29914, CVE-2022-29909, CVE-2022-29916, CVE-2022-29911,
    CVE-2022-29912, CVE-2022-29915, CVE-2022-29917, CVE-2022-29918.

 -- Mike Hommey <glandium@debian.org>  Wed, 04 May 2022 08:48:41 +0900

firefox (99.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-13, also known as:
    CVE-2022-1097, CVE-2022-28281, CVE-2022-28282, CVE-2022-28283,
    CVE-2022-28284, CVE-2022-28285, CVE-2022-28286, CVE-2022-28287,
    CVE-2022-24713, CVE-2022-28289, CVE-2022-28288.

  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 Apr 2022 09:04:22 +0900

firefox (98.0-2) unstable; urgency=medium

  * debian/rules: Install crash reporter files on arm64.

  * js/src/jit/GenerateAtomicOperations.py: Work around a GCC issue with
    generated atomics. bz#1756347.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 Mar 2022 09:09:43 +0900

firefox (98.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-10, also known as:
    CVE-2022-26383, CVE-2022-26384, CVE-2022-26387, CVE-2022-26381,
    CVE-2022-26382, CVE-2022-26385, CVE-2022-0843.
  * Fixes for mfsa2022-09, also known as: CVE-2022-26485, CVE-2022-26486.

  * debian/control*:
    - Bump nss build dependency.
    - Downgrade rust dependency to 1.56, and cargo to 0.57.

  * Cargo.lock, config/makefiles/rust.mk, python/mozboot/mozboot/util.py,
    servo/components/style/Cargo.toml, servo/components/style/build.rs,
    servo/components/style/lib.rs,
    servo/components/style/stylesheets/page_rule.rs,
    servo/components/style/stylist.rs,
    third_party/rust/audioipc2-client/.cargo-checksum.json,
    third_party/rust/audioipc2-client/Cargo.toml,
    third_party/rust/audioipc2-client/build.rs,
    third_party/rust/audioipc2-client/src/lib.rs,
    third_party/rust/wgpu-hal/.cargo-checksum.json,
    third_party/rust/wgpu-hal/src/gles/egl.rs: Relax minimum supported Rust
    version to 1.56.0.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Mar 2022 07:09:27 +0900

firefox (97.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-04, also known as:
    CVE-2022-22754, CVE-2022-22755, CVE-2022-22756, CVE-2022-22759,
    CVE-2022-22760, CVE-2022-22761, CVE-2022-22764, CVE-2022-0511.

  * debian/control*: Bump nss, rustc and cargo build dependencies.
  * debian/browser.install.in: Install libipcclientcerts.so.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Feb 2022 07:53:42 +0900

firefox (96.0.3-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Mon, 31 Jan 2022 06:21:31 +0900

firefox (96.0.1-1) unstable; urgency=medium

  * New upstream release.

  * modules/libpref/init/StaticPrefList.yaml: Disable cookie sameSite
    schemeful. bz#1750264.
  * dom/media/webrtc/third_party_build/gn-configs/x64_*_arm_linux.json,
    dom/media/webrtc/third_party_build/gn-configs/x64_*_ppc64_linux.json,
    third_party/libwebrtc/**/moz.build: Add webrtc configs for arm and
    ppc64 linux. bz#1738845.

 -- Mike Hommey <glandium@debian.org>  Sat, 15 Jan 2022 07:41:14 +0900

firefox (96.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2022-01, also known as:
    CVE-2022-22743, CVE-2022-22742, CVE-2022-22741, CVE-2022-22740,
    CVE-2022-22738, CVE-2022-22737, CVE-2021-4140, CVE-2022-22748,
    CVE-2022-22745, CVE-2022-22747, CVE-2022-22739, CVE-2022-22751,
    CVE-2022-22752.

  * debian/rules:
    - Adjust preprocessor command to upstream changes.
    - Set an objdir when using the preprocessor, and clean that up.
  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Jan 2022 08:03:30 +0900

firefox (95.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/control.in: Build against rustc-mozilla/cargo-mozilla on relevant
    older releases.

  * modules/fdlibm/src/math_private.h: Fix FTBFS on i386. bz#1729459.

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Dec 2021 07:05:23 +0900

firefox (95.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-52, also known as:
    CVE-2021-43536, CVE-2021-43537, CVE-2021-43538, CVE-2021-43539,
    CVE-2021-43540, CVE-2021-43541, CVE-2021-43542, CVE-2021-43543,
    CVE-2021-43544, CVE-2021-43545, CVE-2021-43546, MOZ-2021-0009.

  * debian/browser.mozconfig.in: Explicitly disable wasm sandboxing. We don't
    have the necessary tools yet.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Dec 2021 06:38:07 +0900

firefox (94.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Nov 2021 06:57:55 +0900

firefox (94.0-2) unstable; urgency=medium

  * debian/firefox.in: Use `command -v` instead of `which`. Does not affect
    this package, though.

  * .cargo/config.in, Cargo.lock, Cargo.toml,
    third_party/rust/cc/.cargo-checksum.json,
    third_party/rust/cc/Cargo.toml, third_party/rust/cc/src/lib.rs,
    third_party/rust/cc/src/windows_registry.rs: Update cc crate to
    b2f6b146b75299c444e05bbde50d03705c7c4b6e, aka 1.0.71 + GCC-11 fix for
    armhf. bz#1739040.
  * .cargo/config.in, Cargo.lock,
    third_party/rust/cubeb-pulse/.cargo-checksum.json,
    third_party/rust/cubeb-pulse/src/backend/stream.rs,
    toolkit/library/rust/shared/Cargo.toml: Upgrade cubeb-pulse to fix a race
    condition that can lead to shutdown deadlock. bz#1735905.
    (suspected to) Closes: #998108.

 -- Mike Hommey <glandium@debian.org>  Thu, 11 Nov 2021 16:32:50 +0900

firefox (94.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-48, also known as:
    CVE-2021-38503, CVE-2021-38504, CVE-2021-38506, CVE-2021-38507,
    CVE-2021-38508, MOZ-2021-0004, CVE-2021-38509, MOZ-2021-0005,
    MOZ-2021-0006, MOZ-2021-0007.
    (MOZ-* pending CVE assignment)

  * debian/control*: Bump nss, rustc and cargo build dependencies.

  * Cargo.toml, Cargo.lock, third_party/rust/naga/.cargo-checksum.json,
    third_party/rust/naga/Cargo.toml,
    third_party/rust/wgpu-core/.cargo-checksum.json,
    third_party/rust/wgpu-core/Cargo.toml, build/moz.configure/rust.configure:
    Remove workaround to build with an old cargo, now that Debian has a recent
    version.

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Nov 2021 08:20:50 +0900

firefox (93.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-43, also known as:
    CVE-2021-38496, CVE-2021-38497, CVE-2021-38498, CVE-2021-32810,
    CVE-2021-38500, CVE-2021-38501, CVE-2021-38499.

  * debian/control*: Bump nss build dependency.
  * debian/rules: Set MOZBUILD_STATE_PATH.

  * Cargo.toml, Cargo.lock, third_party/rust/naga/.cargo-checksum.json,
    third_party/rust/naga/Cargo.toml,
    third_party/rust/wgpu-core/.cargo-checksum.json,
    third_party/rust/wgpu-core/Cargo.toml: Work around the lack of resolver
    feature in unstable's cargo.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 Oct 2021 06:53:13 +0900

firefox (92.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-38, also known as:
    CVE-2021-38491, CVE-2021-38493, CVE-2021-38494.

  * debian/rules: Build against embedded nspr and nss on bullseye.
  * debian/upstream.mk: Add bookworm and trixie.
  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Sep 2021 07:57:38 +0900

firefox (91.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-37, also known as CVE-2021-29991.

  * debian/import-tar.py, debian/repack.py: Fixed for python 3.9.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Aug 2021 10:28:35 +0900

firefox (91.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-33, also known as:
    CVE-2021-29986, CVE-2021-29981, CVE-2021-29988, CVE-2021-29984,
    CVE-2021-29980, CVE-2021-29987, CVE-2021-29985, CVE-2021-29982,
    CVE-2021-29989, CVE-2021-29990.

  * debian/control*: Bump nspr, nss and rustc build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 11 Aug 2021 07:18:22 +0900

firefox (90.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-28, also known as:
    CVE-2021-29970, CVE-2021-29971, CVE-2021-29972, CVE-2021-29974,
    CVE-2021-29975, CVE-2021-29976, CVE-2021-29977.

  * debian/control*:
    - Bump nss build dependency.
    - Remove libgtk2 build dependency.
  * debian/browser.install.in: Don't install gtk2/libmozgtk.so.

  * widget/gtk/mozgtk/moz.build: Remove old workaround for bug #844357, which
    was fixed in binutils a long time ago.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Jul 2021 06:07:27 +0900

firefox (89.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 24 Jun 2021 07:57:24 +0900

firefox (89.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 18 Jun 2021 06:03:11 +0900

firefox (89.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-23, also known as:
    CVE-2021-29960, CVE-2021-29961, CVE-2021-29959, CVE-2021-29967,
    CVE-2021-29966.

  * debian/control*: Bump nss and cbindgen build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 02 Jun 2021 05:36:18 +0900

firefox (88.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-20, also known as CVE-2021-29952.

 -- Mike Hommey <glandium@debian.org>  Thu, 06 May 2021 07:01:54 +0900

firefox (88.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-16, also known as:
    CVE-2021-23994, CVE-2021-23995, CVE-2021-23996, CVE-2021-23997,
    CVE-2021-23998, CVE-2021-23999, CVE-2021-24000, CVE-2021-24001,
    CVE-2021-24002, CVE-2021-29945, CVE-2021-29944, CVE-2021-29946,
    CVE-2021-29947.

  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Tue, 20 Apr 2021 07:54:02 +0900

firefox (87.0-2) unstable; urgency=medium

  * js/src/jit/mips-shared/CodeGenerator-mips-shared.cpp,
    js/src/jit/mips-shared/MacroAssembler-mips-shared*,
    js/src/jit/mips*/MacroAssembler-mips*: Add missing JIT functions.
  * js/src/jit/mips64/MacroAssembler-mips64.cpp: Fix register conflict
    in ma_addPtrTestOverflow. bz#1685662.
  * gfx/wr/swgl/src/blend.h, gfx/wr/swgl/src/gl.cc: Don't use always_inline
    on large SWGL functions. bz#1700520.

 -- Mike Hommey <glandium@debian.org>  Wed, 31 Mar 2021 10:12:40 +0900

firefox (87.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-10, also known as:
    CVE-2021-23981, CVE-2021-23982, CVE-2021-23983, CVE-2021-23984,
    CVE-2021-23985, CVE-2021-23986, CVE-2021-23987, CVE-2021-23988.

  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Mar 2021 06:06:10 +0900

firefox (86.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 12 Mar 2021 10:30:34 +0900

firefox (86.0-2) unstable; urgency=medium

  * gfx/qcms/src/iccread.rs: Fix startup crash with malformed ICC profiles.
    bz#1694670.

 -- Mike Hommey <glandium@debian.org>  Tue, 09 Mar 2021 07:24:46 +0900

firefox (86.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-07, also known as:
    CVE-2021-23969, CVE-2021-23970, CVE-2021-23968, CVE-2021-23974,
    CVE-2021-23971, CVE-2021-23972, CVE-2021-23975, CVE-2021-23973,
    CVE-2021-23978, CVE-2021-23979.

  * debian/control*: Bump nss and cbindgen build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Feb 2021 06:57:42 +0900

firefox (85.0.1-1) unstable; urgency=medium

  * New upstream release.

  * build/moz.configure/rust.configure, debian/control*: Allow to build with
    cargo in unstable.

 -- Mike Hommey <glandium@debian.org>  Sat, 06 Feb 2021 07:54:04 +0900

firefox (85.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-03, also known as:
    CVE-2021-23953, CVE-2021-23954, CVE-2021-23955, CVE-2021-23956,
    CVE-2021-23958, CVE-2021-23960, CVE-2021-23961, CVE-2021-23962,
    CVE-2021-23963, CVE-2021-23964, CVE-2021-23965.

  * debian/control*: Bump rustc, cargo and nss build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Jan 2021 09:06:28 +0900

firefox (84.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2021-01, also known as CVE-2020-16044.

  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Thu, 07 Jan 2021 07:27:55 +0900

firefox (84.0-3) unstable; urgency=medium

  * debian/browser.install.in: s/aarch64/arm64/, facepalm.

 -- Mike Hommey <glandium@debian.org>  Fri, 18 Dec 2020 10:09:12 +0900

firefox (84.0-2) unstable; urgency=medium

  * debian/browser.install.in: Install libmozsandbox.so on aarch64 and arm*.

 -- Mike Hommey <glandium@debian.org>  Fri, 18 Dec 2020 05:59:54 +0900

firefox (84.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-54, also known as:
    CVE-2020-16042, CVE-2020-26971, CVE-2020-26972, CVE-2020-26973,
    CVE-2020-26974, CVE-2020-26976, CVE-2020-26978, CVE-2020-26979,
    CVE-2020-35111, CVE-2020-35113, CVE-2020-35114.

  * debian/control*: Bump nss build dependency.

  * build/moz.configure/rust.configure, debian/control*: Revert changes from
    79.0-1 allowing to build with cargo in unstable as of 2020-07-29 because
    we have the right version now.
  * intl/icu_sources_data.py: Revert changes from 72.0-1 to avoid building
    ICU in parallel because we don't build ICU using this script anymore.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Dec 2020 06:30:02 +0900

firefox (83.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-50, also known as:
    CVE-2020-26951, CVE-2020-26952, CVE-2020-16012, CVE-2020-26953,
    CVE-2020-26956, CVE-2020-26958, CVE-2020-26959, CVE-2020-26960,
    CVE-2020-26961, CVE-2020-26962, CVE-2020-26963, CVE-2020-26965,
    CVE-2020-26967, CVE-2020-26968, CVE-2020-26969.

  * debian/control*: Bump nss and cbindgen build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Nov 2020 07:06:09 +0900

firefox (82.0.3-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-49, also known as CVE-2020-26950.

 -- Mike Hommey <glandium@debian.org>  Tue, 10 Nov 2020 07:32:32 +0900

firefox (82.0.2-1) unstable; urgency=medium

  * New upstream release.

  * debian/control*: Remove autoconf2.13 build dependency.

  * config/external/icu/data/moz.build: Use the right data file for ICU on
    big endians. bz#1673769.

 -- Mike Hommey <glandium@debian.org>  Fri, 30 Oct 2020 06:03:59 +0900

firefox (82.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-45, also known as:
    CVE-2020-15969, CVE-2020-15254, CVE-2020-15680, CVE-2020-15681,
    CVE-2020-15682, CVE-2020-15683, CVE-2020-15684.

  [Emilio Pozuelo Monfort]
  * debian/browser.bug-presubj.in, debian/control.in, debian/rules,
    debian/symbols.mk, debian/upstream.mk: Remove support for jessie.
  * debian/control.in, debian/rules: stretch: build with LLVM 7, 4.0 doesn't
    support -std=gnu++17.
  * debian/rules:
    - stretch: build with GCC 7 from gcc-mozilla.
    - Call python with -B when regenerating the control files, so as to not
      generate bytecode files.
    - Call debian/l10n/gen with C.UTF-8 as the locale, otherwise it fails
    in stretch when opening the iso-codes files.
    - stretch: don't set NASM on !x86.

  [Mike Hommey]
  * debian/control*: Bump nss build dependency.

  * build/unix/elfhack/elf.cpp, build/unix/elfhack/elfxx.h: Fix elfhack
    for files > 2GiB and < 4GiB. bz#1495733.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Oct 2020 11:53:39 +0900

firefox (81.0-2) unstable; urgency=medium

  * dom/media/AsyncLogger.h: Fix AsyncLogger::TracePayload's mName
    size calculation. bz#1667007.

 -- Mike Hommey <glandium@debian.org>  Thu, 24 Sep 2020 16:22:35 +0900

firefox (81.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-42, also known as:
    CVE-2020-15675, CVE-2020-15677, CVE-2020-15676, CVE-2020-15678,
    CVE-2020-15673, CVE-2020-15674.

  * debian/control*: Bump nss build dependency.
  * debian/rules: Change l10n build integration:
    - it is not necessary to override LOCALE_MERGEDIR anymore
    - it is not necessary to call compare-locales manually
    - set MACH_USE_SYSTEM_PYTHON=1

  * js/src/jit/none/MacroAssembler-none.h: Bump CodeAlignment to 8.
    bz#1666646.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Sep 2020 07:56:45 +0900

firefox (80.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 03 Sep 2020 09:36:06 +0900

firefox (80.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-36, also known as:
    CVE-2020-15664, CVE-2020-12401, CVE-2020-6829, CVE-2020-12400,
    CVE-2020-15665, CVE-2020-15666, CVE-2020-15667, CVE-2020-15668,
    CVE-2020-15670.

  * debian/control*: Bump nss build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 26 Aug 2020 07:24:49 +0900

firefox (79.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-30, also known as:
    CVE-2020-15652, CVE-2020-6514, CVE-2020-15655, CVE-2020-15653,
    CVE-2020-6463, CVE-2020-15656, CVE-2020-15658, CVE-2020-15654,
    CVE-2020-15659.

  * debian/control*: Bump cbindgen, rustc, cargo, nss and python3 build
    dependencies.
  * debian/rules: Add -Cembed-bitcode=yes to rust command lines when
    using rustc >= 1.45.0.

  * build/moz.configure/rust.configure, debian/control*: Allow to build with
    cargo in unstable as of 2020-07-29.

 -- Mike Hommey <glandium@debian.org>  Wed, 29 Jul 2020 13:45:30 +0900

firefox (78.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fix for mfsa2020-28.

 -- Mike Hommey <glandium@debian.org>  Fri, 10 Jul 2020 09:37:04 +0900

firefox (78.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/rules:
    - Replace --disable-ion with --disable-jit.
    - Don't generated the ICU data file for big-endian manually.

  * js/src/jit/mips-shared/MacroAssembler-mips-shared-inl.h,
    js/src/jit/mips64/MacroAssembler-mips64-inl.h: Add branchTestSymbol
    and fallibleUnboxPtr. bz#1642265.
  * config/external/icu/data/*icudata*, config/external/icu/data/moz.build,
    js/moz.configure: Unify the includion of the ICU data file. bz#1650299.
  * config/external/icu/common/moz.build,
    config/external/icu/common/sources.mozbuild,
    config/external/icu/data/convert_icudata.py,
    config/external/icu/data/moz.build,
    config/external/icu/defs.mozbuild,
    config/external/icu/i18n/moz.build,
    config/external/icu/i18n/sources.mozbuild,
    config/external/icu/icupkg/moz.build,
    config/external/icu/icupkg/sources.mozbuild,
    config/external/icu/moz.build,
    config/external/icu/toolutil/moz.build,
    config/external/icu/toolutil/sources.mozbuild,
    config/recurse.mk,
    intl/icu_sources_data.py: Automatically convert the little-endian ICU data
    file for big-endian builds.

 -- Mike Hommey <glandium@debian.org>  Fri, 03 Jul 2020 17:07:38 +0900

firefox (78.0-1) unstable; urgency=medium

  * New upstream release
  * Fixes for mfsa2020-24, also known as:
    CVE-2020-12415, CVE-2020-12416, CVE-2020-12417, CVE-2020-12418,
    CVE-2020-12419, CVE-2020-12420, CVE-2020-12421, CVE-2020-12422,
    CVE-2020-12424, CVE-2020-12425, CVE-2020-12426.

  * debian/control*: Bump nss build dependency.
  * debian/control*, debian/rules: Remove build dependency on python2.7.
  * debian/browser.mozconfig.in: Remove obsolete configure options.

  * build/virtualenv_packages.txt: Don't install enum and enum34 virtualenv
    packages in python3 virtualenvs. bz#1632429.

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Jul 2020 10:14:06 +0900

firefox (77.0-1) unstable; urgency=medium

  * New upstream release
  * Fixes for mfsa2020-20, also known as:
    CVE-2020-12399, CVE-2020-12405, CVE-2020-12406, CVE-2020-12407,
    CVE-2020-12408, CVE-2020-12409, CVE-2020-12410, CVE-2020-12411.

  * debian/l10n/gen, debian/l10n_revs.py, debian/latest_nightly.py,
    debian/rules, debian/symbols.mk: Convert to python 3.
  * debian/control*: Bump nss and cbindgen build dependencies.
  * debian/rules:
    - Revert PKCS11 API change from 76.0.1-1 because the new API is
      now explicitly used by upstream code.
    - Stop passing -fno-schedule-insns2 -fno-lifetime-dse and
      -fno-delete-null-pointer-checks to GCC.

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Jun 2020 07:53:04 +0900

firefox (76.0.1-2) unstable; urgency=medium

  * debian/browser.mozconfig.in: Allow addon sideload. Closes: #960084.
  * debian/control*: Bump nasm build dependency to 2.14.

 -- Mike Hommey <glandium@debian.org>  Fri, 15 May 2020 09:10:36 +0900

firefox (76.0.1-1) unstable; urgency=medium

  * New upstream release

  * debian/rules: Force using old PKCS11 API when building against newer
    NSS releases. Closes: #960012.

 -- Mike Hommey <glandium@debian.org>  Wed, 13 May 2020 09:09:57 +0900

firefox (76.0-2) unstable; urgency=medium

  * Cargo.lock, third_party/rust/typenum/*: Upgrade typename to 1.12.0.
    bz#1635671. Fixes FTBFS on i386.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 May 2020 14:27:30 +0900

firefox (76.0-1) unstable; urgency=medium

  * New upstream release
  * Fixes for mfsa2020-16, also known as:
    CVE-2020-12387, CVE-2020-6831, CVE-2020-12390, CVE-2020-12391,
    CVE-2020-12392, CVE-2020-12394, CVE-2020-12395, CVE-2020-12396.

  * debian/control*: Bump nss build dependency.
  * debian/browser.install.in: Don't install blocklist.xml, it's not there
    anymore.

  * config/recurse.mk: Don't depend on in-tree NSS/NSPR when building against
    system NSS/NSPR. bz#1634926.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 May 2020 05:41:56 +0900

firefox (75.0-2) unstable; urgency=medium

  * build/moz.configure/util.configure: In configure, pass extra compiler
    flags after source path. Fixes FTBFS with --with-system-libvpx with
    gcc-9 >= 9-20190125-2.

 -- Mike Hommey <glandium@debian.org>  Sun, 19 Apr 2020 09:03:28 +0900

firefox (75.0-1) unstable; urgency=medium

  * New upstream release
  * Fixes for mfsa2020-12, also known as:
    CVE-2020-6821, CVE-2020-6822, CVE-2020-6823, CVE-2020-6824,
    CVE-2020-6825, CVE-2020-6826.

  * debian/control*: Bump nss, rustc, cargo, cbindgen and nodejs build
    dependencies.
  * debian/control*, debian/rules: Build against libvpx >= 1.8. We used
    to build-conflicts with that version, but that's not necessary now
    that upstream needs that version.
  * debian/browser.install.in: Don't install .chk files, they aren't
    produced anymore.
  * debian/browser.install.in, debian/browser.mozconfig.in, debian/control*,
    debian/rules: Don't build against system sqlite. This is not supported
    anymore.

  * python/mozbuild/mozbuild/nodeutil.py: Allow to build with older
    versions of nodejs 10.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Apr 2020 09:41:38 +0900

firefox (74.0.1-1) unstable; urgency=medium

  * New upstream release
  * Fixes for mfsa2020-11, also known as: CVE-2020-6819, CVE-2020-6820.

 -- Mike Hommey <glandium@debian.org>  Sat, 04 Apr 2020 06:42:37 +0900

firefox (74.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-08, also known as:
    CVE-2020-6805, CVE-2020-6806, CVE-2020-6807, CVE-2020-6808,
    CVE-2020-6809, CVE-2020-6810, CVE-2020-6811, CVE-2019-20503,
    CVE-2020-6812, CVE-2020-6813, CVE-2020-6814, CVE-2020-6815.

  * debian/rules:
    - Use the -o flag to redirect preprocessor output rather than shell
      redirection to work around bz#1621465.
    - Remove obj-*/.mozbuild on clean.
  * debian/control*: Bump nspr, nss, sqlite and cbindgen build dependencies.

  * config/mozunit/mozunit/mozunit.py,
    python/mozbuild/mozbuild/action/langpack_manifest.py,
    python/mozbuild/mozbuild/jar.py, python/mozbuild/mozbuild/preprocessor.py,
    python/mozbuild/mozbuild/test/backend/test_build.py: Use io.open() rather
    than open() in mozbuild/preprocessor.py. bz#1613263.
  * dom/canvas/ClientWebGLContext.h, dom/canvas/WebGLContext.h: Fix build
    errors with -Werror=format-security with GCC.

 -- Mike Hommey <glandium@debian.org>  Wed, 11 Mar 2020 12:15:37 +0900

firefox (73.0.1-1) unstable; urgency=medium

  * New upstream release.

  * gfx/2d/SwizzleNEON.cpp: Fix NEON compile error with gcc and RGB unpacking.
    bz#1610814.

 -- Mike Hommey <glandium@debian.org>  Thu, 20 Feb 2020 09:07:58 +0900

firefox (73.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-05, also known as:
    CVE-2020-6796, CVE-2020-6798, CVE-2020-6800, CVE-2020-6801.

  * debian/control*: Bump nss, rustc, cargo and cbindgen build dependencies.
  * debian/browser.install.in: Do not install now removed chrome.manifest
    and libnssdbm3.* files.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Feb 2020 06:57:23 +0900

firefox (72.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 22 Jan 2020 12:06:25 +0900

firefox (72.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fix for mfsa2020-03, also known as CVE-2019-17026.

 -- Mike Hommey <glandium@debian.org>  Thu, 09 Jan 2020 06:46:44 +0900

firefox (72.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2020-01, also known as:
    CVE-2019-17016, CVE-2019-17017, CVE-2019-17020, CVE-2019-17022,
    CVE-2019-17023, CVE-2019-17024, CVE-2019-17025.

  * debian/rules:
    - Don't build with --compress-debug-sections on jessie.
    - Use sourcestamp.txt for MOZ_BUILD_DATE.
    - Avoid running dh_update_autotools_config. We're dealing with this
      manually and we don't want config.* files being touched under
      third_party/rust.
  * debian/control*:
    - Bump nspr, nss and sqlite build dependencies.
    - Add missing dependency on libdrm-dev.
  * debian/browser.mozconfig.in: Explicitly build with wayland support
    enabled.

  * intl/icu_sources_data.py: Don't build ICU in parallel.
  * gfx/skia/skia/third_party/skcms/src/Transform_inl.h: Work around older
    GCC ICE on arm.
    (Thanks Emilio Pozuelo Monfort)

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Jan 2020 08:54:04 +0900

firefox (71.0-2) unstable; urgency=medium

  * dom/indexedDB/ActorsParent.cpp: Work around lack of support for
    http://eel.is/c++draft/class.temporary#6.7 in compilers. bz#1601707
    Closes: #946249, #946547.
  * layout/generic/WritingModes.h, servo/ports/geckolib/cbindgen.toml:
    Fix build with newer cbindgen. bz#1602358.

 -- Mike Hommey <glandium@debian.org>  Thu, 12 Dec 2019 09:38:33 +0900

firefox (71.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-36, also known as:
    CVE-2019-11756, CVE-2019-17008, CVE-2019-11745, CVE-2019-17014,
    CVE-2019-17010, CVE-2019-17005, CVE-2019-17011, CVE-2019-17012,
    CVE-2019-17013.

  * debian/l10n/gen: Add support for ca-valencia.
  * debian/control*: Bump nspr, nss, rustc and cargo build dependencies.
  * debian/rules, debian/control.in:
    - Build with nodejs-mozilla on jessie and stretch.
    - Build with nasm-mozilla on jessie and stretch.
    - Don't build with system libvpx on stretch.
    (Thanks Emilio Pozuelo Monfort)

 -- Mike Hommey <glandium@debian.org>  Wed, 04 Dec 2019 10:09:38 +0900

firefox (70.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 09 Nov 2019 07:53:49 +0900

firefox (70.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-34, also known as:
    CVE-2018-6156, CVE-2019-15903, CVE-2019-11757, CVE-2019-11759,
    CVE-2019-11760, CVE-2019-11761, CVE-2019-11762, CVE-2019-11763,
    CVE-2019-11765, CVE-2019-17000, CVE-2019-17001, CVE-2019-17002,
    CVE-2019-11764.

  * debian/control*: Bump nss, sqlite, rustc, cargo, and cbindgen build
    dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Oct 2019 07:30:42 +0900

firefox (69.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Tue, 08 Oct 2019 08:06:31 +0900

firefox (69.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fix for mfsa2019-31, also known as CVE-2019-11754.

  * debian/control*:
    - Bump nss, rustc, cargo and cbindgen build dependencies. Closes: #939412.
    - Remove build dependency versions where Debian has had the right version
      since Jessie.
  * debian/source/lintian-overrides: Adjust DotZlib.chm path.

 -- Mike Hommey <glandium@debian.org>  Tue, 24 Sep 2019 06:39:36 +0900

firefox (69.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-25, also known as:
    CVE-2019-11746, CVE-2019-11744, CVE-2019-11742, CVE-2019-11752,
    CVE-2019-9812, CVE-2019-11741, CVE-2019-11743, CVE-2019-11748,
    CVE-2019-11749, CVE-2019-5849, CVE-2019-11750, CVE-2019-11737,
    CVE-2019-11738, CVE-2019-11747, CVE-2019-11734, CVE-2019-11735,
    CVE-2019-11740.

  * debian/upstream.mk: Read source repo and revision from json when
    getting upstream info. Instead of the .txt file that doesn't exist
    as of 69.
  * debian/control*:
    - Remove unused build dependency against python-ply.
    - Remove python-minimal build dependency. All supported versions
      of Debian have a new enough version.
    - Remove build dependency against libjsoncpp-dev.
  * debian/l10n/gen, debian/latest_nightly.py, debian/rules,
    debian/symbols.mk, debian/upstream.mk, debian/watch: Use explicit
    python2.7 instead of python.
  * debian/rules: Use `mach python --no-virtualenv` to invoke the
    preprocessor.

  * config/system-headers,
    toolkit/crashreporter/jsoncpp/src/lib_json/moz.build,
    toolkit/crashreporter/minidump-analyzer/moz.build: Revert hack to
    build against libjsoncpp. It was fine when it was only used by
    the crash reporter, but that's not the case anymore, and it breaks
    the build. Also, the bundled version is newer than what is available
    in Debian.

 -- Mike Hommey <glandium@debian.org>  Wed, 04 Sep 2019 13:48:54 +0900

firefox (68.0.2-3) unstable; urgency=medium

  * debian/control.in: Take source package name from preprocessing.

  * build/moz.configure/old.configure: Avoid race condition creating
    old-configure. bz#1574761.
  * dom/media/systemservices/CamerasChild.cpp,
    dom/media/systemservices/CamerasParent.cpp,
    dom/media/systemservices/VideoEngine.cpp,
    dom/media/webrtc/MediaEngineRemoteVideoSource.cpp: Don't use
    __PRETTY_FUNCTION__ or __FUNCTION__ as format strings. bz#1531309.
    Closes: #925680.

 -- Mike Hommey <glandium@debian.org>  Sun, 18 Aug 2019 20:47:26 +0900

firefox (68.0.2-2) unstable; urgency=medium

  * debian/rules: Fix MOZ_APP_REMOTINGNAME. Upstream build system changes
    made the config.status editing trick stop working. Export the variable for
    configure to pick it instead. Closes: #932256

 -- Mike Hommey <glandium@debian.org>  Sun, 18 Aug 2019 08:41:43 +0900

firefox (68.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-24, also known as CVE-2019-11733.

  * debian/control*, debian/rules: Don't build against system vpx >= 1.8.0.
    It has API changes that cause FTBFS.

 -- Mike Hommey <glandium@debian.org>  Thu, 15 Aug 2019 08:06:59 +0900

firefox (68.0.1-2) unstable; urgency=medium

  * debian/rules: Work around https://github.com/rust-lang/cargo/issues/7147.

 -- Mike Hommey <glandium@debian.org>  Fri, 19 Jul 2019 10:51:09 +0900

firefox (68.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/rules:
    - Hook stamps/dh_install-l10n to override_dh_install-indep rather than
      binary-indep.
    - Pass make job server down through dh_auto_build.
  * debian/rules, debian/dh: Wrap dh to ensure debian/rules is invoked with
    parallelism.

 -- Mike Hommey <glandium@debian.org>  Fri, 19 Jul 2019 07:53:19 +0900

firefox (68.0-3) unstable; urgency=medium

  * debian/browser.README.Debian.in: Fix a reference to iceweasel in
    README.Debian. Thanks Edward Betts.
  * debian/rules:
    - Only exclude "-g" from dpkg-buildflags output. All the other flags
      that used to be excluded either already match upstream or add
      reproducibility.
    - Don't unexpectedly reset LDFLAGS.
    - [firefox-esr] Remove iceweasel transitional packages on bullseye.
    - Disable dh_strip_nondeterminism. Upstream build system already avoids
      non-determinism it would strip, so there is no need for it further
      modifying files.
    - Avoid arch:all builds building arch:any stuff.
    - Move AUTOCONF_DIRS cleanup after dh_clean.
    - Add rust flags to improve reproducibility.
    - Only touch or remove configure when it wasn't there to begin with.
    - Call configure using its full path.
    - Factor common configure arguments.
    - Build langpacks with --disable-compile-environment, and pass less
      configure arguments.
    - Build each langpack from a separate build directory. This means time
      wasted running configure more times, but all locales can now be built
      in parallel.
  * debian/symbols.mk, debian/symbols.apt.conf, debian/symbols.sources.list:
    Miscellaneous changes to symbols download script.
  * debian/make.mk: Exclude symbols.mk variables from dump output.
  * debian/browser.mozconfig.in: Remove redundant --prefix=/usr.
  * debian/control.in, debian/rules, debian/symbols.mk, debian/upstream.mk:
    Remove packaging scripts compatibility with Wheezy.

  * moz.configure: Only add confvars.sh as a dependency to config.status
    when it exists. bz#1560340.

 -- Mike Hommey <glandium@debian.org>  Sun, 14 Jul 2019 15:20:45 +0900

firefox (68.0-2) unstable; urgency=medium

  * debian/rules, debian/upstream.mk: Account for next Debian release.
  * debian/rules, debian/control: Build against system sqlite again.

  * gfx/skia/skia/third_party/skcms/src/Transform_inl.h: Work around GCC ICE
    on mips*, i386 and s390x.  Closes: #931757
  * python/mozbuild/mozbuild/action/langpack_manifest.py: Use build id as
    langpack version for reproducibility. bz#1565504.

 -- Mike Hommey <glandium@debian.org>  Fri, 12 Jul 2019 20:37:51 +0900

firefox (68.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-21, also known as:
    CVE-2019-9811, CVE-2019-11711, CVE-2019-11712, CVE-2019-11713,
    CVE-2019-11714, CVE-2019-11715, CVE-2019-11716, CVE-2019-11717,
    CVE-2019-11718, CVE-2019-11720, CVE-2019-11721, CVE-2019-11730,
    CVE-2019-11723, CVE-2019-11724, CVE-2019-11725, CVE-2019-11727,
    CVE-2019-11728, CVE-2019-11710, CVE-2019-11709.

  * debian/control*: Bump nss, sqlite, rustc, cargo and cbindgen build
    dependencies. Remove Build-Conflicts with nss 3.44-1, since we now
    build-depend on a more recent version.
  * debian/rules, debian/control: Don't build against system sqlite, as
    Debian doesn't have the required version yet.
  * [firefox-esr] debian/l10n/browser-l10n.control*, debian/l10n/gen:
    Don't generate iceweasel l10n transition packages for locales that
    were never offered with iceweasel.
  * debian/control, debian/l10n/browser-l10n.control.in: Add transition
    dependencies for Bengali l10n. There is now only one Bengali l10n
    package instead of two.
  * debian/rules: Disable JIT at build time on mips because it fails to build.

  * build/gyp.mozbuild: Revert patch that disables libyuv assembly on
    mips64. It apparently compiles, now.

 -- Mike Hommey <glandium@debian.org>  Wed, 10 Jul 2019 08:22:05 +0900

firefox (67.0.4-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-19, also known as CVE-2019-11708.

 -- Mike Hommey <glandium@debian.org>  Thu, 20 Jun 2019 11:05:27 -0700

firefox (67.0.3-2) unstable; urgency=medium

  * python/mozbuild/mozbuild/action/node.py: Attempt to work around make issue
    happening on arch: all buildd.

 -- Mike Hommey <glandium@debian.org>  Wed, 19 Jun 2019 13:16:37 -0700

firefox (67.0.3-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-18, also known as CVE-2019-11707.

 -- Mike Hommey <glandium@debian.org>  Tue, 18 Jun 2019 11:35:40 -0700

firefox (67.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Jun 2019 06:01:15 +0900

firefox (67.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 05 Jun 2019 07:14:08 +0900

firefox (67.0-4) unstable; urgency=medium

  * debian/rules: Work around FTBFS on mips* by disabling webrtc
    Build fails because of missing configurations for mips*.
  * debian/control*: Build-Conflicts with libnss3-dev 2:3.44-1.
    Closes: #929846.

  * js/src/jit/mips32/MacroAssembler-mips32-inl.h: Fix FTBFS on mips/mipsel.
    bz#1556197.

 -- Mike Hommey <glandium@debian.org>  Sun, 02 Jun 2019 13:13:13 +0900

firefox (67.0-3) unstable; urgency=medium

  * media/webrtc/trunk/webrtc/system_wrappers/source/cpu_features.cc: Remove
    WebRtc_GetCPUFeaturesARM from cpu_features.cc. It is already in
    cpu_features_linux.c (and is not in cpu_features.cc in webrtc upstream).
    Fixes FTBFS on armhf. bz#1523162.

 -- Mike Hommey <glandium@debian.org>  Sat, 01 Jun 2019 13:44:05 +0900

firefox (67.0-2) unstable; urgency=medium

  * debian/extra-stuff/addonsInfo.jsm:
    - Avoid running -dumps-addons-info without a running Firefox counting as a
      crash.
    - Support addons in resource:// locations in -dump-addons-info

  * js/src/wasm/WasmSignalHandlers.cpp: Include struct definitions for
    user_vfp and user_vfp_exc. Fixes FTBFS on armhf. bz#1526653.
  * js/src/jit/mips*/MacroAssembler-mips*-inl.h,
    js/src/jit/mips*/Trampoline-mips*.cpp: Fix functions: branchTestBigInt,
    negPtr, generateVMWrapper on MIPS. bz#1544631.
  * toolkit/modules/sessionstore/PrivacyFilter.jsm: Update and harden form
    data filtering for privacy to account for no data being passed in.
    bz#1553413.

 -- Mike Hommey <glandium@debian.org>  Sat, 01 Jun 2019 09:18:27 +0900

firefox (67.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-13, also known as:
    CVE-2019-9816, CVE-2019-9817, CVE-2019-9819, CVE-2019-9820,
    CVE-2019-9821, CVE-2019-11691, CVE-2019-11692, CVE-2019-11693,
    CVE-2019-7317, CVE-2019-11695, CVE-2019-11696, CVE-2019-11697,
    CVE-2019-11698, CVE-2019-11699, CVE-2019-11701, CVE-2019-9814,
    CVE-2019-9800.
  * Upload to experimental because the required cbindgen is not available in
    unstable.

  * debian/control*: Bump nspr, sqlite, rustc, cargo and cbindgen build
    dependencies.
  * debian/extra-stuff/addonsInfo.*, debian/extra-stuff/moz.build,
    debian/installer/package-manifest.browser, debian/rules:
    Modernize addonsInfo per bz#1431533, bz#1432992, bz#1514594, bz#1524688,
    etc.

 -- Mike Hommey <glandium@debian.org>  Wed, 22 May 2019 09:28:01 +0900

firefox (66.0.5-1) unstable; urgency=medium

  * New upstream release.
    - Additional fixes for addon signature validation.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 May 2019 08:07:21 +0900

firefox (66.0.4-1) unstable; urgency=medium

  * New upstream release.
    - Fixes issues with addon signature validation. Closes: #928417.
    Note: this didn't affect addons installed via Debian packages.

 -- Mike Hommey <glandium@debian.org>  Sun, 05 May 2019 22:52:24 +0900

firefox (66.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-09, also known as:
    CVE-2019-9810, CVE-2019-9813.

  * debian/control*: Bump nss, sqlite, rustc, cargo and cbindgen build
    dependencies.

 -- Mike Hommey <glandium@debian.org>  Sun, 24 Mar 2019 08:17:24 +0900

firefox (66.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-07, also known as:
    CVE-2019-9790, CVE-2019-9791, CVE-2019-9792, CVE-2019-9793,
    CVE-2019-9795, CVE-2019-9796, CVE-2019-9797, CVE-2019-9799,
    CVE-2019-9802, CVE-2019-9803, CVE-2019-9805, CVE-2019-9806,
    CVE-2019-9807, CVE-2019-9809, CVE-2019-9808, CVE-2019-9789,
    CVE-2019-9788.

  * debian/browser.mozconfig.in: Adjust to the upstream change wrt Google
    API key configure options.
  * debian/control*: Add nasm build dependency on amd64 and i386.

 -- Mike Hommey <glandium@debian.org>  Wed, 20 Mar 2019 18:35:38 +0900

firefox (65.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-04, also known as:
    CVE-2018-18356, CVE-2019-5795, CVE-2018-18511.

  * debian/rules, debian/upstream.mk: Manually set the update channel.
    Closes: #921381, #921121, #921654.
  * debian/rules: Build with -mfp32 on mips and mipsel. This should fix the
    FTBFS.

 -- Mike Hommey <glandium@debian.org>  Thu, 14 Feb 2019 19:33:05 +0900

firefox (65.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2019-01, also known as:
    CVE-2018-18500, CVE-2018-18503, CVE-2018-18504, CVE-2018-18505,
    CVE-2018-18506, CVE-2018-18502, CVE-2018-18501.

  * debian/control*: Bump nss, sqlite, rustc, cargo and cbindgen build
    dependencies.
  * debian/browser.install.in: Install libmozwayland.so.

 -- Mike Hommey <glandium@debian.org>  Wed, 30 Jan 2019 11:04:24 +0900

firefox (64.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-29, also known as:
    CVE-2018-12407, CVE-2018-17466, CVE-2018-18492, CVE-2018-18493,
    CVE-2018-18494, CVE-2018-18495, CVE-2018-18496, CVE-2018-18497,
    CVE-2018-18498, CVE-2018-12406, CVE-2018-12405.

  * debian/rules, debian/browser.install.in: Properly copy the watermark
    to /usr/share/icons/hicolor/symbolic/apps.
  * debian/rules: Disable debug symbols on 32-bits architectures, that
    requires too much memory.
  * debian/browser.mozconfig.in:
    - Remove --enable-pie option, it's the default, now.
    - Remove --disable-nodejs now that it's required.
  * debian/control*:
    - Bump rustc, cargo, cbindgen, nss and sqlite dependencies.
    - Add nodejs build dependency.
  * debian/browser-symbolic.svg.in: Import the watermark used for the
    symbolic icon in the debian/ directory.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Dec 2018 09:26:47 +0900

firefox (63.0.3-1) unstable; urgency=medium

  * New upstream release.

  * debian/control*: Build depend on unversioned clang/llvm.
    Closes: #912802.
  * debian/rules: Use embedded libevent in backports. Closes: #910397.
  * debian/rules: Use GNU gold linker on i386 because BFD ld fails to link
    libxul.so (memory exhausted).

  * build/unix/elfhack/test.c: Try to ensure the bss section of the
    elfhack testcase stays large enough. bz#1505608.
  * memory/build/mozjemalloc.cpp: Fix run sizes for size classes >= 16KB
    on systems with large pages. bz#1507035. Closes: #911898.
  * media/libaom/moz.build: Use NEON_FLAGS instead of VPX_ASFLAGS for
    libaom neon code.
  * gfx/cairo/libpixman/src/pixman-vmx.c: Protect #include <config.h> in
    pixman-vmx.c like in other pixman-*.c files

 -- Mike Hommey <glandium@debian.org>  Mon, 26 Nov 2018 10:17:08 +0900

firefox (63.0.1-1) unstable; urgency=medium

  * New upstream release.
  * debian/google.key: Use new Google API key, courtesy of Francois Marier.

 -- Mike Hommey <glandium@debian.org>  Fri, 02 Nov 2018 10:50:57 +0900

firefox (63.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-26, also known as:
    CVE-2018-12392, CVE-2018-12393, CVE-2018-12395, CVE-2018-12396,
    CVE-2018-12397, CVE-2018-12398, CVE-2018-12399, CVE-2018-12401,
    CVE-2018-12402, CVE-2018-12403, CVE-2018-12388, CVE-2018-12390.

  * debian/control*:
    - Bump nss dependency.
    - Add build dependency on cbindgen.
  * debian/browser.mozconfig.in: Disable nodejs until it's actually necessary.
  * debian/rules: Add -Wl,--compress-debug-sections=zlib to LDFLAGS to work
    around elfhack failing with unstripped binaries larger than 2GiB.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Oct 2018 08:32:15 +0900

firefox (62.0.3-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-24, also known as:
    CVE-2018-12386, CVE-2018-12387.

  * debian/extra-stuff/addonsInfo.js: Fixes to work with recent versions
    of Firefox. Closes: #909056.
  * debian/control*, debian/browser.mozconfig.in: Build ALSA support.
    Closes: #864987, #900062, #908349

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Oct 2018 16:21:53 +0900

firefox (62.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-22, also known as CVE-2018-12385.
  * Ignore locale change events for the search service on shutdown.
    bz#1489820. Closes: #908932.

  * debian/control*:
    - Remove the sqlite and nss dependencies when not building against the
      system libraries.
    - Enforce nss, nspr and sqlite dependencies to the same versions as
      build dependencies. There are subtle non-ABI differences between
      versions that Firefox might be relying on (be it features, behavior
      changes/fixes, etc.) and can cause subtle problems when older
      versions are used. Closes: #908225, #908520.
    - Add a suggestion for pulseaudio.
  * debian/rules, debian/control: Add libavcodec-extra* packages to the list
    of recommends. Closes: #909130

  * js/src/jit/BaselineJIT.h: Disable baseline JIT when SSE2 is not supported
    at runtime. bz#1492064. Closes: #908396, #908449.
  * gfx/2d/Swizzle.cpp: Use Swizzle fallback when SSE2 is not supported.
    bz#1492065. Closes: #877445.

 -- Mike Hommey <glandium@debian.org>  Sat, 22 Sep 2018 09:02:25 +0900

firefox (62.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-20, also known as:
    CVE-2018-12377, CVE-2018-12378, CVE-2018-12383, CVE-2018-12375,
    CVE-2018-12376.

  * debian/control*:
    - Bump nss and sqlite build dependencies.
    - Build depend on llvm/clang 6.0 for buster. Closes: #906175.
  * debian/browser.mozconfig.in, debian/control*, debian/rules: Remove
    build dependency on libbz2-dev. It's not used anymore.
  * debian/noinstall.in: Remove the dictionaries directory, not part
    of the packaged Firefox anymore.
  * debian/l10n/gen: Use iso-codes json data instead of XML when present.
    Closes: #907611.

  * widget/gtk/nsAppShell.cpp: Use remoting name for call to
    gdk_set_program_class. Closes: #907574.

 -- Mike Hommey <glandium@debian.org>  Thu, 06 Sep 2018 07:42:45 +0900

firefox (61.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 19 Jul 2018 06:54:40 +0900

firefox (61.0-2) unstable; urgency=medium

  * debian/browser.mozconfig.in, debian/control*, debian/rules: Remove
    build dependency on system libhunspell. Using system hunspell lacks
    features required by Firefox. Next version of Firefox doesn't allow
    to build against system hunspell anyways. Closes: #900469.
  * debian/browser.links.in, debian/rules, debian/vendor.js: Use the
    spellchecker.dictionary_path pref to set the hunspell directory.
  * debian/browser.mozconfig.in: Allow unsigned addons in app and system
    scopes.
  * debian/rules: Work around the effect the above has on the
    --{enable,with}-system-* check.
  * debian/control*: Remove old conflicts. Thanks Sylvestre Ledru.
    Closes: #882956.
  * debian/l10n/recommends, debian/l10n/browser-l10n.control,
    debian/control: Update dictionary recommendations, following these rules:
    - Transitional myspell packages are not listed except when stable
      doesn't have the corresponding hunspell package.
    - Both hunspell and myspell packages are listed if they are different.
    Closes: #813832, #825843
  * debian/copyright, debian/rules: Refer to /usr/share/common-licenses/MPL*
    instead of installing our own copy. Closes: #704303.
  * debian/make.mk: Use the same code as dump target for the dump-% target.
  * debian/control*, debian/rules: Add Recommends on all supported libavcodec
    libraries for h264 playback. Closes: #901600.

  * toolkit/modules/AppConstants.jsm, toolkit/modules/moz.build,
    toolkit/moz.configure, toolkit/mozapps/extensions/internal/XPIInstall.jsm,
    toolkit/mozapps/extensions/content/extensions.js,
    toolkit/mozapps/extensions/internal/XPIDatabase.jsm: Change how addon
    signature requirement relaxation is done. Closes: #899390.

 -- Mike Hommey <glandium@debian.org>  Sun, 08 Jul 2018 10:39:03 +0900

firefox (61.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-15, also known as:
    CVE-2018-12359, CVE-2018-12360, CVE-2018-12361, CVE-2018-12358,
    CVE-2018-12362, CVE-2018-5156, CVE-2018-12363, CVE-2018-12364,
    CVE-2018-12365, CVE-2018-12371, CVE-2018-12366, CVE-2018-12367,
    CVE-2018-12369, CVE-2018-12370, CVE-2018-5186, CVE-2018-5187,
    CVE-2018-5188.

  * debian/control*:
    - Bump nss and sqlite build dependencies.
    - Add a build dependency on python3.
  * debian/browser.install.in: Adjust to upstream changes.
  * debian/vendor.js: Relax the addon signature requirements.

  * toolkit/mozapps/extensions/content/extensions.js,
    toolkit/mozapps/extensions/internal/XPIDatabase.jsm: Allow to relax the
    addon signature requirements.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Jun 2018 10:25:44 +0900

firefox (60.0.2-2) unstable; urgency=medium

  * build/unix/elfhack/elfhack.cpp, build/unix/elfhack/inject.c,
    build/unix/elfhack/test.c: Use run-time page size when changing mapping
    permissions in elfhack injected code. bz#1470701. Closes: #902231.

 -- Mike Hommey <glandium@debian.org>  Sun, 24 Jun 2018 09:23:16 +0900

firefox (60.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-14, also known as CVE-2018-6126.

  * debian/upstream.mk: Use the same logic for betas as for releases to find
    the source.
  * debian/browser.NEWS.in: Adjust to show the ESR version.

 -- Mike Hommey <glandium@debian.org>  Fri, 08 Jun 2018 18:25:04 +0900

firefox (60.0.1-5) unstable; urgency=medium

  * gfx/skia/moz.build: Revert change from 60.0.1-4.
  * dom/media/webaudio/blink/DenormalDisabler.h: Avoid using vmrs/vmsr on
    armel.
  * mfbt/LinuxSignal.h, mfbt/moz.build,
    tools/profiler/core/platform-linux-android.cpp: Remove
    MOZ_SIGNAL_TRAMPOLINE. bz#1463035.
  * build/autoconf/arch.m4: Add -mfloat-abi=softfp to NEON_FLAGS when it makes
    sense. bz#1463036.
  * xpcom/string/moz.build: Use HAVE_ARM_NEON instead of BUILD_ARM_NEON for
    nsUTF8UtilsNEON.cpp. bz#1463036.

 -- Mike Hommey <glandium@debian.org>  Tue, 22 May 2018 08:01:55 +0900

firefox (60.0.1-4) unstable; urgency=medium

  * gfx/skia/moz.build: Don't build skia neon on armel.

 -- Mike Hommey <glandium@debian.org>  Mon, 21 May 2018 07:58:43 +0900

firefox (60.0.1-3) unstable; urgency=medium

  * debian/browser.links.in: Remove /usr/lib/*/browser/icons symlink, leftover
    after the removal of /usr/share/*/browser/icons. Closes: #893323.

  * media/webrtc/trunk/moz.build: Only build webrtc neon on aarch64.

 -- Mike Hommey <glandium@debian.org>  Sun, 20 May 2018 10:12:15 +0900

firefox (60.0.1-2) unstable; urgency=medium

  * third_party/rust/libc/.cargo-checksum.json,
    third_party/rust/libc/src/unix/notbsd/linux/mod.rs,
    third_party/rust/libc/src/unix/notbsd/linux/musl/mod.rs,
    third_party/rust/libc/src/unix/notbsd/linux/other/mod.rs,
    third_party/rust/libc/src/unix/notbsd/linux/s390x.rs: Apply upstream patch
    to add struct ucred for Linux on MIPS.
  * gfx/skia/skia/src/jumper/SkJumper_stages.cpp: Fix Skia build on arm64
    linux with GCC. bz#1462868.
  * intl/icu_sources_data.py: Add --disable-layoutex when running ICU
    configure. bz#1462859.
  * media/webrtc/trunk/gtest/moz.build: Link chromium_atomics to webrtc tests.
    bz#1462873.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 May 2018 13:07:39 +0900

firefox (60.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/control*: Remove mozplugger suggestion. Closes: #888396.
  * debian/browser.install.in, debian/browser.mozconfig.in, debian/control.in,
    debian/rules: Remove the option to build against gtk+2, it is not
    supported anymore.
  * debian/control*, debian/rules: Avoid hard dependency on libgtk2.0-0.
    Closes: #885144.

  * media/webrtc/trunk/moz.build: Attempt to fix building webrtc on non-x86.
  * js/src/jit/mips-shared/LIR-mips-shared.h, js/src/jit/mips32/LIR-mips32.h,
    js/src/jit/mips64/LIR-mips64.h: Fix FTBFS on mips*. bz#1444303.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 May 2018 07:25:23 +0900

firefox (60.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-11, also known as
    CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158,
    CVE-2018-5159, CVE-2018-5160, CVE-2018-5152, CVE-2018-5153,
    CVE-2018-5163, CVE-2018-5164, CVE-2018-5166, CVE-2018-5167,
    CVE-2018-5168, CVE-2018-5169, CVE-2018-5172, CVE-2018-5173,
    CVE-2018-5175, CVE-2018-5176, CVE-2018-5177, CVE-2018-5165,
    CVE-2018-5180, CVE-2018-5181, CVE-2018-5182, CVE-2018-5151,
    CVE-2018-5150.

  * debian/control*:
    - Bump nspr, nss, sqlite, rustc and cargo build dependencies.
    - Update Maintainer and Vcs fields, moving off alioth.
  * debian/browser.js.in, debian/vendor.js: Use the new syntax for
    locked and sticky prefs.
  * debian/browser.NEWS.in: Add a NEWS about the deprecation of lockPref.
  * debian/rules: Automatically find the ICU data file name.
  * debian/browser.mozconfig.in: Revert workaround for bz#1341234.
  * debian/browser.install.in, debian/rules: Don't install the ICU data
    file, it's linked as a data section in libxul.

  * modules/libpref/parser/src/lib.rs: Adapt to upstream changes to
    keep supporting lockPref() for transition purposes, now that upstream
    has locked prefs out of the box.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 May 2018 09:36:46 +0900

firefox (59.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-10, also known as CVE-2018-5148.

 -- Mike Hommey <glandium@debian.org>  Tue, 27 Mar 2018 08:29:16 +0900

firefox (59.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-08, also known as CVE-2018-5146, CVE-2018-5147.

 -- Mike Hommey <glandium@debian.org>  Sat, 17 Mar 2018 13:48:08 +0900

firefox (59.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-06, also known as:
    CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130,
    CVE-2018-5131, CVE-2018-5132, CVE-2018-5133, CVE-2018-5134,
    CVE-2018-5135, CVE-2018-5136, CVE-2018-5137, CVE-2018-5140,
    CVE-2018-5141, CVE-2018-5142, CVE-2018-5143, CVE-2018-5126,
    CVE-2018-5125.

  * debian/upstream.mk:
    - Change how we find the source tarball for releases.
    - Stop using milestone.py, it went away in this version.
  * debian/control*: Bump nspr, nss, sqlite, rustc and cargo build
    dependencies.
  * debian/rules: Update ICU_DATA_FILE version.
  * debian/browser.install.in, debian/browser.links.in, debian/rules: Take all
    icons from chrome/icons/default/ now they are all there.
  * debian/browser.install.in, debian/rules: Install watermark icon through
    dh_install.
  * debian/browser.js.in: Use the new intl.locale.requested instead of
    intl.locale.matchOS.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Mar 2018 08:30:34 +0900

firefox (58.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fix for mfsa2018-05.

  * debian/upstream.mk, debian/l10n_revs.py: Use l10n-changesets.json from the
    source tree to find the l10n changesets.
  * debian/usptream.mk: Stop using milestone.py, it goes away in version 59.

  * intl/icu/source/i18n/digitlst.cpp: Apply part of
    http://bugs.icu-project.org/trac/changeset/40603 to fix FTBFS with glibc
    2.26 on big endian platforms. Closes: #888638.

 -- Mike Hommey <glandium@debian.org>  Tue, 30 Jan 2018 07:43:28 +0900

firefox (58.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-02, also known as:
    CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094,
    CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099,
    CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103,
    CVE-2018-5104, CVE-2018-5105, CVE-2018-5106, CVE-2018-5107,
    CVE-2018-5108, CVE-2018-5109, CVE-2018-5111, CVE-2018-5112,
    CVE-2018-5113, CVE-2018-5114, CVE-2018-5115, CVE-2018-5116,
    CVE-2018-5117, CVE-2018-5118, CVE-2018-5119, CVE-2018-5122,
    CVE-2018-5090, CVE-2018-5089.

  * debian/rules:
    - Don't disable necko-wifi on kfreebsd/hurd. This used to be necessary
      because that was using libiw, which was linux-only, but libiw is not
      used anymore.
    - Refresh configure files manually.
    - Remove --with-default-mozilla-five-home, it's gone.
    - Adapt to compare-locales changes.
    - Define MOZ_FFVPX on arm and aarch64.
  * debian/browser.install.in, debian/rules, debian/test.mk: Use
    DEB_HOST_ARCH* instead of DEB_BUILD_ARCH*.
  * debian/control*:
    - Bump rustc, cargo and nss build dependencies.
    - Add a dependency on libnss3 3.34 for the firefox package.
  * debian/noinstall.in: Remove run-mozilla.sh from there, it's not installed
    anymore.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Jan 2018 08:16:43 +0900

firefox (57.0.4-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2018-01, mitigating "Spectre" side-channel attack.

  * debian/control*: Remove build dependencies on unused -dev packages.
  * debian/rules: Clean l10n build directory.
  * debian/installer/Makefile.in,
    debian/installer/package-manifest.browser, debian/rules, moz.build:
    Let upstream packaging step preprocess our package manifest, instead  
    of preprocessing it manually first.

 -- Mike Hommey <glandium@debian.org>  Fri, 05 Jan 2018 15:55:05 +0900

firefox (57.0.3-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 30 Dec 2017 12:06:22 +0900

firefox (57.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-27, also known as:
  * CVE-2017-7843, CVE-2017-7844.

  * debian/rules: Don't pass unused variables during make install.
  * debian/installer/Makefile.in: Small path correctness fixup.

 -- Mike Hommey <glandium@debian.org>  Fri, 01 Dec 2017 14:35:58 +0900

firefox (57.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-24, also known as:
    CVE-2017-7828, CVE-2017-7830, CVE-2017-7831, CVE-2017-7832,
    CVE-2017-7833, CVE-2017-7834, CVE-2017-7835, CVE-2017-7836,
    CVE-2017-7837, CVE-2017-7838, CVE-2017-7839, CVE-2017-7840,
    CVE-2017-7842, CVE-2017-7827, CVE-2017-7826.

  * debian/control*: Bump nss, sqlite, rustc and cargo build dependencies.
  * debian/rules:
    - Always remove configure/old-configure during clean.
    - Use a new file as source for the symbolic icon. Closes: #867729.
    - Disable tests until they're fixed. The script to run tests uses old
      entry points that weren't updated to deal with the sandbox in Firefox,
      causing the tests to fail in a way that takes days to go through the
      entire suites. Closes: #877565.
  * debian/import-tar.py: Make python 3.6 happy.

  * old-configure*: Allow to build against nspr 4.16.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 Nov 2017 09:20:05 +0900

firefox (56.0-2) unstable; urgency=medium

  * debian/browser.mozconfig.in: Pass NSPR directory to bindgen to workaround
    bz#1341234.

 -- Mike Hommey <glandium@debian.org>  Fri, 29 Sep 2017 13:28:38 +0900

firefox (56.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-21, also known as:
    CVE-2017-7793, CVE-2017-7818, CVE-2017-7819, CVE-2017-7824,
    CVE-2017-7812, CVE-2017-7814, CVE-2017-7813, CVE-2017-7815,
    CVE-2017-7816, CVE-2017-7821, CVE-2017-7823, CVE-2017-7822,
    CVE-2017-7820, CVE-2017-7811, CVE-2017-7810.

  * debian/control*:
    - Bump nspr, nss, rustc and cargo build dependencies.
    - Build depend on llvm-4.0-dev, libclang-4.0-dev and clang-4.0.
  * debian/rules: Update ICU_DATA_FILE version.
  * debian/browser.mozconfig.in, debian/google.key: Add the Google API key
    from the chromium package for safebrowsing. Thanks Francois Marier.

 -- Mike Hommey <glandium@debian.org>  Fri, 29 Sep 2017 07:51:07 +0900

firefox (55.0.3-1) unstable; urgency=medium

  * New upstream release.

  * debian/source/lintian-overrides: Add a lintian override for dotzlib.chm.

 -- Mike Hommey <glandium@debian.org>  Sat, 09 Sep 2017 20:24:43 +0900

firefox (55.0.2-1) unstable; urgency=medium

  * New upstream release.

  * js/src/jit/ExecutableAllocator.h, js/src/jit/none/MacroAssembler-none.h:
    Fix Spidermonkey build with no jit backend. bz#1376268.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Aug 2017 09:41:36 +0900

firefox (55.0-2) unstable; urgency=medium

  * ipc/chromium/src/base/message_pump_libevent.cc,
    ipc/chromium/src/third_party/libevent/linux/event2/event-config.h:
    Fix FTBFS on i386. bz#1388981.
  * dom/base/nsWrapperCache.h: Fix FTBFS on powerpc64el. bz#1376277.
  * media/libcubeb/cubeb-pulse-rs/src/backend/context.rs: Fix cubeb-pulse-rs
    FTBFS on arm64.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 Aug 2017 14:29:21 +0900

firefox (55.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-18, also known as:
    CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7809,
    CVE-2017-7784, CVE-2017-7802, CVE-2017-7785, CVE-2017-7786,
    CVE-2017-7806, CVE-2017-7753, CVE-2017-7787, CVE-2017-7807,
    CVE-2017-7792, CVE-2017-7791, CVE-2017-7808, CVE-2017-7781,
    CVE-2017-7794, CVE-2017-7803, CVE-2017-7799, CVE-2017-7783,
    CVE-2017-7788, CVE-2017-7789, CVE-2017-7797, CVE-2017-7780,
    CVE-2017-7779.

  * debian/control*: Bump nspr, nss and sqlite build dependencies.
  * debian/rules:
    - Preserve Cargo.toml.orig files ; cargo doesn't like that dh_clean
      removes them.
    - Copy the MPL-2.0 license from nsprpub instead of b2g, the latter being
      gone.
  * debian/browser.js.in: Default to no suggestions in the urlbar. This still
    brings a panel asking the user whether they want to opt-in on first use.
  * debian/upstream.mk: Set DIST differently for experimental.

  * media/webrtc/trunk/gtest/moz.build: Make webrtc-gtest build work with
    system jpeg and libvpx. bz#1373988.
  * media/mtransport/third_party/nICEr/nicer.gyp,
    media/mtransport/third_party/nrappkit/nrappkit.gyp: Disable
    -Wformat-security where -Wformat is disabled. bz#1388681. Closes: #871386.
            ('ppc64le', 'Linux'): 'powerpc64le-unknown-linux-gnu',
  * build/moz.configure/rust.configure: Add ppc64el target for rust code
    (second attempt). Closes: #864822.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Aug 2017 20:21:59 +0900

firefox (54.0-2) unstable; urgency=medium

  * debian/upstream.mk: Consider testing/unstable as buster, which implies
    build depending on system nspr, nss, sqlite and hunspell again.
  * debian/rules: Really make overrides with USE_SYSTEM_* set to nothing work.

  * build/moz.configure/rust.configure: Add ppc64el target for rust code.
    Closes: #864822.

 -- Mike Hommey <glandium@debian.org>  Sat, 17 Jun 2017 07:20:23 +0900

firefox (54.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-15, also known as:
    CVE-2017-5472, CVE-2017-7749, CVE-2017-7750, CVE-2017-7751,
    CVE-2017-7752, CVE-2017-7754, CVE-2017-7756, CVE-2017-7757,
    CVE-2017-7778, CVE-2017-7758, CVE-2017-7762, CVE-2017-7764,
    CVE-2017-5471, CVE-2017-5470.
  * Targetting unstable because the required rustc version is available there,
    and the freeze is almost over, meaning new versions of rustc will receive
    updates, allowing to build newer versions of Firefox.

  * debian/rules, debian/control.in: Switch to GCC 4.8 on wheezy.
  * debian/rules: Don't remove debian/control on clean. Thanks to
    Emilio Pozuelo Monfort for those two changes for wheezy LTS support.
  * debian/control.in, debian/rules, debian/symbols.mk, debian/upstream.mk:
    Rename the BACKPORT variable to DIST, and set it to "stretch" for
    unstable/testing targetted builds.
  * debian/rules: Normalize the system libraries used depending on the Debian
    version.
  * debian/control*:
    - Bump nspr and build dependencies.
    - Bump rustc and cargo build dependencies.
  * debian/rules:
    - Allow to override USE_SYSTEM_* variables from the environment.
    - Remove rules to create mozilla-nspr.pc.  It hasn't been shipped since
      45.0-1.
  * debian/browser.install.in: Add the pingsender executable.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Jun 2017 10:56:14 +0900

firefox (53.0.is.53.0-1) experimental; urgency=medium

  * The "oops, uploaded to unstable instead of experimental" release.

 -- Mike Hommey <glandium@debian.org>  Thu, 20 Apr 2017 05:25:25 +0900

firefox (53.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-10, also known as:
    CVE-2017-5433, CVE-2017-5435, CVE-2017-5436, CVE-2017-5459,
    CVE-2017-5466, CVE-2017-5434, CVE-2017-5432, CVE-2017-5460,
    CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441,
    CVE-2017-5442, CVE-2017-5464, CVE-2017-5443, CVE-2017-5444,
    CVE-2017-5446, CVE-2017-5447, CVE-2017-5465, CVE-2017-5448,
    CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5469,
    CVE-2017-5445, CVE-2017-5449, CVE-2017-5451, CVE-2017-5467,
    CVE-2017-5453, CVE-2017-5458, CVE-2017-5468, CVE-2017-5430,
    CVE-2017-5429.

  * debian/control*:
    - Bump nss and hunspell build dependencies.
  * debian/browser-dev*, debian/control*, debian/noinstall.in,
    debian/rules: Remove the -dev packages, there is no SDK provided
    for Firefox anymore.
  * debian/browser.install.in: Install manifest.json instead of clearkey.info.
  * debian/rules:
    - No system hunspell for backports.
    - Build against system nspr/nss, experimental has the right versions.
  * debian/browser.mozconfig.in, debian/control*, debian/rules: Always enable
    rust, and bump the rustc dependency. As of version 54, it is not possible
    to disable rust code anymore. While this is still version 53, there is not
    much to win by keeping --disable-rust builds on Debian architectures
    without rustc for 6 more weeks.

 -- Mike Hommey <glandium@debian.org>  Wed, 19 Apr 2017 14:50:13 +0900

firefox (52.0.2-1) unstable; urgency=medium

  * New upstream release.
  * debian/browser.mozconfig.in, debian/mls.key: Enable geolocation using
    Mozilla's Location Service. Closes: #726230.

  * browser/app/profile/firefox.js: Use the Mozilla Location Service when
    the Google Key is not there.

 -- Mike Hommey <glandium@debian.org>  Sun, 02 Apr 2017 06:45:39 +0900

firefox (52.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Fix for mfsa2017-08, also known as CVE-2017-5428.

  * debian/browser.lintian-overrides.in: Add a lintian override for NSPR and
    NSS.
  * debian/control*: Build depend on libjsoncpp-dev.

  * config/system-headers,
    toolkit/crashreporter/jsoncpp/src/lib_json/moz.build,
    toolkit/crashreporter/minidump-analyzer/moz.build: Build against system
    libjsoncpp.

 -- Mike Hommey <glandium@debian.org>  Sat, 18 Mar 2017 08:49:59 +0900

firefox (52.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-05, also known as:
    CVE-2017-5400, CVE-2017-5401, CVE-2017-5402, CVE-2017-5403,
    CVE-2017-5404, CVE-2017-5406, CVE-2017-5407, CVE-2017-5410,
    CVE-2017-5408, CVE-2017-5412, CVE-2017-5413, CVE-2017-5414,
    CVE-2017-5415, CVE-2017-5416, CVE-2017-5417, CVE-2017-5426,
    CVE-2017-5427, CVE-2017-5418, CVE-2017-5419, CVE-2017-5420,
    CVE-2017-5405, CVE-2017-5421, CVE-2017-5422, CVE-2017-5399,
    CVE-2017-5398.

  * debian/control*: Bump nss and sqlite build dependencies.
  * debian/rules:
    - Update ICU_DATA_FILE version.
    - Don't build against system sqlite until we have the right version in
      Debian.
  * debian/browser.install.in:
    - Install chrome.manifest, libmozsandbox.so and minidump-analyzer.
    - Remove browser/components.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Mar 2017 10:24:05 +0900

firefox (51.0.1-3) unstable; urgency=medium

  * js/src/jit/mips-shared/Assembler-mips-shared.h,
    js/src/jit/mips-shared/CodeGenerator-mips-shared.cpp,
    js/src/jit/mips-shared/CodeGenerator-mips-shared.h,
    js/src/jit/mips-shared/MacroAssembler-mips-shared-inl.h,
    js/src/jit/mips-shared/MacroAssembler-mips-shared.cpp,
    js/src/jit/mips-shared/MacroAssembler-mips-shared.h,
    js/src/jit/mips32/MacroAssembler-mips32-inl.h,
    js/src/jit/mips32/MacroAssembler-mips32.cpp,
    js/src/jit/mips32/MacroAssembler-mips32.h,
    js/src/jit/mips64/MacroAssembler-mips64-inl.h,
    js/src/jit/mips64/MacroAssembler-mips64.cpp,
    js/src/jit/mips64/MacroAssembler-mips64.h: Apply patch from
    bz#1303688 hopefully fixing the FTBFS on mips*.

 -- Mike Hommey <glandium@debian.org>  Thu, 23 Feb 2017 16:34:17 +0900

firefox (51.0.1-2) unstable; urgency=medium

  * debian/symbols.mk:
    - Better handle downloading symbols from packages with epochs.
    - Don't filter file names when getting symbols.
    - Add experimental buildd apt source for symbols download.
    - Avoid apt-get download being re-run when the file is already there.
    - Adjust DBGTYPE depending on package version, not whether it's a
      backport.
    - Only dump symbols for files of type application/x-sharedlib.
      This covers binary executables too because they are PIE and
      undistinguishable from shared libraries as a consequence.
  * debian/rules:
    - Add -fno-schedule-insns2 back. Closes: #854258.
    - Build with -fno-schedule-insns on armel and armhf when building with
      GCC6. Closes: #854640.
    - Hack to disable --gc-sections when building NSS, working around bug
      #844357 again. Should fix FTBFS on mips*.
  * debian/browser.desktop.in, debian/rules: Followup for the StartupWMClass
    changes in 51.0.1-1: Use the same name in desktop file and
    application.ini RemotingName. Closes: #854397.

 -- Mike Hommey <glandium@debian.org>  Sat, 18 Feb 2017 08:17:22 +0900

firefox (51.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/browser.desktop.in:
    - Use the application name as StartupWMClass in the desktop file.
      Along the change to nsAppRunner.cpp, this prevents e.g. GNOME Shell
      from making Firefox appear as Firefox ESR when both are used.
    - Remove Encoding key from desktop file. Closes: #812493
  * debian/rules: Remove -fno-schedule-insns2 and add -fno-lifetime-dse
    when building with GCC6.
  * debian/rules, debian/control*: Build with GCC6 on arm*.
    Closes: #852009. AFAIK, that will lead to FTBFS on at least armhf,
    but let's already see how it goes.
  * debian/upstream.mk: Use pkg-info.mk to figure out source name and version.
    Closes: #850720.
  * debian/control*:
    - Remove build dependency and suggest on libgnome*. It hasn't actually
      been used for a long time. Closes: #850265.
    - Bump Standards-Version to 3.9.8. No changes required.
    - Bump libvpx build dependency.
  * debian/rules: Resize the symbolic icon.
  * Move the -l10n-all package to the metapackages section. Closes: #824784.
  * debian/browser.postrm.in, debian/browser.preinst.in, debian/rules: Don't
    install preinst and postrm at all for the firefox package.
  * debian/symbols.apt.conf, debian/symbols.mk, debian/symbols.sources.list:
    Add scripts to create symbols archive to upload to Mozilla crash servers.
  * debian/browser-dev.links.in, debian/browser.install.in,
    debian/browser.mozconfig.in, debian/control*, debian/make.mk, debian/rules:
    Add more granularity as to what system libraries are used
    and only disable NSPR/NSS until we have the right versions in Debian.

  * gfx/2d/BorrowedContext.h, gfx/layers/composite/LayerManagerComposite.*,
    gfx/layers/moz.build: Fix --disable-skia builds. bz#1319374.
  * gfx/skia/moz.build: Build Skia NEON code on arm64.
  * toolkit/xre/nsAppRunner.cpp: Set program name from the remoting name.
  * config/recurse.mk: Work around race condition between building NSPR and
    NSS. bz#1115944, bz#1315882.

 -- Mike Hommey <glandium@debian.org>  Sun, 05 Feb 2017 15:52:36 +0900

firefox (51.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2017-01, also known as:
    CVE-2017-5375, CVE-2017-5376, CVE-2017-5377, CVE-2017-5378,
    CVE-2017-5379, CVE-2017-5380, CVE-2017-5390, CVE-2017-5389,
    CVE-2017-5396, CVE-2017-5381, CVE-2017-5382, CVE-2017-5383,
    CVE-2017-5384, CVE-2017-5385, CVE-2017-5386, CVE-2017-5391,
    CVE-2017-5393, CVE-2017-5387, CVE-2017-5388, CVE-2017-5374,
    CVE-2017-5373.

  * debian/upstream.mk: Don't rely on FIREFOX_*_RELEASE tags to pull some
    files to determine all source urls.
  * debian/browser.bug-presubj.in: Add a note about submitting crash reports
    upstream and pasting the url to Debian bug reports.
  * debian/rules, debian/control*: Adjust rust build configure to new
    upstream. It requires rustc >= 1.10 and cargo, the latter of which is
    not available on arm64. Also depend on cargo >= 0.13, that doesn't access
    the network with the Cargo.toml files in the source. Note rust code is
    still not enabled unless building a beta release.
  * debian/control*: Bump nspr, nss and sqlite build dependencies.
  * debian/rules, debian/control: Use more embedded libraries until the
    required versions of NSPR and NSS can be in unstable.

  * build/moz.configure/rust.configure: Force use the i686 rust target.
  * gfx/skia/skia/include/core/SkPreConfig.h: Generically set
    SK_CPU_[BL]ENDIAN based on __BYTE_ORDER__ when available. bz#1319389.

 -- Mike Hommey <glandium@debian.org>  Wed, 25 Jan 2017 11:27:12 +0900

firefox (50.1.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2016-95, also known as:
    CVE-2016-9894, CVE-2016-9899, CVE-2016-9895, CVE-2016-9896,
    CVE-2016-9897, CVE-2016-9898, CVE-2016-9900, CVE-2016-9904,
    CVE-2016-9901, CVE-2016-9902, CVE-2016-9903, CVE-2016-9080,
    CVE-2016-9893.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Dec 2016 06:15:10 +0900

firefox (50.0.2-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2016-{91-92}, also known as:
    CVE-2016-9078, CVE-2016-9079.

  * widget/gtk/mozgtk/mozgtk.c: work around race in system Cairo's XShm usage.
    bz#1271100.

 -- Mike Hommey <glandium@debian.org>  Thu, 01 Dec 2016 08:32:08 +0900

firefox (50.0-3) unstable; urgency=medium

  * media/libjpeg/simd/jsimd_mips.c: Pull libjpeg-turbo upstream fix for FTBFS
    on mips.
  * widget/gtk/mozgtk/gtk3/moz.build: Work around Debian bug #844357.

 -- Mike Hommey <glandium@debian.org>  Mon, 21 Nov 2016 08:16:53 +0900

firefox (50.0-2) unstable; urgency=medium

  * debian/rules: Use mach to run icu_source_data.py. This should fix FTBFS
    on big endian platforms.

  * js/src/jit/mips64/CodeGenerator-mips64.cpp: Fix
    CodeGenerator::visitAsmSelectI64. bz#1290811.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 Nov 2016 06:16:41 +0900

firefox (50.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2016-{87,89} also known as:
    CVE-2016-5287, CVE-2016-5288, CVE-2016-5296, CVE-2016-5292,
    CVE-2016-5297, CVE-2016-9064, CVE-2016-9066, CVE-2016-9067,
    CVE-2016-9068, CVE-2016-9075, CVE-2016-9077, CVE-2016-5291,
    CVE-2016-9070, CVE-2016-9073, CVE-2016-9076, CVE-2016-9063,
    CVE-2016-9071, CVE-2016-5289, CVE-2016-5290.

  * debian/rules: Only generate configure files on nightlies, and use
    client.mk to generate them instead of using autoconf manually (which,
    while compatible, is wrong nowadays).
  * debian/control*:
    - Remove outdated alternative build dependencies.
    - Bump sqlite and nss build dependency.
    - Add build dependency on libx11-xcb-dev.
  * debian/browser.mozconfig.in, debian/control*, debian/rules: Enable rust on
    non-release/ESR.
  * debian/browser.install.in: Add the EmojiOneMozilla font.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Nov 2016 09:04:23 +0900

firefox (49.0-5) unstable; urgency=medium

  * debian/rules:
    - Don't install crashreporter files on arm64, where it's not built. Should
      fix FTBFS on arm64.
    - Ship a symbolic icon from the silhouette icon from branding.
      Closes: #832297.
    - Remove old workaround for GCC 4.5 on armel.
    - Remove old workarounds for ia64.
    - Remove GENSYMBOLS_FLAGS, which hasn't been used for 5 years.
    - Remove CMP_AWK, which hasn't been used since xulrunner packages were
      removed.
    - Remove dh_builddeb override forcing xz compression, which is the default
      since dpkg 1.15.6.
    - Remove old workaround for ppc64.
    - Disable both baseline JIT and ion on mips via prefs.
  * debian/rules, debian/control: Re-enable Gtk+3 to see how it goes.
    Closes: #832301.

  * security/sandbox/linux/SandboxFilter.cpp: Allow media plugins to call
    madvise with MADV_FREE. bz#1303813. Closes: #838911.
  * js/src/jit/AtomicOperations.h: Fix crashes in AtomicOperations-none on
    s390x. Should fix FTBFS on s390x.

 -- Mike Hommey <glandium@debian.org>  Sat, 29 Oct 2016 19:54:35 +0900

firefox (49.0-4) unstable; urgency=medium

  * debian/rules, dbeian/browser.install.in: Always install GMP clearkey.
    Should fix FTBFSes on non-x86/x86-64, this time.
  * debian/browser.js.in: Unset media.gmp-manager.url.override.
    Closes: #838902.
  * debian/compat, debian/control*: Bump debhelper compat and dependency to 9.
  * debian/rules, debian/control*: Generate debug symbols debs when not
    backporting.
  * debian/browser.install.in, browser.mozconfig.in, debian/rules: Don't
    disable the crash reporter.

 -- Mike Hommey <glandium@debian.org>  Sun, 02 Oct 2016 13:28:11 +0900

firefox (49.0-3) unstable; urgency=medium

  * debian/browser.desktop.in: Use the full path to the real Firefox
    executable in the .desktop file. Closes: #832298

  * toolkit/moz.configure: Ensure we don't enable Widevine unintentionally.
    bz#1299694. Should fix FTBFSes on non-x86/x86-64.

 -- Mike Hommey <glandium@debian.org>  Sun, 25 Sep 2016 17:34:05 +0900

firefox (49.0-2) unstable; urgency=medium

  * debian/rules, debian/control*: Only force GCC 5 on arm when building for
    stretch+.
  * debian/browser.mozconfig.in, debian/browser.install.in, debian/rules:
    Do not disable EME. Closes: #838478.
  * debian/rules, debian/browser.install.in: Build and use big-endian ICU data
    on big-endian architectures. Fixes FTBFS on big-endian architectures.

  * build/autoconf/icu.m4: Allow to override ICU_DATA_FILE from the
    environment.
  * js/src/jit/mips-shared/MacroAssembler-mips-shared.cpp: OdinMonkey: MIPS:
    Fix nop-jump patching code. bz#1277478. Fixes FTBFS on mips*el.
  * media/libjpeg/moz.build: Fix CPU_ARCH test for libjpeg on mips. Fixes
    FTBFS on mips.

 -- Mike Hommey <glandium@debian.org>  Sun, 25 Sep 2016 09:47:54 +0900

firefox (49.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa-2016-85, also known as:
    CVE-2016-2827, CVE-2016-5270, CVE-2016-5271, CVE-2016-5272,
    CVE-2016-5273, CVE-2016-5276, CVE-2016-5274, CVE-2016-5277,
    CVE-2016-5275, CVE-2016-5278, CVE-2016-5279, CVE-2016-5280,
    CVE-2016-5281, CVE-2016-5282, CVE-2016-5283, CVE-2016-5284,
    CVE-2016-5256, CVE-2016-5257.

  * debian/control*, debian/rules: Compile with GCC 5 on testing/unstable
    on arm* because of crashes when building with GCC 6. (FTBFS)
  * debian/control*: Force build against libnss3-dev >= 2:3.26-2~, which fixed
    its symbols file. Closes: #833719.

  * build/gyp.mozbuild: Disable libyuv assembly on mips64. (FTBFS)

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Sep 2016 10:30:16 +0900

firefox (48.0-2) unstable; urgency=medium

  * debian/rules: Build with -fno-schedule-insns2 and
    -fno-delete-null-pointer-checks with GCC >= 6 because it miscompiles
    Firefox. Closes: #836533.

 -- Mike Hommey <glandium@debian.org>  Mon, 05 Sep 2016 07:25:54 +0900

firefox (48.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa-2016-{62-68,70-81,83-84}, also known as:
    CVE-2016-2836, CVE-2016-2835, CVE-2016-2830, CVE-2016-2838,
    CVE-2016-2839, CVE-2016-5251, CVE-2016-5252, CVE-2016-0718,
    CVE-2016-5254, CVE-2016-5255, CVE-2016-5258, CVE-2016-5259,
    CVE-2016-5260, CVE-2016-5261, CVE-2016-5262, CVE-2016-2837,
    CVE-2016-5263, CVE-2016-5264, CVE-2016-5265, CVE-2016-5266,
    CVE-2016-5268, CVE-2016-5250.

  * debian/control*: Bump nss and sqlite build dependencies.
  * debian/rules: Remove --build from configure invocation.
  * debian/browser.mozconfig.in: s/NATIVE/SYSTEM/. The variables set for
    --enable-system flags have changed upstream.
  * debian/browser.install.in, debian/browser.links.in: Don't install webapprt
    files, they are gone.
  * debian/browser.install.in:
    - Install ICU data file.
    - libfreebl3 changed name.
    - Take mozicon128.png from dist/firefox instead of dist/bin.

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Aug 2016 09:45:22 +0900

firefox (47.0.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 29 Jun 2016 19:25:53 +0900

firefox (47.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa-2016-{49-52,54,56-60}, also known as:
    CVE-2016-2815, CVE-2016-2818, CVE-2016-2819, CVE-2016-2821,
    CVE-2016-2822, CVE-2016-2825, CVE-2016-2828, CVE-2016-2829,
    CVE-2016-2831, CVE-2016-2832, CVE-2016-2833.

  * debian/rules: Read default toolkit from old-configure.in, but still keep
    Gtk+3 disabled.
  * debian/upstream.mk: Use l10n_changesets.txt from last candidate build for
    L10N_REV.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Jun 2016 10:00:04 +0900

firefox (46.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/control*: Remove build dependencies that were only required for the
    iceweasel branding.
  * debian/control*, debian/browser.mozconfig.in: Remove configure flags and
    build dependencies related to gnomevfs. They have been ignored for close
    to a year.
  * debian/browser.mozconfig.in:
    - Remove configure flags explicitly enabling gio, it has been enabled by
      default for more than 3 years.
    - Remove --enable-svg, the option has been ignored for more than 5 years.
    - Remove --enable-mathml, the option has been ignored for more than 4
      years.
    - Remove --enable-pango, the option has been ignored for 2 years.
    - Remove --disable-pedantic, the option has been ignored for 3 years.
    - Remove --disable-long-long-warning, the option has been ignored for
      almost 5 years.
    - Remove --disable-gnomeui, it is the default.
    - Remove --disable-mochitest, the option has been ignored for more than 7
      years.
    - Remove --disable-debug, it is the default.
    - Remove --enable-canvas, the option has been ignored for more than 6
      years.
    - Remove --disable-installer, the option has been ignored for close to 4
      years.
    - Remove --disable-javaxpcom, the option has been ignored for close to 5
      years.
    - Remove --disable-elf-dynstr-gc, the option has been ignored for more
      than 2 years.
    - Remove --enable-url-classifier, it is the default.
    - Remove --with-user-appdir=.mozilla, it is the default.
    - Remove --enable-single-profile, the option has been ignored for more
      than 7 years.
    - Remove --disable-profilesharing, the option has been ignored for more
      than 7 years.
  * debian/rules: Use the mach compare-locales command for l10n.
  * debian/upstream.mk, debian/watch: Remove "mozilla.org" from path in
    archive.mozilla.org urls.
  * debian/upstream.mk: Don't use get a separate source tarball for
    compare-locales. There is a copy in-tree that we now use.
  * debian/browser.desktop.in, debian/control*, debian/rules: Allow to
    distinguish between firefox and firefox-esr. Closes: #821952.
  * debian/control, debian/rules: Disable Gtk+3 for now. Closes: #822807.

 -- Mike Hommey <glandium@debian.org>  Sun, 08 May 2016 09:11:06 +0900

firefox (46.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2016-{39,42,44-48}, also known as:
    CVE-2016-2807, CVE-2016-2806, CVE-2016-2804, CVE-2016-2811,
    CVE-2016-2812, CVE-2016-2814, CVE-2016-2816, CVE-2016-2817,
    CVE-2016-2808, CVE-2016-2820.

  * debian/browser.install.in: Add ffmpeg vp9 libraries.
  * debian/browser.lintian-overrides.in: Add a lintian override for
    libmozavutil.so, which is not exactly libavutil.
  * debian/control*: Bump nss and sqlite3 build dependencies.
  * debian/browser.mozconfig.in, debian/control*, debian/rules: Remove
    gstreamer dependencies and such, gstreamer support was removed upstream.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Apr 2016 09:04:38 +0900

firefox (45.0.2-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 13 Apr 2016 10:07:02 +0900

firefox (45.0.1-1) unstable; urgency=medium

  * New upstream release.
    - Disables Graphite font shaping library.

  * debian/browser.js.in: Don't mention the pref subdirectory in
    /etc/firefox*/firefox*.js. Also reword the comment there, and remove some
    parts of it. Closes: #818322.
  * debian/control*:
    - Bump libvpx build dependency to 1.4.0. Closes: #818454.
    - Switch Vcs-* fields to https urls.
    - Point Vcs-* urls to the right branch.
  * debian/rules: Add --exclude=.mkdir.done to TAR_CREATE_FLAGS.

  * debian/control*, debian/firefox.in, debian/iceweasel.*,
    debian/l10n/browser-l10n.control.in, debian/rules: Synchronize with the
    firefox-esr source package.

  * ipc/chromium/moz.build, ipc/chromium/src/build/build_config.h,
    ipc/chromium/src/base/atomicops.h,
    ipc/chromium/src/base/atomicops_internals_arm64_gcc.h: Add aarch64 support
    for atomic operations. bz#1250403.
  * ipc/chromium/atomics/moz.build, ipc/chromium/moz.build,
    media/webrtc/signaling/test/common.build: Link chromium mutex-based
    atomics implementation to webrtc signaling tests. bz#1257888. This should
    fix the powerpc FTBFSes.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 Mar 2016 02:51:43 +0900

firefox (45.0-1) unstable; urgency=medium

  * New upstream non-ESR release.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 Mar 2016 13:43:34 +0900

firefox-esr (45.0esr-1) unstable; urgency=medium

  * Farewell, Iceweasel.
  * New upstream release.
  * Fixes for mfsa2016-{16-34,37}, also known as:
    CVE-2016-1952, CVE-2016-1953, CVE-2016-1954, CVE-2016-1955,
    CVE-2016-1956, CVE-2016-1957, CVE-2016-1958, CVE-2016-1959,
    CVE-2016-1960, CVE-2016-1961, CVE-2016-1962, CVE-2016-1963,
    CVE-2016-1964, CVE-2016-1965, CVE-2016-1967, CVE-2016-1968,
    CVE-2016-1966, CVE-2016-1970, CVE-2016-1971, CVE-2016-1975,
    CVE-2016-1976, CVE-2016-1973, CVE-2016-1974, CVE-2016-1977,
    CVE-2016-2790, CVE-2016-2791, CVE-2016-2792, CVE-2016-2793,
    CVE-2016-2794, CVE-2016-2795, CVE-2016-2796, CVE-2016-2797,
    CVE-2016-2798, CVE-2016-2799, CVE-2016-2800, CVE-2016-2801,
    CVE-2016-2802.

  * debian/rules, debian/browser.install.in: Remove xpm icon. It was only
    shipped for the menu file, which is not there anymore.
  * debian/control*, debian/changelog: Rename the source package to
    firefox-esr.
  * debian/browser.install.in, debian/control*, debian/rules,
    debian/upstream.mk, debian/vendor.js*: Remove the OFFICIAL_NAME variable
    and adjust packaging code accordingly. Now all cases will be using the
    official name, although in some cases the package name might be different.
  * debian/rules: Remove epoch from l10n package names.
  * debian/branding, debian/installer/package-manifest.browser, debian/rules,
    debian/source/include-binaries: Remove debian/branding.
  * debian/browser.postinst.in, debian/browser.prerm.in: Do not remove
    compreg.dat, xpti.dat and .autoreg. Those files have not been created for
    a long time, so no Debian "firefox" package will have created them.
  * debian/browser.install.in, debian/browser.links.in, debian/rules: Remove
    the default profile. It's going away for good in version 46 anyways, and
    hasn't been provided upstream for a very long time.
  * browser-dev.install.in, debian/libxul.pc.in, debian/mozilla-nspr.pc.in,
    debian/mozilla-plugin.pc.in, debian/rules: Remove pkg-config files. They
    don't exist upstream, and are obviously unused in Debian since libxul.pc
    has been broken since version 40.0.
  * debian/control*, debian/l10n/browser-l10n.control.in, debian/rules: Add
    transitional packages when building firefox-esr.
  * debian/upstream.mk: Remove -esr suffix from PRODUCT_NAME when downloading.
  * debian/copyright: Update debian/copyright with some missing files.
  * debian/browser.NEWS.in, debian/browser.README.Debian.in,
    debian/firefox-esr.NEWS: Rearrange README and NEWS files. Removed outdated
    information, moved the NTLM info from NEWS to README and added a NEWS file
    for the transition off iceweasel.
  * debian/browser.install.in, debian/browser.links.in: Move debsearch
    searchplugin to usr/share/firefox{-esr,}/distribution/searchplugins.
  * debian/browser.install.in, debian/browser.links.in: Move preferences from
    /etc/firefox{-esr,}/pref to /etc/firefox{-esr,}.
  * debian/control*: Bump nspr and nss build dependencies.
  * debian/browser.mozconfig.in: Add --with-app-name option for firefox-esr.
  * debian/browser.install.in:
    - Don't install libmozgnome.so and corresponding manifests, it's gone.
    - The default theme is now an XPI.
    - Install features addons.
  * debian/browser.preinst.in: Remove iceweasel diversion of /usr/bin/firefox.
  * debian/rules, debian/removed_conffiles*: Remove all iceweasel conffiles.
  * debian/source/lintian-overrides:
    - Remove source package name so that the same file can be used for both
      firefox and firefox-esr.
    - Fix some existing lintian overrides to actually work.
    - Add lintian overrides for new false positives.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 Mar 2016 08:43:16 +0900

iceweasel (44.0.2-1) unstable; urgency=medium

  * New upstream release
  * Fixes for mfsa2016-13, also known as CVE-2016-1949.

  * debian/control*:
    - Bump sqlite3 build dependency.
    - Bump Standards-Version. No changes required.
  * debian/copyright:
    - Rename all BSD-n licenses to BSD-n-clause.
    - Remove commas separating lines in Files and Copyright.
    - Fixup some lintian warnings.
  * debian/source/lintian-overrides: Add lintian overrides for various
    "errors" in the source package. See associated comments.
  * debian/rules: Avoid tar creating hard links with -h for symlinks pointing
    to the same file.
  * debian/browser.menu.in: Remove menu file.

 -- Mike Hommey <glandium@debian.org>  Sun, 14 Feb 2016 18:25:51 +0900

iceweasel (44.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2016-{01-04,06,09-11}, also known as:
    CVE-2016-1930, CVE-2016-1931, CVE-2016-1933, CVE-2016-1935,
    CVE-2016-1939, CVE-2016-1937, CVE-2016-1942, CVE-2016-1943,
    CVE-2016-1944, CVE-2016-1945, CVE-2016-1946, CVE-2016-1947.

  * js/src/jit/mips-shared/Architecture-mips-shared.h,
    js/src/jit/mips-shared/Assembler-mips-shared.*,
    js/src/jit/mips32/Architecture-mips32.*,
    js/src/jit/mips32/Assembler-mips32.*,
    js/src/jit/mips64/Architecture-mips64.*,
    js/src/jit/mips64/Assembler-mips64.*: Fix build failure on mipsel.
    bz#1213146.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Jan 2016 11:12:44 +0900

iceweasel (43.0.4-1) unstable; urgency=medium

  * New upstream release.

  * debian/removed_conffiles: Add profile/bookmarks.html to the list of
    removed conffiles. Closes: #809309.
  * debian/removed_conffiles*, debian/rules: Add @browser@rc to the list of
    removed conffiles. Closes: #809386.

 -- Mike Hommey <glandium@debian.org>  Fri, 08 Jan 2016 08:03:06 +0900

iceweasel (43.0.2-1) unstable; urgency=medium

  * New upstream release.

  * debian/latest_nightly.py, debian/upstream.mk: Ensure aurora/nightly
    versions match the requested one for `debian/rules download`.

  * toolkit/mozapps/extensions/internal/XPIProvider.jsm: Simplify change
    allowing unsigned addons in /usr/{lib,share}/mozilla/extensions.
  * browser/components/migration/MigrationUtils.jsm,
    browser/components/nsBrowserGlue.js, browser/installer/package-manifest.in,
    browser/locales/Makefile.in: Move bookmarks.html to a chrome localized
    location. bz#1235107.
  * js/src/jit/mips-shared/Lowering-mips-shared.*,
    js/src/jit/mips32/Lowering-mips32.h: Move LIRGeneratorMIPS::visitRandom to
    architecture-specific: bz#1206591.

 -- Mike Hommey <glandium@debian.org>  Mon, 28 Dec 2015 16:45:41 +0900

iceweasel (43.0.1-1) experimental; urgency=medium

  * New upstream release.

  * toolkit/mozapps/extensions/content/extensions.js,
    toolkit/mozapps/extensions/internal/XPIProvider.jsm: Allow unsigned
    addons in /usr/{lib,share}/mozilla/extensions when upgrading as well,
    and avoid message about them not being verified in about:addons.
    Closes: #808228.
  * security/nss/lib/ckfw/builtins/certdata.txt: Remove the SPI Inc. and
    CAcert.org CA certificates for backports. The former was removed in
    NSS 3.21-1 and the latter in 3.16-1, and remained here largely
    overlooked.
  * media/webrtc/trunk/build/build_config.h: Add aarch64 macros. bz#1219566.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 Dec 2015 12:15:56 +0900

iceweasel (43.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{134-149}, also known as:
    CVE-2015-7201, CVE-2015-7202, CVE-2015-7204, CVE-2015-7207,
    CVE-2015-7208, CVE-2015-7210, CVE-2015-7212, CVE-2015-7215,
    CVE-2015-7211, CVE-2015-7218, CVE-2015-7219, CVE-2015-7216,
    CVE-2015-7217, CVE-2015-7203, CVE-2015-7220, CVE-2015-7221,
    CVE-2015-7205, CVE-2015-7213, CVE-2015-7222, CVE-2015-7223,
    CVE-2015-7214.

  * debian/control*: Bump nss build dependency.
  * debian/rules:
    - Follow upstream default for Gtk+2 vs. Gtk+3 automatically.
    - Only extract defaults/{preferences,profile} from browser/omni.ja.
  * debian/browser.install.in: Don't install libdbusservice.so, it's gone.

  * toolkit/mozapps/extensions/internal/XPIProvider.jsm: Allow unsigned
    addons in /usr/{lib,share}/mozilla/extensions. Closes: #800150.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Dec 2015 10:56:36 +0900

iceweasel (42.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{116-118,121-123,127-132}, also known as:
    CVE-2015-4513, CVE-2015-4514, CVE-2015-4515, CVE-2015-4518,
    CVE-2015-7187, CVE-2015-7188, CVE-2015-7189, CVE-2015-7193,
    CVE-2015-7194, CVE-2015-7195, CVE-2015-7196, CVE-2015-7198,
    CVE-2015-7199, CVE-2015-7200, CVE-2015-7197.

  * debian/control*: Bump nspr, nss and sqlite build dependencies.
  * debian/browser.install.in:
    - Adapt to location change for the Gtk+2 wrapper library.
    - Install liblgpllibs.so.
  * debian/branding/content/Makefile.in: identity-icons-brand*.png were
    replaced by a svg.

 -- Mike Hommey <glandium@debian.org>  Wed, 04 Nov 2015 09:08:45 +0900

iceweasel (41.0.2-1) experimental; urgency=medium

  * New upstream release.
  * Fix for mfsa2015-115, also known as CVE-2015-7184.

 -- Mike Hommey <glandium@debian.org>  Fri, 16 Oct 2015 08:30:41 +0900

iceweasel (41.0.1-1) experimental; urgency=medium

  * New upstream release.

  * debian/watch: Update watch file to use https://archive.mozilla.org/ and xz
    archives.

  * toolkit/library/moz.build: Link libxul against libatomic when necessary.
    bz#1178266.

 -- Mike Hommey <glandium@debian.org>  Mon, 05 Oct 2015 09:38:16 +0900

iceweasel (41.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{96,98,102-112}, also known as:
    CVE-2015-4500, CVE-2015-4501, CVE-2015-4504, CVE-2015-4507,
    CVE-2015-4508, CVE-2015-4510, CVE-2015-4511, CVE-2015-4509,
    CVE-2015-4512, CVE-2015-4502, CVE-2015-4516, CVE-2015-4519,
    CVE-2015-4520, CVE-2015-4521, CVE-2015-4522, CVE-2015-7174,
    CVE-2015-7175, CVE-2015-7177.

  * debian/control*: Bump sqlite build dependency.

  * config/system-headers: Add a system header wrapper for
    <freetype/ftfntfmt.h>. bz#1194520.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Sep 2015 11:34:28 +0900

iceweasel (40.0.3-3) experimental; urgency=medium

  * debian/browser.js.in: Disable Health Report upload.

  * build/autoconf/toolchain.m4: Fixup for libatomic detection.
  * browser/components/preferences/applications.js,
    uriloader/exthandler/nsHandlerService.js: Revert patch from 3.0.1-1
    that doesn't seem useful anymore.
  * browser/confvars.sh: Stop not building Health Report.
  * l10n-ru/browser/chrome/browser-region/region.properties: Revert reordering
    of mailto handlers.
  * toolkit/components/search/nsSearchService.js: Revert change from 12.0-1 that
    handled the transition to /etc/<appname>/searchplugins more gracefully
    because that's not doing anything useful anymore.

 -- Mike Hommey <glandium@debian.org>  Mon, 31 Aug 2015 11:32:14 +0900

iceweasel (40.0.3-2) experimental; urgency=medium

  * debian/rules, debian/removed_conffiles, debian/browser.postinst.in,
    debian/browser.postrm.in, debian/browser.preinst.in: Remove past conffiles.
    Closes: #795353.

  * build/autoconf/toolchain.m4, mfbt/moz.build: Link against libatomic
    when necessary to fix FTBFS on powerpc and mips.

 -- Mike Hommey <glandium@debian.org>  Sun, 30 Aug 2015 20:08:08 +0900

iceweasel (40.0.3-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{94-95}, also known as:
    CVE-2015-4497, CVE-2015-4498.

  * debian/import-tar.py, debian/repack.py, debian/upstream.mk:
    Adjust debian/upstream.mk, debian/repack.py and debian/import-tar.py
    to cope with xz source tarballs.
  * debian/control*: Suggest Latin Modern Math instead of MathJax TeX fonts
    for MathML rendering, and remove suggestion for Asana Math. Thanks
    Frédéric Wang. Closes: #792012.
  * debian/rules, debian/upstream.mk: Don't set LESS_SYSTEM_LIBS when
    building a backport for stretch. Closes: #795331.
  * debian/copyright: Fix typo in MPL 1.1 license version number.
    Closes: #755802.
  * debian/upstream.mk: Avoid latest_nightly.py being run every time
    debian/rules is invoked for aurora builds.
  * debian/rules, debian/control.in: Force build with GCC 4.7 when
    backporting to wheezy.

  * media/libvpx/moz.build: Build libvpx neon code without -mthumb and
    -mfloat-abi=softfp. Closes: #795337.
  * configure.in: Build libvpx neon code with -mfloat-abi=softfp on armel.
  * media/libjpeg/simd/jsimd_mips_dspr2.S: Fix build error in MIPS SIMD
    when compiling with -mfpxx.

 -- Mike Hommey <glandium@debian.org>  Fri, 28 Aug 2015 18:49:49 +0900

iceweasel (40.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{79-83,86-88,90-92}, also known as:
    CVE-2015-4473, CVE-2015-4474, CVE-2015-4475, CVE-2015-4477,
    CVE-2015-4478, CVE-2015-4479, CVE-2015-4480, CVE-2015-4493,
    CVE-2015-4483, CVE-2015-4484, CVE-2015-4491, CVE-2015-4487,
    CVE-2015-4488, CVE-2015-4489, CVE-2015-4490, CVE-2015-4492.

  * debian/latest_nightly.py, debian/upstream.mk: Modify latest_nightly.py to
    work without ftp now that it's gone.
  * debian/upstream.mk: Switch to HTTPS for all hg.mozilla.org urls.
  * debian/rules, debian/browser.install.in: Don't copy searchplugins to
    /etc/iceweasel. They now are in chrome://.
  * debian/browser.install.in: Don't install libmozalloc.so, it doesn't exist
    anymore.

  * toolkit/components/search/nsSearchService.js: Revert change from 32.0.3-1
    that bumped the search engine max icon size to 35kB because it's not
    needed anymore.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Aug 2015 09:21:06 +0900

iceweasel (39.0.3-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-78, also known as CVE-2015-4495.

  * debian/source.filter: Remove the source tarball filtering of search plugin
    icons. See 20150715221703.GD19084@glandium.org.

 -- Mike Hommey <glandium@debian.org>  Fri, 07 Aug 2015 08:52:52 +0900

iceweasel (39.0-1) experimental; urgency=medium

  * New upstream release.

  * debian/branding/content/Makefile.in: Re-revert to non-ESR branding.

 -- Mike Hommey <glandium@debian.org>  Fri, 03 Jul 2015 19:07:36 +0900

iceweasel (38.1.0esr-2) unstable; urgency=medium

  * debian/control*: Bump NSS build dependency.

 -- Mike Hommey <glandium@debian.org>  Fri, 03 Jul 2015 15:26:43 +0900

iceweasel (38.1.0esr-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{59-67,69}, also known as:
    CVE-2015-2724, CVE-2015-2725, CVE-2015-2727, CVE-2015-2728,
    CVE-2015-2729, CVE-2015-2731, CVE-2015-2730, CVE-2015-2722,
    CVE-2015-2733, CVE-2015-2734, CVE-2015-2735, CVE-2015-2736,
    CVE-2015-2737, CVE-2015-2738, CVE-2015-2739, CVE-2015-2740,
    CVE-2015-2741, CVE-2015-2743.

  * debian/rules: Use the right --target, --host and --build arguments to
    configure for the Mozilla build system, which uses different meanings.
  * debian/branding/firefox-branding.js: Add devtools.selfxss.count pref
    to the iceweasel branding to match unofficial branding. Closes: #787975.
  * debian/browser.js.in: Use a sticky pref for browser.newtabpage.enhanced.
  * debian/branding/content/Makefile.in: Revert branding changes for SVG
    wordmark, not used on ESR

  * modules/libpref/prefapi.*, modules/libpref/prefread.*,
    modules/libpref/test/unit/data/testPrefSticky*.js,
    modules/libpref/test/unit/test_stickyprefs.js,
    modules/libpref/test/unit/xpcshell.ini: support 'sticky' preferences,
    meaning a user value is retained even when it matches the default.
    bz#1098343.
  * browser/app/profile/firefox.js, browser/base/content/newtab/intro.js,
    browser/base/content/newtab/page.js,
    browser/modules/DirectoryLinksProvider.jsm: Update patch from bz#1094324
    to fit what landed upstream in newer versions.

 -- Mike Hommey <glandium@debian.org>  Fri, 03 Jul 2015 08:57:25 +0900

iceweasel (38.0.1-5) unstable; urgency=medium

  * debian/rules: Force a timezone when extracting defaults/* files from
    omni.ja archives.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 May 2015 07:36:04 +0900

iceweasel (38.0.1-4) unstable; urgency=medium

  * python/mozbuild/mozpack/files.py: Fixup to keep file type.
  * toolkit/content/Makefile.in, toolkit/content/buildconfig.html: Remove build
    machine name from about:buildconfig. bz#1168316.

 -- Mike Hommey <glandium@debian.org>  Tue, 26 May 2015 21:39:38 +0900

iceweasel (38.0.1-3) unstable; urgency=medium

  * debian/upstream.mk: Force a timezone when setting MOZ_BUILD_DATE.

  * python/mozbuild/mozpack/files.py: Normalize file mode in jars.
    bz#1168231.

 -- Mike Hommey <glandium@debian.org>  Tue, 26 May 2015 08:13:55 +0900

iceweasel (38.0.1-2) unstable; urgency=medium

  * debian/upstream.mk: Set MOZ_BUILD_DATE to the date of the last
    debian/changelog entry for non-Aurora builds.
  * debian/branding/content/Makefile.in: Add a dummy conversion for about.png
    to remove timestamps.
  * debian/browser.js.in: Default to classic view for about:newtab.
  * debian/copyright: Update copyright file to some degree.
  * debian/control*: Bump Standards-Version to 3.9.6.0.
    - debian/rules: Add build-arch and build-indep targets to debian/rules.
  * debian/control*: Switch Vcs-* urls to anonscm.debian.org.

  * ipc/testshell/XPCShellEnvironment.cpp, js/src/shell/js.cpp,
    js/xpconnect/src/XPCShellImpl.cpp: Remove build() function from js and
    xpc shells. bz#1166243.
  * toolkit/locales/l10n.mk. Use dozip.py for langpacks. bz#1166538.
  * browser/app/profile/firefox.js, browser/base/content/newtab/intro.js
    browser/modules/DirectoryLinksProvider.jsm: Set browser.newtabpage.enhanced
    default in prefs. bz#1094324.

 -- Mike Hommey <glandium@debian.org>  Mon, 25 May 2015 13:25:40 +0900

iceweasel (38.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/vendor.js.in: Disable auto-installing webide related addons.
    Closes: #785595.
  * debian/rules: Disable jit on mips. Only mipsel is supported by the jit
    code currently.

  * configure.in, media/libjpeg/moz.build: Fixup libjpeg-turbo assembly
    cleanup.
  * security/manager/ssl/src/SSLServerCertVerification.cpp: Add a NULL-check
    for extensions on the end entity certificate when gathering EKU telemetry.
    Closes: #782772.

 -- Mike Hommey <glandium@debian.org>  Tue, 19 May 2015 13:56:45 +0900

iceweasel (38.0-2) unstable; urgency=medium

  * debian/repack.py: Fix to support filter patterns excluding a top-level
    directory.

  * configure.in: Cleanup how libjpeg-turbo assembly build variables are set.
    bz#1165654. This should fix FTBFSes on arm64 and mips*.
  * memory/mozjemalloc/jemalloc.c: Make powerpc not use static page sizes.
    Closes: #763900.

 -- Mike Hommey <glandium@debian.org>  Sun, 17 May 2015 10:48:06 +0900

iceweasel (38.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{46,48-51,53-56}, also know as:
    CVE-2015-2708, CVE-2015-2709, CVE-2015-2710, CVE-2015-2711,
    CVE-2015-2712, CVE-2015-2713, CVE-2015-2715, CVE-2015-2716,
    CVE-2015-2717, CVE-2015-2718.

  * debian/branding/Makefile.in, debian/branding/moz.build: Adapt build rules
    to upstream changes 
  * debian/branding/locales/en-US/brand.*: Add brandShorterName to Iceweasel
    branding.
  * debian/branding/content/Makefile.in: Add silhouette-40.svg from the
    unofficial branding to iceweasel branding
  * debian/control*: Bump nss and sqlite build dependencies.
  * debian/control.in, debian/upstream.mk: Change backport rules.
    - Set LESS_SYSTEM_LIBS on wheezy and jessie.
    - Only use gstreamer 0.10 on wheezy.

 -- Mike Hommey <glandium@debian.org>  Wed, 13 May 2015 09:59:33 +0900

iceweasel (37.0.2-1) experimental; urgency=medium

  * New upstream release.
  * Fix for mfsa2015-45, also known as CVE-2015-2706.

 -- Mike Hommey <glandium@debian.org>  Tue, 21 Apr 2015 07:44:32 +0900

iceweasel (37.0.1-1) experimental; urgency=medium

  * New upstream release.
  * Fix for mfsa2015-44, also known as CVE-2015-0799.

  * debian/browser.js.in: Change the pref used to disable openh264.
    Closes: #769716.

 -- Mike Hommey <glandium@debian.org>  Sat, 04 Apr 2015 10:29:21 +0900

iceweasel (37.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{30-34,36-40,42}, also known as:
    CVE-2015-0815, CVE-2015-0814, CVE-2015-0813, CVE-2015-0812,
    CVE-2015-0816, CVE-2015-0811, CVE-2015-0808, CVE-2015-0807,
    CVE-2015-0805, CVE-2015-0806, CVE-2015-0803, CVE-2015-0804,
    CVE-2015-0801, CVE-2015-0802.

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Apr 2015 08:47:45 +0900

iceweasel (36.0.4-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{28-29}, also known as:
    CVE-2015-0818, CVE-2015-0817.

 -- Mike Hommey <glandium@debian.org>  Sun, 22 Mar 2015 10:30:14 +0900

iceweasel (36.0.1-2) experimental; urgency=medium

  * debian/browser.mozconfig.in: Don't build with --disable-eme, reverting the
    change from 36.0-1.

 -- Mike Hommey <glandium@debian.org>  Mon, 09 Mar 2015 11:04:37 +0900

iceweasel (36.0.1-1) experimental; urgency=medium

  * New upstream release.

  * gfx/layers/basic/BasicCompositor.cpp,
    gfx/layers/basic/BasicLayerManager.cpp: Reintroduce pixman code path
    removed in bz#1097776 for --disable-skia builds. bz#1136958.

 -- Mike Hommey <glandium@debian.org>  Mon, 09 Mar 2015 08:45:03 +0900

iceweasel (36.0-2) experimental; urgency=medium

  * debian/browser.mozconfig.in: Force enable skia, to possibly fix FTBFS
    on non-x86/amd64/arm architectures.

  * gfx/skia/moz.build: Remove duplicate SkDiscardableMemory_none.cpp.
    bz#1136958.

 -- Mike Hommey <glandium@debian.org>  Thu, 26 Feb 2015 18:12:45 +0900

iceweasel (36.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{11,13-17,19-27}, also known as:
    CVE-2015-0836, CVE-2015-0835, CVE-2015-0832, CVE-2015-0830,
    CVE-2015-0834, CVE-2015-0831, CVE-2015-0829, CVE-2015-0827,
    CVE-2015-0826, CVE-2015-0825, CVE-2015-0824, CVE-2015-0823,
    CVE-2015-0822, CVE-2015-0821, CVE-2015-0819, CVE-2015-0820.

  * debian/control*: Bump nss and sqlite build dependencies.
  * debian/branding/Makefile.in, debian/branding/moz.build,
    debian/extra-stuff/Makefile.in, debian/extra-stuff/moz.build: Update and
    cleanup.
  * debian/browser.install.in: Remove mozilla-xremote-client, it was removed
    upstream.
  * debian/browser.install.in, debian/rules: Remove libmozsandbox.so, it's
    not a shared library anymore.
  * debian/browser.mozconfig.in: Build with --disable-eme for now,

 -- Mike Hommey <glandium@debian.org>  Wed, 25 Feb 2015 16:16:40 +0900

iceweasel (35.0.1-1) experimental; urgency=medium

  * New upstream release.

  * debian/browser.install.in, debian/rules: Only install libmozsandbox.so on
    i386 and amd64.
  * debian/control: Recommend gstreamer packages for video playing capabilities.
    Closes: #737092. Also change the gstreamer build dependencies not to use
    alternatives.

 -- Mike Hommey <glandium@debian.org>  Fri, 30 Jan 2015 10:31:28 +0900

iceweasel (35.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2015-{01-06,08-09}, also known as:
    CVE-2014-8634, CVE-2014-8635, CVE-2014-8637, CVE-2014-8637,
    CVE-2014-8639, CVE-2014-8640, CVE-2014-8641, CVE-2014-8642,
    CVE-2014-8636.

  * debian/browser.mozconfig.in: Build with --enable-pie instead of our own
    patch to the build system.

  * moz.build: Fix how debian/extra-stuff is added to upstream build system
    directory traversal after upstream changes.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Jan 2015 11:46:37 +0900

iceweasel (34.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2014-{83-89,91}, also known as:
    CVE-2014-1587, CVE-2014-1588, CVE-2014-1589, CVE-2014-1590,
    CVE-2014-1591, CVE-2014-1592, CVE-2014-1593, CVE-2014-1594,
    CVE-2014-8631, CVE-2014-8632.

  * debian/branding/firefox-branding.js: Set browser.aboutHomeSnippets.updateUrl
    to "data:text/html,", which resets previously downloaded snippets after a
    day.
  * debian/browser.js.in: Avoid openh264 being downloaded and disable it if it
    is already there. Closes: #769716.
  * debian/control*: Bump nss and sqlite build dependencies.
  * debian/rules: Remove --disable-compile-environment for l10n builds because
    of bz#1063880.
  * debian/browser.install.in: Add sandbox library.

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Dec 2014 01:11:24 -0800

iceweasel (33.1-1) experimental; urgency=medium

  * New upstream release.

  * debian/changelog: Add missing entries for 27.0.1-1.
  * debian/rules: Don't force to build with GCC 4.9 on armhf anymore.
  * debian/browser.mozconfig.in: Don't build with --enable-unified-compilation.
    It may be causing build problems on architectures with limited resources.
  * debian/browser.install.in, debian/browser.postinst.in,
    debian/browser.postrm.in, debian/browser.preinst.in, debian/duckduckgo.xml:
    Remove duckduckgo search engine, since upstream now has it included.
  * debian/branding/firefox-branding.js:
    - Set browser.startup.homepage_override.mstone to "ignore".
    - Set browser.aboutHomeSnippets.updateUrl to nothing. Closes: #721689.

  * Import patches from the nss source package that are relevant to building
    iceweasel against the in-tree nss source, for backports:
    - security/nss/lib/freebl/unix_rand.c,
      security/nss/cmd/shlibsign/shlibsign.c: Fix FTBFS on Hurd because of
      MAXPATHLEN
    - security/nss/coreconf/Linux.mk,
      security/nss/coreconf/arch.mk, security/nss/coreconf/config.mk,
      security/nss/lib/freebl/unix_rand.c, security/nss/lib/softoken/softoken.h,
      security/nss/lib/ssl/sslmutex.*: GNU/kFreeBSD support.
    - security/nss/lib/ckfw/builtins/certdata.txt: Adds the SPI Inc. and
      CAcert.org CA certificates.
    Those patches were applied on the esr24 branch, but were forgotten on the
    release branch at the time.
  * media/libcubeb/tests/moz.build: Work around binutils assertion on mips.

 -- Mike Hommey <glandium@debian.org>  Tue, 11 Nov 2014 12:08:34 +0900

iceweasel (33.0-2) experimental; urgency=medium

  * debian/control*, debian/rules: Do not build depend on gstreamer 1.0 when
    building a backport.

  * netwerk/base/public/security-prefs.js,
    security/manager/ssl/src/nsNSSComponent.cpp: Disable SSLv3 to address
    CVE-2014-3566. bz#1076983.

 -- Mike Hommey <glandium@debian.org>  Sat, 18 Oct 2014 10:45:27 +0900

iceweasel (33.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2014-{74-76,78-82}, also known as:
    CVE-2014-1574, CVE-2014-1575, CVE-2014-1576, CVE-2014-1577,
    CVE-2014-1580, CVE-2014-1581, CVE-2014-1582, CVE-2014-1584,
    CVE-2014-1585, CVE-2014-1586, CVE-2014-1583.

  * debian/control*: Bump nss and sqlite build dependencies.
  * debian/browser.install.in, debian/control.in, debian/rules,
    debian/upstream.mk, debian/vendor.js.in: Change how official branding is
    handled.
  * debian/rules: Disable tests on stable-security.
  * debian/browser.install.in, debian/browser.mozconfig.in, debian/control.in,
    debian/rules: Allow to build against Gtk+3 by setting the GTK3 environment
    variable while building.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 Oct 2014 09:40:22 +0900

iceweasel (32.0.3-1) experimental; urgency=medium

  * New upstream release.

  * toolkit/components/search/nsSearchService.js: Bump search engine max icon
    size to 35kB. Closes: #749084.
  * build/autoconf/compiler-opts.m4, config/rules.mk: Build target programs as
    position independent executable when supported by gcc/clang. bz#857628.

 -- Mike Hommey <glandium@debian.org>  Thu, 25 Sep 2014 15:27:37 +0900

iceweasel (32.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2014-{67-70,72}, also known as:
    CVE-2014-1562, CVE-2014-1553, CVE-2014-1554, CVE-2014-1563,
    CVE-2014-1564, CVE-2014-1565, CVE-2014-1567.

  * debian/browser.bug-script.in, debian/browser.install.in,
    debian/extra-stuff/Makefile.in, debian/extra-stuff/reportbug-helper-script,
    debian/installer/package-manifest.browser: Fix bug script.
  * debian/browser.install.in, debian/rules, debian/upstream.mk: Install
    libreplace_malloc.so when building a nightly.
  * debian/control*: Bump nss and sqlite build dependencies.

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Sep 2014 15:08:17 +0900

iceweasel (31.0-3) unstable; urgency=high

  * The "this time it's going to build on armel" release.

  * debian/rules, debian/control*: Update configure with autoconf2.13 every
    time.

  * configure.in: Use integers for audio when on Android, or when using ARM
    on other OSes, and disable webm encoding. bz#1047791.

 -- Mike Hommey <glandium@debian.org>  Sun, 03 Aug 2014 09:52:28 +0900

iceweasel (31.0-2) unstable; urgency=high

  * Urgency set to high to have a faster transition after armel FTBFS is
    fixed (which is the only thing that prevented the transition).
  * debian/control*: Remove forced gcc-4.9 build dependency for armhf.

  * media/libopus/moz.build: Disable some libopus ARM features on < ARMv6.
    bz#1025689.

 -- Mike Hommey <glandium@debian.org>  Sat, 02 Aug 2014 09:28:53 +0900

iceweasel (31.0-1) unstable; urgency=medium

  * New upstream release.
    - Fixes crashes in WbGL when building with GCC 4.9. Closes: #751569.
  * Fixes for mfsa2014-{56-58,60-62,64-66}, also known as:
    CVE-2014-1547, CVE-2014-1548, CVE-2014-1549, CVE-2014-1550,
    CVE-2014-1561, CVE-2014-1555, CVE-2014-1556, CVE-2014-1557,
    CVE-2014-1558, CVE-2014-1559, CVE-2014-1560, CVE-2014-1552.

  * debian/browser.lintian-overrides.in: Add lintian override for embedded
    srtp.
  * debian/browser.NEWS.in: Add a NEWS file to note the deprecation of
    NTLMv1 authentication.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Jul 2014 08:00:15 +0900

iceweasel (30.0-2) unstable; urgency=medium

  * debian/browser-dev.install.in, debian/control*, debian/libxul.pc.in,
    debian/mozilla-nspr.pc.in, debian/mozilla-plugin.pc.in, debian/rules:
    Add a few pkg-config files to the iceweasel-dev package. Closes: #751268.

  * gfx/skia/trunk/src/opts/SkBlitRow_opts_arm.cpp: Re-apply patch from
    bz#901208 that upstream dropped when updating skia.

 -- Mike Hommey <glandium@debian.org>  Sat, 14 Jun 2014 09:30:39 +0900

iceweasel (30.0-1) unstable; urgency=medium

  * New upstream release.
  * Fixes for mfsa2014-{48-49,51-54}, almost known as:
    CVE-2014-1533, CVE-2014-1534, CVE-2014-1536, CVE-2014-1537,
    CVE-2014-1538, CVE-2014-1540, CVE-2014-1541, CVE-2014-1542,
    CVE-2014-1543.

  * debian/control*: Bump sqlite3 and nspr build dependencies.
  * debian/rules: Don't check autoconf.mk and emptyvars.mk in js/src/config,
    that's not used anymore.
  * debian/browser-dev.install.in, debian/browser-dev.links.in,
    debian/browser.install.in, debian/browser.links.in,
    debian/browser.lintian-overrides.in, debian/browser.mozconfig.in
    debian/control*, debian/extra-stuff/Makefile.in,
    debian/installer/package-manifest.browser, debian/noinstall.in,
    debian/rules, debian/test.mk: Stop building xulrunner packages.
  * debian/installer/package-manifest.xulrunner, debian/dh/*,
    debian/xulrunner*: Removed.
  * debian/browser.lintian-overrides.in: Add lintian override for embedded
    libpng with APNG support.
  * debian/rules: Make xpcshell executable in the SDK.
  * debian/copyright: Point to /usr/share/common-licenses/Apache-2.0 instead
    of including the whole license. Also fix a couple typos.

  * browser/components/migration/content/migration.js,
    browser/components/migration/content/migration.xul,
    browser/components/migration/src/BrowserProfileMigrators.manifest,
    browser/components/migration/src/FirefoxProfileMigrator.js,
    browser/components/migration/src/MigrationUtils.jsm,
    browser/components/migration/src/ProfileMigrator.js,
    browser/locales/en-US/chrome/browser/migration/migration.dtd,
    browser/locales/en-US/chrome/browser/migration/migration.properties,
    l10n-*/browser/chrome/browser/migration/migration.properties,
    toolkit/content/resetProfile.js, toolkit/modules/ResetProfile.jsm,
    toolkit/profile/nsIProfileMigrator.idl, toolkit/xre/nsAppRunner.cpp:
    Revert previous "Reset Firefox" changes.
  * toolkit/modules/ResetProfile.jsm, toolkit/xre/nsAppRunner.cpp: Use
    "firefox" instead of MOZ_APP_NAME for profile reset.
  * xulrunner/moz.build, xulrunner/installer/*.pc.in, xulrunner/confvars.sh,
    xulrunner/app/xulrunner.js, netwerk/test/unit/test_socks.js,
    webapprt/gtk2/webapprt.cpp, configure.in,
    xpcom/glue/standalone/nsXPCOMGlue.cpp: Revert changes that are
    irrelevant now that Iceweasel is not a xulrunner application.
  * browser/app/profile/firefox.js, browser/locales/en-US/firefox-l10n.js:
    Revert changes to general.useragent.locale. They are actually not required.

 -- Mike Hommey <glandium@debian.org>  Sat, 07 Jun 2014 10:27:46 +0900

iceweasel (29.0.1-2) unstable; urgency=medium

  * debian/rules:
    - Don't pull MOZ_UA_BUILDID from official branding, it's not there anymore
      and not useful anyways since bz#728773.
    - Properly create all stamp files.
  * debian/control*: xulrunner-dev conflicts with libmozjs-dev. Closes: #747761
  * debian/rules, debian/control*: Use GCC 4.9 on armhf to work around bug
    #748422.

  * js/xpconnect/src/XPCWrappedJSClass.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcinvoke_ppc_*.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcinvoke_sparc_*.cpp: Fixup ppc and
    sparc xpconnect

 -- Mike Hommey <glandium@debian.org>  Sat, 24 May 2014 08:11:59 +0900

iceweasel (29.0.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/control*, debian/rules: Don't separate out the libdbusservice
    component for dh_shlibdeps. libxul.so has had the same dependencies for
    a while anyways.
  * debian/rules: Replace occurrences of /usr/lib/$($(PRODUCT)) with
    $(LIB_DIR).
  * debian/xulrunner-dev.links.in: Install nspr-config in the sdk, not the
    application directory. Also don't install it when building with bundled
    nspr.
  * debian/browser.mozconfig*, debian/rules: Move --with-system-nspr/nss flags
    to browser.mozconfig.
  * debian/rules: Use browser.mozconfig to build l10n.
  * debian/control*, debian/rules, debian/xulrunner.mozconfig.in: Build against
    gstreamer 1.0 when possible.

  * js/src/jit/BaselineIC.cpp, js/src/jit/arm/MacroAssembler-arm.cpp,
    js/src/jit/arm/MacroAssembler-arm.h: Fix mis-refactoring, and add some
    asserts to let debug users know that float32 can be broken. bz#957504.
  * Pass JSVAL as a pointer to the structure on ppc. bz#961488.
  * configure.in, content/media/gstreamer/GStreamerAllocator.*,
    content/media/gstreamer/GStreamerFormatHelper.cpp,
    content/media/gstreamer/GStreamerFunctionList.h,
    content/media/gstreamer/GStreamerLoader.*,
    content/media/gstreamer/GStreamerReader*,
    content/media/gstreamer/moz.build, content/media/test/manifest.js: Add
    support for GStreamer 1.0. bz#806917.

 -- Mike Hommey <glandium@debian.org>  Sun, 11 May 2014 15:53:14 +0900

iceweasel (29.0-2) experimental; urgency=medium

  * debian/rules: Don't use find to get the list of autoconf.mk and
    emptyvars.mk files. This should fix the FTBFSes on i386 and armhf.
  * debian/branding/content/Makefile.in, debian/branding/content/jar.mn,
    debian/branding/locales/Makefile.in, debian/branding/locales/jar.mn:
    Add missing icons to branding. Closes: #747049.
  * debian/browser.links.in: Remove dangling /usr/lib/iceweasel/browser/modules.
    Closes: #746529.

  * gfx/src/nsDeviceContext.cpp: Backout bz#991767 for causing bz#1003707.
    Closes: #746598.

 -- Mike Hommey <glandium@debian.org>  Wed, 07 May 2014 10:30:20 +0900

iceweasel (29.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2014-{34,36-39,41-44,46-47}, almost known as:
    CVE-2014-1518, CVE-2014-1519, CVE-2014-1522, CVE-2014-1523,
    CVE-2014-1525, CVE-2014-1528, CVE-2014-1529, CVE-2014-1530,
    CVE-2014-1531, CVE-2014-1532, CVE-2014-1526.

  * debian/control*: Bump nspr and sqlite3 build dependencies.
  * debian/rules: Adjust AUTOCONF_DIRS.
  * debian/branding/moz.build, debian/branding/content/moz.build,
    debian/branding/locales/moz.build: Add now necessary definition for jar.mn.
  * debian/branding/configure.sh: Set MOZ_APP_NAME.
  * debian/browser.install.in, debian/browser.mozconfig, debian/rules:
    Use omnijar chrome format for browser.
  * debian/control*: Build depend on iso-codes.

  * config/makefiles/target_binaries.mk, config/rules.mk, js/src/Makefile.in:
    Revert changes to add sonames, since the last library this was used for
    is mozjs, and it was removed in 28.0-1.

 -- Mike Hommey <glandium@debian.org>  Mon, 28 Apr 2014 23:21:57 -0700

iceweasel (28.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2014-{15,17-20,22-23,26-32}, also known as
    CVE-2014-1493, CVE-2014-1494, CVE-2014-1497, CVE-2014-1498,
    CVE-2014-1499, CVE-2014-1500, CVE-2014-1502, CVE-2014-1504,
    CVE-2014-1508, CVE-2014-1509, CVE-2014-1505, CVE-2014-1510,
    CVE-2014-1511, CVE-2014-1512, CVE-2014-1513, CVE-2014-1514.

  * debian/branding/content/Makefile.in, debian/branding/content/jar.mn,
    debian/branding/content/wordmark.xsl: Adapt Iceweasel branding to upstream
    changes. Closes: #739797.
  * debian/extra-stuff/Makefile.in, debian/installer/Makefile.in,
    debian/rules: Fix various places to use the new location of the upstream
    preprocessor.
  * debian/control*:
    - Bump nspr, sqlite and vpx build dependencies.
    - Add build dependency on libpulse-dev.
  * debian/branding/content/Makefile.in: Fix iceweasel branding build after
    bz#934361.
  * moz.build, debian/rules, debian/extra-stuff/moz.build: Add
    debian/extra-stuff to upstream build system directory traversal.
  * moz.build: Make upstream build system create debian/installer/Makefile.
  * debian/rules: Remove rules to create Makefiles, they don't work anymore.
  * debian/rules: Fix dh_xulrunner npapi check to fit upstream changes.
  * debian/xulrunner.mozconfig.in, debian/control*: Use in-tree libvpx for
    backports.
  * debian/latest_nightly.py: Use ftplib instead of ftputil.
  * debian/noinstall.in, debian/xulrunner-dev.install.in: Install
    mozilla-nspr.pc and mozilla-nss.pc when building backports. Closes: #739490.
  * debian/control*, debian/libmozjs*, debian/noinstall.in, debian/rules,
    debian/smjs.1, debian/spidermonkey-bin*,
    debian/xulrunner-GRE_VERSION.links.in, debian/xulrunner-dev.install.in,
    debian/xulrunner.mozconfig.in: Stop building spidermonkey packages.
  * debian/xulrunner.mozconfig.in: Enable unified compilation for faster builds,
    smaller debug info and possibly less memory usage when linking.

  * modules/libpref/src/moz.build, modules/libpref/src/Makefile.in: Fixup
    MOZ_OFFICIAL_BRANDING use for phishing shavar after upstream build system
    changes.
  * xulrunner/installer/mozilla-ns*.pc.in: Fix includedir in mozilla-nspr.pc
    and mozilla-nss.pc. bz#985200.

 -- Mike Hommey <glandium@debian.org>  Wed, 19 Mar 2014 13:18:08 +0900

iceweasel (27.0.1-1) experimental; urgency=medium

  * New upstream release.

  * debian/copyright, debian/rules: Update copyright info. Closes: #735297.
  * debian/source.filter:
    - Remove build/pgo/blueprint/valid.png from the source archive.
      Closes: #736592
    - Remove minified jquery from source archive. Closes: #736725.
  * debian/control*: Bump nspr and nss build dependencies.
  * debian/rules: Work around build failure following the removal of valid.png.

 -- Mike Hommey <glandium@debian.org>  Sat, 22 Feb 2014 12:15:46 +0900

iceweasel (27.0-2) experimental; urgency=medium

  * debian/installer/package-manifest.browser: Install files from the right
    location to fix about:iceweasel.
  * debian/rules: Add missing branding flag to l10n configure. Closes: #737824.

  * xpcom/base/nsMemoryReporterManager.cpp: Fix FTBFS on kFreeBSD.

 -- Mike Hommey <glandium@debian.org>  Sat, 08 Feb 2014 08:24:19 +0900

iceweasel (27.0-1) experimental; urgency=medium

  * New upstream release.
  * Fixes for mfsa2014-{01-05,07-11,13}, also known as
    CVE-2014-1477, CVE-2014-1478, CVE-2014-1479, CVE-2014-1480,
    CVE-2014-1482, CVE-2014-1483, CVE-2014-1485, CVE-2014-1486,
    CVE-2014-1487, CVE-2014-1489, CVE-2014-1488, CVE-2014-1481.

  * debian/upstream.mk: Only use one digit of the GRE_MILESTONE for
    GRE_VERSION.
  * debian/control*: Bump sqlite3 and nss build dependencies.
  * debian/rules: Use a separate build directory for l10n, without
    --with-libxul-sdk.
  * debian/copyright: Updated.

  * config/makefiles/target_libs.mk, js/src/config/makefiles/target_libs.mk:
    Fixup soname rules for upstream changes.
  * moz.build, widget/gonk/libdisplay/moz.build, xpcom/ds/moz.build,
    xpcom/reflect/xptcall/src/md/unix/moz.build: Fix
    --disable-compile-environment a little. bz#862770.

 -- Mike Hommey <glandium@debian.org>  Wed, 05 Feb 2014 20:06:49 +0900

iceweasel (26.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{104-116}, also known as
    CVE-2013-5609, CVE-2013-5610, CVE-2013-5611, CVE-2013-5612,
    CVE-2013-5614, CVE-2013-5616, CVE-2013-5618, CVE-2013-5619,
    CVE-2013-6671, CVE-2013-6672, CVE-2013-6673, CVE-2013-5613,
    CVE-2013-5615, CVE-2013-6629, CVE-2013-6630.

  * debian/*.mozconfig: Add --enable-release configure flag.
  * debian/control*: Bump nspr build dependency.
  * debian/*.mozconfig: Don't build --with-system-ply, the option is gone.
  * debian/noinstall.in: Don't install usr/lib/xulrunner-devel-*/sdk/bin/ply.
  * debian/control*, debian/noinstall.in, debian/rules, debian/upstream.mk,
    debian/xulrunner-GRE_VERSION.install.in, debian/xulrunner.mozconfig:
    Don't build against system nspr, nss and sqlite3 when building backports.
  * debian/control*, debian/xulrunner.mozconfig.in: Build with the in-tree
    cairo. I think it's time to admit that there are too many issues with
    system cairo.
  * debian/rules: Ensure debian/control is updated when running debian/rules
    clean.

  * toolkit/content/resetProfile.js, toolkit/modules/ResetProfile.jsm:
    Fixup "Reset Firefox" after bad merge.
  * configure*: Fixup NSPR_CFLAGS when building with libxul-sdk and in-tree
    nspr.

 -- Mike Hommey <glandium@debian.org>  Sun, 15 Dec 2013 16:45:37 +0900

iceweasel (25.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{93-102}, also known as
    CVE-2013-5590, CVE-2013-5591, CVE-2013-5592, CVE-2013-5593,
    CVE-2013-5604, CVE-2013-5595, CVE-2013-5596, CVE-2013-5597,
    CVE-2013-5598, CVE-2013-5599, CVE-2013-5600, CVE-2013-5601,
    CVE-2013-5602, CVE-2013-5603.

  * debian/rules: Don't try to disable methodjit, since it's long gone.
  * debian/upstream.mk: Adjust version mangling to handle the version scheme
    change without changing package names.

 -- Mike Hommey <glandium@debian.org>  Sat, 02 Nov 2013 10:38:15 +0900

iceweasel (24.0-2) unstable; urgency=low

  * debian/control*: Build-depend on fonts-freefont-ttf instead of
    fonts-freefont, which doesn't exist. Closes: #714056. Interestingly, 
    experimental was happy with that, but unstable isn't.

 -- Mike Hommey <glandium@debian.org>  Thu, 19 Sep 2013 07:03:08 +0900

iceweasel (24.0-1) unstable; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{76-82,85,88-92}, also known as
    CVE-2013-1718, CVE-2013-1719, CVE-2013-1720, CVE-2013-1721,
    CVE-2013-1722, CVE-2013-1723, CVE-2013-1724, CVE-2013-1725,
    CVE-2013-1728, CVE-2013-1730, CVE-2013-1732, CVE-2013-1735,
    CVE-2013-1736, CVE-2013-1737, CVE-2013-1738.

  * debian/control*:
    - Bump sqlite build dependency.
    - Add build dependencies on gstreamer. Closes: #682917.
    - Build depend on fonts-freefont and fonts-dejima-mincho. Closes: #714056.
    - Use strict dependencies between binary packages. Closes: #720467.
    - Add Suggests for MathML-friendly fonts. Closes: #697277.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Sep 2013 09:10:25 +0900

iceweasel (23.0.1-1) unstable; urgency=low

  * New upstream release.
  * debian/rules:
    - Don't use --no-keep-memory on ia64. Somehow, it makes ld fail to relax
      some relocations.
    - Don't use --as-needed on ia64. Somehow, it makes ld crash on some files.

  * ipc/chromium/chromium-config.mk: Add missing piece of the upstream patch
    for bz#901414. Fixes FTBFS on kFreeBSD.
  * js/public/Value.h: Remove uintptr_t word payload union member on 64BE, it
    grows jsval_layout size and is unused. bz#618485. Fixes FTBFS on s390x.
  * gfx/skia/src/opts/SkBlitRow_opts_arm.cpp: Fixups landed upstream. Fixes
    FTBFS on armel.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Aug 2013 22:07:49 +0900

iceweasel (23.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{63-65,67-70,72-73,75}, also known as
    CVE-2013-1701, CVE-2013-1702, CVE-2013-1704, CVE-2013-1705,
    CVE-2013-1708, CVE-2013-1709, CVE-2013-1710, CVE-2013-1711,
    CVE-2013-1713, CVE-2013-1714, CVE-2013-1717.

  * debian/control*: Bump nss build dependency.
  * debian/rules:
    - Avoid installing libmozjs.a.
    - Install mozjs.pc as mozilla-js.pc.
    - Reduce memory usage of the linker at the expense of processing time.
    This should help on lower-end architectures like arm and mips, which
    spend an immense amount of time swapping.
  * debian/dh/dh_xulrunner.in: Change one of the searched strings to detect
    the xulrunner stub. This avoids an error in detection when gcc inlines
    strings in the code for strcpy.

  * build/unix/elfhack/elfhack.cpp: Support R_ARM_JUMP24 and R_ARM_CALL
    relocations. bz#892366. Fixes FTBFS on armel.
  * build/unix/elfhack/elfhack.cpp, build/unix/elfhack/inject.c: Turn BL into
    BLX when doing thumb call relocations and the target is ARM. bz#898998.
    Fixes FTBFS on armhf.
  * xpcom/glue/nsIClassInfoImpl.h: Properly align statically allocated
    classinfo objects. bz#898916. Fixes FTBFS on armel.
  * js/public/HeapAPI.h, js/src/gc/Memory.*, js/src/gc/Nursery.cpp,
    js/src/ion/AsmJS.*, js/src/ion/AsmJSModule.h, js/src/jsapi.cpp,
    js/src/jscntxt.h, js/src/jsgc.cpp, js/src/jstypedarray.cpp: Use the
    runtime page size to control arena decommit. bz#840242. Fixes FTBFS on
    sparc and runtime issues on mips and likely other architectures.
  * js/src/configure*: Disable Yarr JIT on sparc and mips. bz#900821.
  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_*: Change SharedStub
    definition in tier-3 xptcstubs to better fit reality and make the compiler
    happy now that nsresult is an enum. bz#901200.
  * configure*: Set WEBRTC_TARGET_ARCH to a right value on ia64. bz#901202.
  * gfx/skia/src/opts/SkBlitRow_opts_arm.cpp: Fix Skia for ARM v4t. bz#901208.
  * js/src/ion/AsmJSSignalHandlers.cpp: Support GNU/kFreeBSD.
  * ipc/chromium/Makefile.in, ipc/chromium/chromium-config.mk,
    ipc/chromium/src/base/dir_reader_posix.h,
    ipc/chromium/src/base/platform_thread.h,
    ipc/chromium/src/base/platform_thread_posix.cc,
    ipc/chromium/src/base/process_util.h,
    ipc/chromium/src/build/build_config.h: Fix ipc/chromium to build for
    GNU/kFreeBSD. bz#901414.

 -- Mike Hommey <glandium@debian.org>  Wed, 07 Aug 2013 08:25:28 +0900

iceweasel (22.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{49-62}, also known as
    CVE-2013-1682, CVE-2013-1684, CVE-2013-1685, CVE-2013-1686,
    CVE-2013-1687, CVE-2013-1688, CVE-2013-1690, CVE-2013-1692,
    CVE-2013-1693, CVE-2013-1694, CVE-2013-1695, CVE-2013-1696,
    CVE-2013-1697, CVE-2013-1698, CVE-2013-1699, CVE-2013-1700.

  * debian/rules:
    - Fix configure-check-xulrunner with gawk. Closes: #708765.
    - Work around moz.build limitations for l10n.
    - Work around the variable override limitation for MODULE.
    - gc and ds include subdirectories have been removed.
    - Disable branding check for now.
  * debian/control*: Bump sqlite build dependency.
  * debian/*/Makefile.in, debian/branding/**/moz.build:
    Accomodate our extra Makefiles to upstream build system changes.
  * debian/xulrunner-GRE_VERSION.install.in: libxpcom was removed.
  * debian/rules, debian/check_resources.*: Remove resource:// url
    checker, now that resource://app and resource://gre are different
    upstream, too.

  * memory/mozjemalloc/jemalloc.c: Don't hardcode page size on mips.
    Should fix FTBFS on mips.
  * js/src/vm/Stack.cpp: Fix FTBFS on non-Linux glibc systems due to mincore
    prototype discrepancy. Thanks Samuel Thibault. Closes: #697891.

 -- Mike Hommey <glandium@debian.org>  Wed, 26 Jun 2013 08:43:55 +0900

iceweasel (21.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{41-43,46-48}, also known as
    CVE-2013-0801, CVE-2013-1669, CVE-2013-1670, CVE-2013-1671,
    CVE-2013-1674, CVE-2013-1675, CVE-2013-1676, CVE-2013-1677,
    CVE-2013-1679, CVE-2013-1680, CVE-2013-1681.

  * debian/control*:
    - Add Breaks: xul-ext-torbutton. Closes: #690729.
    - Build depend on python 2.7 and python-minimal >= 2.6.6-13~.
    - Bump nspr build dependencies.
  * debian/rules:
    - Use config.status directly to generate Makefiles.
    - Adjust --{with,enable}-system options check to upstream build system
      changes (in advance).
  * debian/browser.install.in, debian/browser.links.in,
    debian/check_resources.overrides,
    debian/installer/package-manifest.xulrunner, debian/noinstall.in,
    debian/rules, debian/branding/defs.mk: Browser parts moved in a
    subdirectory.
  * debian/check_resources.overrides: Add new overrides for providermanager.jsm.
  * debian/xulrunner-GRE_VERSION.links.in: Use the full libmozjs soname for the
    symlink in the xulrunner directory.

  * browser/confvars.sh: Disable Firefox Health Report.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 May 2013 12:40:11 +0200

iceweasel (20.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{30,35-39}, also known as
    CVE-2013-0788, CVE-2013-0789, CVE-2013-0796, CVE-2013-0795,
    CVE-2013-0794, CVE-2013-0793, CVE-2013-0792.

  * debian/browser.mozconfig: Disable DASH when building browser part.
  * debian/check_resources.overrides: Add override for gcli.jsm.
  * debian/rules: Test plugins have moved from dist/bin/plugins to
    dist/plugins.
  * debian/control.*: Bump nss and sqlite3 build dependencies.

 -- Mike Hommey <glandium@debian.org>  Tue, 02 Apr 2013 21:13:56 +0200

iceweasel (19.0.2-1) experimental; urgency=low

  * New upstream release.
  * Fix for mfsa2013-29, also known as CVE-2013-0787.

 -- Mike Hommey <glandium@debian.org>  Fri, 08 Mar 2013 22:29:04 +0100

iceweasel (19.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{21-28}, also known as
    CVE-2013-0783, CVE-2013-0784, CVE-2013-0772, CVE-2013-0765,
    CVE-2013-0773, CVE-2013-0774, CVE-2013-0775, CVE-2013-0776,
    CVE-2013-0780, CVE-2013-0782, CVE-2013-0777, CVE-2013-0778,
    CVE-2013-0779, CVE-2013-0781.

  * debian/control*: Bump nspr build dependency and add missing epoch to nspr
    and nss build dependencies. Closes: #698961.

 -- Mike Hommey <glandium@debian.org>  Wed, 20 Feb 2013 09:22:52 +0100

iceweasel (18.0.2-1) experimental; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 08 Feb 2013 16:03:33 +0100

iceweasel (18.0.1-1) experimental; urgency=low

  * New upstream release.
    - Fixes handling of language packs. Closes: #697836.

 -- Mike Hommey <glandium@debian.org>  Fri, 18 Jan 2013 22:39:42 +0100

iceweasel (18.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2013-{01-19}, also known as
    CVE-2013-0769, CVE-2013-0749, CVE-2013-0770, CVE-2013-0760,
    CVE-2013-0762, CVE-2013-0766, CVE-2013-0767, CVE-2013-0761,
    CVE-2013-0763, CVE-2013-0771, CVE-2012-5829, CVE-2013-0768,
    CVE-2012-0759, CVE-2013-0744, CVE-2013-0751, CVE-2013-0764,
    CVE-2013-0745, CVE-2013-0746, CVE-2013-0747, CVE-2013-0748,
    CVE-2013-0750, CVE-2013-0752, CVE-2013-0757, CVE-2013-0758,
    CVE-2013-0753, CVE-2013-0754, CVE-2013-0755, CVE-2013-0756.

  * debian/control*: Bump nspr, nss and sqlite build dependencies.
  * debian/control*, debian/xulrunner.mozconfig: Build against embedded
    libjpeg-turbo and build depend on yasm accordingly.
  * debian/xulrunner-GRE_VERSION.lintian-overrides.in: Add a lintian override
    for libjpeg-turbo.
  * debian/check_resources.overrides: Add an override for SettingsDB.jsm.

  * services/*, testing/marionette/*: Fix services import urls. bz#815320.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Jan 2013 08:56:15 +0100

iceweasel (17.0.1-2) experimental; urgency=low

  * debian/iceweasel-runner, debian/iceweasel.bug-presubj,
    debian/iceweasel.install, debian/iceweasel.links.in, debian/noinstall.in,
    debian/rules: Use the iceweasel binary instead of the xulrunner stub, and
    remove the shell wrapper
  * debian/control*: Remove xulrunner dependency on libnspr4-0d.
    Closes: #695346.
  * debian/iceweasel-xremote-client, debian/iceweasel.install, debian/rules:
    Remove iceweasel-xremote-client.
  * debian/noinstall.in, debian/rules: Don't remove update-settings.ini and
    move firefox-l10n.js removal to debian/noinstall.in.
  * debian/rules: Cleanup *.pyc removal, and remove *.pyo as well.
  * debian/iceweasel.1: Update manpage.
  * debian/noinstall.in: Remove usr/lib/xulrunner-@GRE_VERSION@/libmozjs.so
    with noinstall.in, it's symlinked later on.
  * debian/test.mk: Use the iceweasel binary for tests.
  * debian/branding/Makefile.in, debian/iceweasel.install, debian/rules:
    Don't generate mozicon*.xpm or firefox.ico, and generate iceweasel.xpm from
    debian/rules.
  * debian/*: Allow to build with the firefox branding.
  * debian/browser.README.Debian.in: Update the text about the application not
    being named Firefox.

  * browser/app/Makefile.in: Move MOZ_OFFICIAL_BRANDING definition to avoid
    conflict with bz#755724.
  * browser/app/Makefile.in, browser/app/nsBrowserApp.cpp, configure.in:
    Don't use the xulrunner stub when building Firefox against a libxul SDK.
    bz#755724.
  * toolkit/mozapps/installer/Packager.pm: Dereference symbolic links when
    packaging. This effectively reverts a part of bz#552864 that ended up not
    being useful.

 -- Mike Hommey <glandium@debian.org>  Fri, 28 Dec 2012 17:56:41 +0100

iceweasel (17.0.1-1) experimental; urgency=low

  * New upstream release.
  * debian/upstream.mk: Add a rule to import tarballs in git repository.
  * debian/repack.py: Don't error out when a repack filter is unused.
  * debian/iceweasel.desktop: Fix StartupWMClass. Closes: #693714.

  * media/webrtc/shared_libs.mk,
    media/webrtc/trunk/src/modules/audio_coding/codecs/pcm16b/pcm16b.c,
    media/webrtc/trunk/src/typedefs.h: Allow webrtc to build on more
    architectures (hopefully). Thanks Michel Dänzer for the original patch.
    bz#814693. Closes: #694071.

 -- Mike Hommey <glandium@debian.org>  Sat, 01 Dec 2012 09:58:43 +0100

iceweasel (17.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-{91-106}, also known as
    CVE-2012-5842, CVE-2012-5843, CVE-2012-4202, CVE-2012-4201,
    CVE-2012-5836, CVE-2012-4203, CVE-2012-4204, CVE-2012-4205,
    CVE-2012-4206, CVE-2012-4208, CVE-2012-5841, CVE-2012-4207,
    CVE-2012-5837, CVE-2012-4209, CVE-2012-4210, CVE-2012-4214,
    CVE-2012-4215, CVE-2012-4216, CVE-2012-5829, CVE-2012-5839,
    CVE-2012-5840, CVE-2012-4212, CVE-2012-4213, CVE-2012-4217,
    CVE-2012-4218, CVE-2012-5830, CVE-2012-5833, CVE-2012-5835,
    CVE-2012-5838.

  * debian/upstream.mk: Get l10n for nightlies.
  * debian/rules:
    - Use a more generic command to build Makefiles. This avoids ftbfs
      because make-makefile is gone.
    - Modify the dh_xulrunner test to account for the second test plugin.
  * debian/iceweasel.mozconfig: Disable webrtc during the browser build.

  * browser/locales/jar.mn: Preprocess appstrings.properties. Closes: #688987.
  * toolkit/mozapps/installer/packager.mk: Avoid installing .mkdir.done and
    precomplete with make install. bz#798450

 -- Mike Hommey <glandium@debian.org>  Tue, 20 Nov 2012 23:54:09 +0100

iceweasel (16.0.2-1) experimental; urgency=high

  * New upstream release.
  * Fixes for mfsa2012-90, also known as
    CVE-2012-4194, CVE-2012-4195, CVE-2012-4196.

 -- Mike Hommey <glandium@debian.org>  Fri, 26 Oct 2012 20:46:21 +0200

iceweasel (16.0.1-1) experimental; urgency=high

  * New upstream release.
  * Fixes for mfsa2012-{88-89}, also known as
    CVE-2012-4191, CVE-2012-4192, CVE-2012-4193.

  * config/autoconf.mk.in, configure.in, extensions/gio/Makefile.in,
    toolkit/library/Makefile.in, toolkit/library/nsStaticXULComponents.cpp:
    toolkit/toolkit-tiers.mk: Actually build the GIO extension in libxul.
    bz#799441.

 -- Mike Hommey <glandium@debian.org>  Fri, 12 Oct 2012 00:24:42 +0200

iceweasel (16.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-{74-77,79-87}, also known as
    CVE-2012-3983, CVE-2012-3982, CVE-2012-3984, CVE-2012-3985,
    CVE-2012-3985, CVE-2012-3986, CVE-2012-3988, CVE-2012-3989,
    CVE-2012-3991, CVE-2012-3994, CVE-2012-3993, CVE-2012-4184,
    CVE-2012-3992, CVE-2012-3995, CVE-2012-4179, CVE-2012-4180,
    CVE-2012-4181, CVE-2012-4182, CVE-2012-4183, CVE-2012-4185,
    CVE-2012-4186, CVE-2012-4187, CVE-2012-4188, CVE-2012-3990.

  * debian/rules: Use xz compression for binary packages. Closes: #686325.
  * debian/xulrunner.mozconfig: Enable gio protocol-handler and icon decoder.
  * debian/control*:
    - Bump libnspr4-dev build dependency to 4.9.2.
    - Bump libsqlite3-dev build dependency to 3.7.13.
  * debian/iceweasel.install, debian/iceweasel.links.in: Install webapprt
    files.

  * media/webrtc/trunk/src/modules/video_coding/codecs/vp8/main/source/vp8.cc:
    Fix to build against libvpx 1.1.
  * extensions/gio/Makefile.in: Build the GIO extension in libxul. bz#799441.
  * webapprt/gtk2/Makefile.in, webapprt/gtk2/webapprt.cpp: Don't search firefox
    executable in $exe/../../dist/bin. bz#798233.
  * webapprt/gtk2/webapprt.cpp: Fallback to the xulrunner subdirectory if
    webapprt can't find xpcom in firefox directory. bz#762833.

 -- Mike Hommey <glandium@debian.org>  Tue, 09 Oct 2012 15:13:08 +0200

iceweasel (15.0.1-1) experimental; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sun, 16 Sep 2012 09:18:40 +0200

iceweasel (15.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-{57-66,68-70,72}, also known as
    CVE-2012-1971, CVE-2012-1970, CVE-2012-1972, CVE-2012-1973,
    CVE-2012-1974, CVE-2012-1975, CVE-2012-1976, CVE-2012-3956,
    CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960,
    CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964,
    CVE-2012-1956, CVE-2012-3965, CVE-2012-3966, CVE-2012-3968,
    CVE-2012-3967, CVE-2012-3969, CVE-2012-3970, CVE-2012-3971,
    CVE-2012-3972, CVE-2012-3973, CVE-2012-3975, CVE-2012-3976,
    CVE-2012-3978, CVE-2012-3980.

  * debian/iceweasel.mozconfig: Build iceweasel with system ply.
  * debian/xulrunner-GRE_VERSION.install.in: Don't install xulrunner-bin, as
    it's gone.
  * debian/rules: Also use an epoch for iceweasel-l10n-all.

 -- Mike Hommey <glandium@debian.org>  Wed, 29 Aug 2012 08:19:45 +0200

iceweasel (14.0.1-2) experimental; urgency=low

  * mfbt/double-conversion/utils.h: Declare double conversion correctness for
    more architectures. bz#750620. Should fix FTBFSes on most (all?) Debian
    architecures.

 -- Mike Hommey <glandium@debian.org>  Thu, 19 Jul 2012 08:03:16 +0200

iceweasel (14.0.1-1) experimental; urgency=high

  * New upstream release.
  * Fixes for mfsa2012-{42-56}, also known as
    CVE-2012-1948, CVE-2012-1950, CVE-2012-1951, CVE-2012-1954,
    CVE-2012-1953, CVE-2012-1952, CVE-2012-1966, CVE-2012-1955,
    CVE-2012-1957, CVE-2012-1958, CVE-2012-1959, CVE-2012-1960,
    CVE-2012-1961, CVE-2012-1962, CVE-2012-1963, CVE-2012-1964,
    CVE-2012-1965, CVE-2012-1967.
  * debian/rules: Remove packager fatal warnings.
  * debian/xulrunner-GRE_VERSION.install.in: Don't install run-mozilla.sh and
    xpcshell in usr/lib/xulrunner-x.y. They are in the SDK, now.
  * debian/check_resources.py: Allow missing manifests when checking
    resources.

  * browser/installer/package-manifest.in: Install URL classifier components
    when MOZ_URL_CLASSIFIER is set. bz#762617.

 -- Mike Hommey <glandium@debian.org>  Tue, 17 Jul 2012 12:13:48 +0200

iceweasel (13.0.1-2) experimental; urgency=low

  * debian/control*: Change font suggestions for MathML. Closes: #679469.
  * dom/ipc/Makefile.in, dom/ipc/PBrowser.ipdl, dom/ipc/TabMessageUtils.cpp:
    Only export TabMessageUtils.h in mozilla/dom. bz#761082. Closes: #675920.

 -- Mike Hommey <glandium@debian.org>  Fri, 29 Jun 2012 09:56:00 +0200

iceweasel (13.0.1-1) experimental; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 16 Jun 2012 08:00:38 +0200

iceweasel (13.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-{34,36-38,40}, also known as
    CVE-2012-1938, CVE-2012-1937, CVE-2011-3101, CVE-2012-1944,
    CVE-2012-1945, CVE-2012-1946, CVE-2012-1947, CVE-2012-1940,
    CVE-2012-1941.

  * debian/check_resources.overrides: Remove now unused entries.
  * debian/rules: Adjust mozjs includes copied in libmozjs-dev.
  * debian/installer/Makefile.in: Use DEFINES from browser/installer to
    build package manifests.
  * debian/branding/Makefile.in, debian/extra-stuff/Makefile.in,
    debian/installer/*: Remove build script compatibility with Firefox < 4.0.

  * browser/components/migration/content/migration.js,
    browser/components/migration/content/migration.xul,
    browser/components/migration/src/BrowserProfileMigrators.manifest,
    browser/components/migration/src/FirefoxProfileMigrator.js,
    browser/components/migration/src/ProfileMigrator.js,
    browser/locales/en-US/chrome/browser/migration/migration.dtd,
    browser/locales/en-US/chrome/browser/migration/migration.properties,
    l10n-*/browser/chrome/browser/migration/migration.properties,
    toolkit/content/aboutSupport.js, toolkit/content/jar.mn,
    toolkit/content/resetProfile.js, toolkit/profile/nsIProfileMigrator.idl,
    toolkit/xre/nsAppRunner.cpp: Make the "Reset Firefox" feature more
    generic. bz#756390. Closes: #673353.

 -- Mike Hommey <glandium@debian.org>  Tue, 05 Jun 2012 09:31:15 +0200

iceweasel (12.0-7) experimental; urgency=low

  * debian/rules: Also set LDFLAGS from dpkg-buildflags (although in practice
    it changes nothing because relro is disabled)
  * debian/control*:
    - Force build and runtime dependency on libsqlite3-0 >= 3.7.12-1~ for a
      right value of SQLITE_MAX_SCHEMA_RETRY and SQLITE_MAX_DEFAULT_PAGE_SIZE.
    - Suggest fonts-lyx. Closes: #673222.
    - Make xulrunner-dbg depend on nspr and nss debug packages.
  * debian/xulrunner-GRE_VERSION.links.in,
    debian/xulrunner-GRE_VERSION.install.in: Move omni.ja to
    /usr/lib/xulrunner-x.0 because it contains arch-depend data.
  * debian/xulrunner.mozconfig: Use system cairo again.

  * gfx/thebes/gfxPlatform.cpp: Make system cairo work again. bz#722975.

 -- Mike Hommey <glandium@debian.org>  Thu, 17 May 2012 11:59:46 +0200

iceweasel (12.0-6) experimental; urgency=low

  * ipc/chromium/src/base/file_util_linux.cc,
    ipc/chromium/src/base/message_pump_libevent.cc,
    ipc/chromium/src/base/time_posix.cc: gcc 4.7 build failures (missing
    headers). bz#725655.
  * layout/base/tests/TestPoisonArea.cpp: fix build failures with Clang and
    GCC 4.7 in TestPoisonArea.cpp. bz#734490.

 -- Mike Hommey <glandium@debian.org>  Fri, 11 May 2012 19:09:23 +0200

iceweasel (12.0-5) experimental; urgency=low

  * debian/xulrunner-GRE_VERSION.1.in: Fix xulrunner-x.y manual page to say
    XULRunner instead of Iceweasel.

  * gfx/skia/include/core/SkMath.h, gfx/skia/include/core/SkPostConfig.h,
    gfx/skia/src/opts/SkBitmapProcState_opts_arm.cpp,
    gfx/skia/src/opts/SkBlitRow_opts_arm.cpp: Fixup for bz#751814, and
    refreshed as sent upstream. Should fix FTBFS on armel and armhf.

 -- Mike Hommey <glandium@debian.org>  Fri, 11 May 2012 10:46:18 +0200

iceweasel (12.0-4) experimental; urgency=low

  * memory/jemalloc/jemalloc.c: Don't hardcode page size on sparc.
  * gfx/skia/include/core/SkPreConfig.h: Fixup for bz#749533 for Hurd.
  * gfx/skia/src/opts/SkBitmapProcState_opts_arm.cpp,
  * gfx/skia/src/opts/SkBlitRow_opts_arm.cpp: Various Skia fixes for ARMv4T
    and ARMv6+. bz#751814.
  * js/src/Makefile.in, js/src/assembler/jit/ExecutableAllocator.h,
    js/src/jsapi.cpp, js/src/jscntxt.cpp, js/src/jscntxt.h: Refresh to use
    the last version of bz#691898 + some cleanup.

 -- Mike Hommey <glandium@debian.org>  Fri, 04 May 2012 09:11:59 +0200

iceweasel (12.0-3) experimental; urgency=low

  * ipc/chromium/src/base/atomicops_internals_mips_gcc.h: Import
    atomicops_internals_mips_gcc.h from protobuf. bz#749530.
  * gfx/skia/include/core/SkPreConfig.h: Add support for GNU/kFreeBSD and Hurd
    in SKIA. bz#749533.
  * browser/locales/en-US/searchplugins/google.xml: Fix Google search plugin.

 -- Mike Hommey <glandium@debian.org>  Fri, 27 Apr 2012 08:47:34 +0200

iceweasel (12.0-2) experimental; urgency=low

  * js/src/jsapi.cpp: Fixup for bz691898. Should fix FTBFSes.

 -- Mike Hommey <glandium@debian.org>  Thu, 26 Apr 2012 20:28:58 +0200

iceweasel (12.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-{20,22-24,26-33}, also known as
    CVE-2012-0467, CVE-2012-0468, CVE-2012-0469, CVE-2012-0470,
    CVE-2012-0471, CVE-2012-0473, CVE-2012-0474, CVE-2012-0475,
    CVE-2012-0477, CVE-2012-0478, CVE-2011-3062, CVE-2011-1187,
    CVE-2012-0479.

  * debian/control*: Bump libsqlite3-dev build dependency.
  * debian/xulrunner.mozconfig: Use in-tree cairo until things settle down
    for bz#722975.
  * debian/rules:
    - Remove update-settings.ini.
    - Remove MOZ_PHOENIX define, it's not useful anymore.
  * debian/make.mk, debian/rules, debian/upstream.mk: Avoid spawning shells
    from debian/rules when possible.
  * debian/rules, debian/control*:
    - Remove special case for Lenny, it's not supported anymore.
    - Build with hardening flags. Closes: #609975.
  * debian/iceweasel.mozconfig, debian/rules: Move --with-branding option to
    debian/rules.
  * debian/control, debian/l10n, debian/rules: Simplify l10n control
    generation.

  * memory/jemalloc/jemalloc.c: Fix jemalloc mmap wrapper for s390. bz#747322.
    Closes: #667901.
  * toolkit/components/search/nsSearchService.js: Handle transition to
    /etc/<appname>/searchplugins more gracefully. Closes: #666675.
  * js/xpconnect/src/xpcprivate.h: Properly align XPCLazyCallContext::mData.
    bz#747870. Closes: #669905.
  * config/Preprocessor.py, config/tests/unit-Preprocessor.py,
    js/src/config/Preprocessor.py: Use filters in #defines and #includes.
    bz#508942.

 -- Mike Hommey <glandium@debian.org>  Tue, 24 Apr 2012 08:21:07 +0200

iceweasel (11.0-4) experimental; urgency=low

  * debian/branding/content/Makefile.in: Work around imagemagick svg support
    broken by latest librsvg2-bin.
  * debian/vendor.js: Default to en-US searchplugins when locale's aren't
    found. Closes: #665817.
  * debian/iceweasel.links.in, debian/iceweasel.preinst: Don't create
    /usr/lib/iceweasel/distribution/searchplugins symlink.
  * debian/extra-stuff/addonsInfo.js: Synchronously get addons list.
  * debian/branding/aboutIce.js: Use Services.jsm in aboutIce.js.

  * browser/components/dirprovider/DirectoryProvider.cpp: Load distribution
    search plugins from /etc/<appname>/searchplugins.

 -- Mike Hommey <glandium@debian.org>  Fri, 30 Mar 2012 19:22:56 +0200

iceweasel (11.0-3) experimental; urgency=low

  * debian/extra-stuff/addonsInfo.js: Remove debugging info from
    dump-addons-info output, and avoid failure on addons that don't have the
    getResourceURI method (like personas).
  * debian/duckduckgo.xml: Add t=debian to duckduckgo query url.
  * debian/iceweasel.install, debian/iceweasel.links.in,
    debian/iceweasel.preinst, debian/rules: Move search plugins under
    /etc/iceweasel. Closes: #632698.
  * debian/l10n/recommends: Recommend xul-ext-mozvoikko instead of myspell-fi
    for -l10n-fi. Closes: #635361.

  * memory/jemalloc/jemalloc.c: Don't hardcode page size on ia64.

 -- Mike Hommey <glandium@debian.org>  Fri, 23 Mar 2012 13:22:46 +0100

iceweasel (11.0-2) experimental; urgency=low

  * toolkit/library/Makefile.in: Fixup bz#734335 backport. Should fix all
    FTBFSes.

 -- Mike Hommey <glandium@debian.org>  Fri, 16 Mar 2012 08:35:43 +0100

iceweasel (11.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-{12-19}, also known as
    CVE-2012-0454, CVE-2012-0455, CVE-2012-0456, CVE-2012-0457,
    CVE-2012-0451, CVE-2012-0458, CVE-2012-0459, CVE-2012-0460,
    CVE-2012-0461, CVE-2012-0462, CVE-2012-0464.
  * debian/source.filter: Adjusted to upstream changes.
  * debian/rules:
    - Work around make-makefile brokenness.
    - Define MOZ_PHOENIX when building. Tab closing animation end fails
      because of some telemetry items that aren't defined in xulrunner,
      because they are enclosed in an ifdef MOZ_PHOENIX.
  * debian/l10n/*, debian/control: Refreshed.
  * debian/xulrunner-GRE_VERSION.install.in: update.locale is now in omni.ja.
  * debian/control*:
    - Bump build dependency on libnss3-dev and libnspr4-dev.
    - Remove forced version-dependency on libnss3-1d.
  * debian/dh/dh_xulrunner.in: Adjust to upstream changes.
  * debian/check_resources.overrides: Ignore Webapps.jsm import from apps.js.

  * toolkit/system/gnome/nsGSettingsService.cpp: Define
    G_VARIANT_TYPE_STRING_ARRAY when building against older glib. bz#710972.
  * netwerk/protocol/http/HttpChannelParent.*: Revert investigation patch for
    bz#621446, which triggers an ICE on gcc 4.4.
  * configure.in, toolkit/library/nsStaticXULComponents.cpp,
    tools/profiler/Makefile.in, tools/profiler/sampler.h: Only build SPS on
    supported platforms. bz#734335.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Mar 2012 10:28:21 +0100

iceweasel (10.0.3esr-1) unstable; urgency=low

  * New upstream release.
    - Avoid crashing when there are no GL extensions reported by the GL
      implementation. bz#728656. Closes: #656611.
  * Fixes for mfsa2012-{12-19}, also known as
    CVE-2012-0454, CVE-2012-0455, CVE-2012-0456, CVE-2012-0457,
    CVE-2012-0451, CVE-2012-0458, CVE-2012-0459, CVE-2012-0460,
    CVE-2012-0461, CVE-2012-0462, CVE-2012-0464.
  * debian/control, debian/l10n/*, debian/rules: Modify the way we use
    isoquery to get a language name out of iso 639 codes.
  * debian/upstream.mk:
    - Better detect beta version given for download.
    - Allow to use with iceape and icedove.
    - Support download ESR releases.
  * debian/iceweasel-runner, debian/iceweasel.1,
    debian/iceweasel.README.Debian, debian/iceweasel.install,
    debian/iceweaselrc: Remove dsp wrapper glue.
  * debian/rules, debian/iceweasel.install, debian/iceweasel.links.in:
    Localize search plugins.
  * debian/upstream.mk, debian/repack.py, debian/l10n.filter: Filter l10n
    upstream tarballs such that they stay the same when there are no changes
    besides tags.
  * debian/rules: Don't sign NSS libraries, as this is done as part of libnss3
    build process.

  * storage/src/mozStorageService.cpp: Don't crash an app using libxul because
    of the lack of je_malloc_usable_size_in_advance. bz#720682. Closes: #660487.
  * widget/src/xpwidgets/GfxInfoX11.*:
    - Block OpenGL 1 drivers explicitly to steer clear of crashes. bz#696636.
    - Block the Nouveau 3D driver with Mesa < 8.0.1. bz#729817.
  * browser/components/dirprovider/DirectoryProvider.cpp: Try getting
    general.useragent.locale as a complex value first. bz#515232.
  * xpcom/glue/standalone/nsGlueLinkingDlopen.cpp: Avoid confusing gdb by
    dependent libs being symbolic links.

 -- Mike Hommey <glandium@debian.org>  Wed, 14 Mar 2012 08:57:15 +0100

iceweasel (10.0.2-1) unstable; urgency=low

  * New upstream release. Addresses CVE-2011-3026.
  * debian/import-tar.py: Allow to import multi-tarball sources.
  * debian/rules: Install js/*.h in /usr/include/mozjs/. Closes: #658315.
  * debian/xulrunner.mozconfig, debian/control*: Build against system
    python-ply.
  * debian/control*: Build conflict with liboss4-salsa-dev.

  * xpcom/typelib/xpidl/Makefile.in: Ship xpidllex.py and xpidlyacc.py.
    bz#723861.
  * config/autoconf.mk.in, configure.in, xpcom/idl-parser/Makefile.in,
    xpcom/typelib/xpidl/Makefile.in: Allow to build with system python ply
    library. bz#728229.
  * browser/app/profile/firefox.js: Don't auto-disable extensions in system
    directories. Closes: #656378 and friends.

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Feb 2012 18:40:48 +0100

iceweasel (10.0.1-1) unstable; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-10, also known as CVE-2012-0452.

 -- Mike Hommey <glandium@debian.org>  Sat, 11 Feb 2012 08:26:28 +0100

iceweasel (10.0-3) unstable; urgency=low

  * debian/upstream.mk: Add rule to download compare-locales for a given
    release.
  * debian/rules: Build locales from build-browser only, and use
    compare-locales to merge them with en-US for non-existing strings.

  * browser/locales/Makefile.in, toolkit/locales/Makefile.in: Revert previous
    patch.
  * browser/makefiles.sh: Add toolkit l10n Makefiles to browser/makefiles.sh.
    bz#721737.

 -- Mike Hommey <glandium@debian.org>  Fri, 10 Feb 2012 08:32:58 +0100

iceweasel (10.0-2) unstable; urgency=low

  * debian/control*: Bump libvpx-dev build dependency to 1.0.0.
  * configure.in: Fix FTBFS with libvpx 1.0.0.

 -- Mike Hommey <glandium@debian.org>  Sun, 05 Feb 2012 11:29:51 +0100

iceweasel (10.0-1) unstable; urgency=low

  * New upstream release.
  * Fixes for mfsa2012-{01-09}, also known as
    CVE-2012-0442, CVE-2012-0443, CVE-2011-3670, CVE-2012-0445,
    CVE-2011-3659, CVE-2012-0446, CVE-2012-0447, CVE-2012-0444,
    CVE-2012-0449, CVE-2012-0450.

  * debian/iceweasel.postinst: Remove /usr/lib/iceweasel/.autoreg on upgrade.
    Closes: #648541.
  * debian/source.filter: The PNG test suite moved.
  * debian/xulrunner-GRE_VERSION.{links,install}.in: Hyphenation
    dictionaries moved inside omni.jar.
  * debian/control*: Bump libvpx-dev build dependency.
  * debian/xulrunner-GRE_VERSION.*.in: Omni.jar was renamed omni.ja.
  * debian/upstream.mk: Use a separate variable for download version.
  * debian/rules: Call configure directly for build-browser, instead of
    using dh_auto_configure. Closes: #656313.
  * debian/upstream.mk: Add rules to download l10n sources.
  * debian/rules, debian/control*, debian/l10n,
    debian/branding/locales/Makefile.in: Add rules to build l10n packages.

  * js/src/Makefile.in, js/src/vm/RegExpObject*, js/src/yarr/wtfbridge.h:
    Use YARR interpreter instead of PCRE on platforms where YARR JIT is
    not supported. bz#691898.
  * browser/locales/Makefile.in, toolkit/locales/Makefile.in: Don't
    build some toolkit l10n from browser/.
  * l10n-ru/browser/chrome/browser-region/region.properties: Place google
    and gmail before yandex. (imported from iceweasel-l10n)

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Feb 2012 14:13:16 +0100

iceweasel (9.0.1-1) unstable; urgency=low

  * New upstream release.
  * debian/control*: Force xulrunner to depend on libnss3-1d >= 3.13.1.
    It doesn't require symbols from versions that new, but it actually
    requires some new flags being supported.

 -- Mike Hommey <glandium@debian.org>  Thu, 22 Dec 2011 09:00:09 +0100

iceweasel (9.0-1) unstable; urgency=low

  * New upstream release.
  * Fixes for mfsa2011-{53-56,58}, also known as
    CVE-2011-3660, CVE-2011-3661, CVE-2011-3658, CVE-2011-3663,
    CVE-2011-3665.

  * debian/test.mk: Remove hashbang.
  * debian/control*:
    - Build dependency on libidl-dev is not required anymore.
    - Bump libsqlite3-dev build dependency.
    - Bump libnss3-dev build dependency.
  * debian/xulrunner-dev.install.in: Adapt to upstream changes.
  * debian/check_resources.*, debian/rules: Check that resources:// urls are
    appropriately used.

  * build/unix/gnu-ld-scripts/jemalloc-standalone-linkage-version-script:
    Revert previous patch, the file is not used anymore.
  * browser/devtools/highlighter/TreePanel.jsm: Use resource:// urls
    appropriately. bz#703633.
  * js/src/methodjit/MethodJIT.cpp: Don't require 16 bytes alignment for
    VMFrame on sparc. bz#698923.
  * ipc/chromium/src/base/dir_reader_posix.h: Fix GNU/non-Linux failure to
    build.
  * js/src/assembler/assembler/ARMAssembler.cpp:
    Fix ARMAssembler::getOp2RegScale on < ARMv5. bz#703531.
  * js/src/jscompartment.cpp: Fix build failure on platforms without YARR JIT.
    bz#703534.
  * js/src/methodjit/TrampolineSparc.s: Avoid R_SPARC_WDISP22 relocation
    in TrampolineSparc.s. bz#703842.
  * js/src/jsgc.cpp: Avoid invalid conversion from 'const size_t*' to
    'const jsuword*' on s390. bz#703833.
  * gfx/angle/src/compiler/osinclude.h: Add support for GNU/kFreeBSD and
    GNU/Hurd. bz#711353.

 -- Mike Hommey <glandium@debian.org>  Tue, 20 Dec 2011 20:05:33 +0100

iceweasel (8.0-3) unstable; urgency=low

  * debian/rules: Don't remove lines beginning with # in preprocessed files.
    Closes: #648143.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Nov 2011 09:05:57 +0100

iceweasel (8.0-2) unstable; urgency=low

  * js/src/vm/String-inl.h: Add missing parts from bz#589735 for 8.0.

 -- Mike Hommey <glandium@debian.org>  Tue, 08 Nov 2011 23:19:35 +0100

iceweasel (8.0-1) unstable; urgency=low

  * New upstream release.
  * Fixes for mfsa2011-{47-52}, also known as
    CVE-2011-3648, CVE-2011-3651, CVE-2011-3652, CVE-2011-3654,
    CVE-2011-3650, CVE-2011-3649, CVE-2011-3653, CVE-2011-3655.

  * debian/*.in, debian/rules: Use @VARIABLE@ instead of ##VARIABLE## for
    preprocessing.
  * debian/rules:
    - Use Preprocessor.py instead of sed for preprocessing.
    - Application.ini tweaks for version aren't needed anymore.
    - Add some dependencies to regenerate debian/control.
    - Force MOZ_APP_BASE_VERSION to GRE_VERSION.
  * debian/iceweasel.install, debian/rules, debian/test.mk: Build iceweasel
    in build-browser/ instead of build-iceweasel/.
  * debian/import-tar.py: Add a tool that dumps a tar as a git fast-import
    stream.
  * debian/rules, debian/control.in, debian/xulrunner-GRE_VERSION.links.in:
    Rename SO_VERSION variable to JS_SO_VERSION and use the first digit of
    GRE_VERSION to generate it.
  * debian/noinstall.in: README.txt is not shipped anymore.
  * debian/rules: Disable methodjit on sparc because of bz#698911.

  * configure*: Disable dead symbol removal when failing to test for bz#670659.
    bz#690682.
  * js/src/jsscan.cpp: Properly handle EOF in TokenStream::getAtSourceMappingURL
    on platforms with unsigned chars. bz#686283.
  * js/src/assembler/assembler/ARMAssembler.h: LDRH/STRH/LDRSB/STRSB are
    supported on ARMv5-. bz#694533.
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_s390.cpp: Reimplement
    NS_InvokeByIndex in C on S390 Linux. This will fix FTBFS on S390.
  * config/config.mk, config/rules.mk, js/src/config/config.mk,
    js/src/config/rules.mk: (Statically) link jemalloc to all programs. This
    will solve FTBFS on ia64, and fits what is done in 9.0.
  * browser/devtools/webconsole/HUDService.jsm,
    browser/devtools/webconsole/test/browser/browser_webconsole_bug_651501_document_body_autocomplete.js,
    browser/devtools/webconsole/test/browser/head.js: HUDService uses some
    resource://gre/ urls that ought to be resource:///. bz#682217.
    Closes: #638772.
  * build/unix/gnu-ld-scripts/jemalloc-standalone-linkage-version-script:
    Export the _IO_stdin_used symbol. bz#699734. This will fix FTBFS on
    sparc.
  * testing/xpcshell/runxpcshelltests.py: Read xpcshell process' stdout one
    character at a time.

 -- Mike Hommey <glandium@debian.org>  Tue, 08 Nov 2011 20:04:06 +0100

iceweasel (7.0.1-4) unstable; urgency=low

  * xpcom/base/nscore.h, xpcom/glue/nsID.h: Don't force nsID to align to
    64-bit boundary ; instead, use 32-bits comparisons in nsID::Equals,
    effectively reverting bz#164580. Closes: #645371.

 -- Mike Hommey <glandium@debian.org>  Sat, 15 Oct 2011 09:44:32 +0200

iceweasel (7.0.1-3) unstable; urgency=low

  * debian/branding/configure.sh: Set MOZ_APP_DISPLAYNAME in Iceweasel
    branding. Closes: #644801.
  * debian/xulrunner.mozconfig, debian/xulrunner-GRE_VERSION.install.in,
    debian/rules: Enable GIO instead of gnome-vfs and GConf.
    Partially fixes #410671.

  * ipc/chromium/src/build/build_config.h: Update supported architectures
    for IPC, as landed upstream. Closes: #644939.
  * xpcom/base/nscore.h, xpcom/glue/nsID.h: Force nsID to align to 64-bit
    boundary. bz#660335. Closes: #642762.

 -- Mike Hommey <glandium@debian.org>  Fri, 14 Oct 2011 17:22:42 +0200

iceweasel (7.0.1-2) unstable; urgency=low

  * debian/repack.py: Improved in several ways.
  * debian/rules: Install vm/* headers under /usr/include/mozjs.
    Closes: #644086.

 -- Mike Hommey <glandium@debian.org>  Tue, 04 Oct 2011 08:32:20 +0200

iceweasel (7.0.1-1) unstable; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 30 Sep 2011 08:32:09 +0200

iceweasel (7.0-1) unstable; urgency=low

  * New upstream release.
  * Fixes various security issues, which CVE ids are not published yet.

  * debian/branding/Makefile.in, debian/iceweasel.install: Remove document.png,
    as it is not used anymore.
  * debian/branding/content/Makefile.in, debian/branding/content/jar.mn: Stop
    jarring up a copy of mozicon128.png that aboutHome no longer uses.
  * debian/rules: Don't remove /usr/lib/xulrunner-7.0/libmozjs.so*, they're not
    installed there anymore.
  * debian/iceweasel.mozconfig: Add --disable-libjpeg-turbo to work around
    configure checking for yasm on APP build.

  * js/src/Makefile.in: Only add -DENABLE_JIT=1 to CXXFLAGS if any of
    trace/method/regex jit is enabled. bz#670719. Fixes FTBFSes on
    powerpc and s390.
  * js/src/jsregexpinlines.h, js/src/yarr/OSAllocatorPosix.cpp,
    js/src/yarr/wtfbridge.h: build fix for ENABLE_YARR_JIT=0. bz#665819.
  * xpcom/glue/pldhash.c: Work around recent ARM GNU ld bug with
    -fdata-sections and variables names starting with "stub" leading to crash.
    bz#675618. Also avoids elfhack crash during build.
  * js/src/assembler/wtf/Platform.h: Don't enable YARR JIT on MIPS, as the
    implementation is missing. bz#680642.
  * js/src/yarr/BumpPointerAllocator.h: Use a pool size of 16kB on ia64 for
    bump pointer allocator. bz#680917.

 -- Mike Hommey <glandium@debian.org>  Wed, 28 Sep 2011 08:51:02 +0200

iceweasel (6.0.2-1) unstable; urgency=medium

  * New upstream release to strengthen the libnss3 response to the
    DigiNotargate.

 -- Mike Hommey <glandium@debian.org>  Tue, 06 Sep 2011 08:32:55 +0200

iceweasel (6.0-4) unstable; urgency=low

  * js/src/jsstrinlines.h: Fix-up bz#589735 backport. Should fix ia64 FTBFS.

 -- Mike Hommey <glandium@debian.org>  Sat, 27 Aug 2011 09:07:06 +0200

iceweasel (6.0-3) unstable; urgency=low

  * debian/libmozjs-dev.install: Add more missing headers to libmozjs-dev.
  * debian/rules, debian/xulrunner-GRE_VERSION.install.in: Install
    plugin-container on all architectures. Closes: #639289.
  * debian/extra-stuff/reportbug-helper-script: Avoid listing all debian
    packages in the reportbug helper when no addons are installed.
  * debian/duckduckgo.xml, debian/iceweasel.install: Add DuckDuckGo search
    plugin. Closes: #616115.

  * js/src/jsgcinlines.h, js/src/jsnum.cpp, js/src/jsstr.cpp, js/src/jsstr.h,
    js/src/jsstrinlines.h, js/src/jstracer.cpp, js/src/jstracer.h,
    js/src/tracejit/Writer.cpp: Allow static JS strings to be turned off;
    turn off on ia64. bz#589735.
  * memory/jemalloc/jemalloc.c: Allocate memory with an address with high 17
    bits clear on ia64. bz#589735. This should finally make Iceweasel
    actually work on ia64.
  * js/src/jsval.h, js/src/jsvalue.h: Fix jsval_layout on 64-bit big-endian
    platforms. bz#674522. Closes: #638623.

 -- Mike Hommey <glandium@debian.org>  Fri, 26 Aug 2011 09:48:52 +0200

iceweasel (6.0-2) unstable; urgency=low

  * debian/libmozjs-dev.install: Install mfbt/* files under
    /usr/include/mozjs/mozilla. Closes: #637984.

 -- Mike Hommey <glandium@debian.org>  Sat, 20 Aug 2011 09:13:06 +0200

iceweasel (6.0-1) unstable; urgency=low

  * New upstream release.
  * Fixes for mfsa2011-29, including:
    CVE-2011-2989, CVE-2011-2991, CVE-2011-2992, CVE-2011-2985,
    CVE-2011-2993, CVE-2011-2988, CVE-2011-2987, CVE-2011-0084,
    CVE-2011-2990, CVE-2011-2986.
  * debian/control*:
    - Bump build dependency on nspr, nss and sqlite.
    - Build-depend on libjpeg-dev instead of libjpeg62-dev. Closes: #636452.
    - Remove xprint suggest. Closes: #626794.
  * debian/rules:
    - Official branding moved to browser/branding/official.
    - Don't set -std=gnu++0x ourselves, upstream build system now does it for
      us.
    - Remove libmozjs.so* from /usr/lib/xulrunner-6.0.
    - Link npapi_getinfo against libpthread for GNU/Hurd.
  * debian/installer/package-manifest.xulrunner,
    debian/xulrunner-dev.install.in: Install xpt.py from sdk instead of xpt_*
    from /usr/lib/xulrunner-6.0.
  * debian/xulrunner-GRE_VERSION.install.in,
    debian/xulrunner-GRE_VERSION.links.in: Add hyphenation dictionary. This is
    temporary until we use libreoffice.org's.
  * debian/iceweasel.desktop: Add german translation for the Iceweasel menu
    item. Thanks Ronny Standtke. Closes: #629924.

  * layout/build/Makefile.in, toolkit/library/Makefile.in: Unbreak build for
    GNU/Hurd and GNU/kFreeBSD (since they don't have libossaudio). bz#673460.
  * ipc/chromium/src/base/debug_util_posix.cc,
    ipc/chromium/src/base/third_party/nspr/prcpucfg.h,
    ipc/chromium/src/build/build_config.h: Allow ipc code to build on GNU/Hurd.
    Closes: #636750.
  * configure*: Revert "Allow to build against SQLite 3.7.3".

 -- Mike Hommey <glandium@debian.org>  Mon, 15 Aug 2011 18:16:55 +0200

iceweasel (5.0-6) unstable; urgency=low

  * debian/rules: ia64 doesn't support stabs debugging information, so use a
    different workaround: use -O2 instead of -Os.

 -- Mike Hommey <glandium@debian.org>  Sat, 30 Jul 2011 10:31:55 +0200

iceweasel (5.0-5) unstable; urgency=low

  * debian/rules:
    - Don't add -g to CFLAGS, the upstream build system does it.
    - Use -gstabs on ia64, to work around ICE.
  * xpcom/base/nsDebugImpl.cpp: Refresh with the patch from bz#643779 as
    landed updstream. Closes: #635957.

 -- Mike Hommey <glandium@debian.org>  Sat, 30 Jul 2011 08:48:19 +0200

iceweasel (5.0-4) unstable; urgency=low

  * debian/rules: Don't create a versioned shlibs for libmozjs.
  * debian/xulrunner-dev.preinst.in: Add a preinst script to remove
    /usr/lib/xulrunner-devel-GRE_VERSION/sdk/bin before upgrading from versions
    <= 5.0-2. Closes: #634053.
  * debian/control*:
    - Use linux-any wildcard for libasound2-dev and libiw-dev Build-Depends
      instead of using a list of negated architectures. Closes: #634629.
    - Adjust some package descriptions. Closes: #633597.
    - Bump Standards-Version to 3.9.2.0. No changes required.
  * debian/extra-stuff/addonsInfo.js: Fix the addons info dumper to use the new
    Addons Manager API. Closes: #603412.
  * debian/xulrunner-GRE_VERSION.postinst.in,
    debian/xulrunner-GRE_VERSION.prerm.in: Remove the xulrunner-stub
    alternative. The reason why it was good to have in /usr/bin doesn't exist
    anymore.
  * debian/xulrunner-GRE_VERSION.postinst.in: Don't cleanup {compreg,xpti}.dat.
    They've not been generated for a while.

  * js/src/xpconnect/shell/xpcshell.cpp: Fixup for bz#671804.
  * configure*: Revert "Put the crmf library before the NSS libraries".

 -- Mike Hommey <glandium@debian.org>  Fri, 22 Jul 2011 15:48:09 +0200

iceweasel (5.0-3) unstable; urgency=low

  * Upload to unstable.
  * debian/control*: Fix build dependency on libsqlite3-dev.
  * debian/rules:
    - Replace sdk/bin files also in /usr/lib/xulrunner-5.0 with symbolic links.
    - Use dist/include to find npapi.h when building npapi_getinfo.
  * debian/control*, debian/rules: Use ${binary:Version} for iceweasel
    dependency on xulrunner, now that they have the same version.
  * debian/test.mk:
    - Set the application directory for xpcshell tests.
    - Set plugin path for all tests.
  * debian/control*: Add a build dependency on ttf-dejima-mincho to avoid
    reftest failure due to the lack of japanese font.
  * debian/xulrunner-GRE_VERSION.lintian-overrides.in: Add a temporary lintian
    override for libtheora embedding.

  * js/src/Makefile.in: Fix namespace exporting.
  * toolkit/mozapps/installer/packager.mk: Install sdk/bin with make install.
    bz#639554.
  * config/autoconf.mk.in: Use the first two digits of the version number for
    the install directory. bz#445128.
  * xulrunner/installer/Makefile.in: Revert previous change for the version
    number here, it concerns something that isn't built anymore and will go
    away.
  * embedding/android/GeckoAppShell.java, ipc/glue/GeckoChildProcessHost.cpp,
    other-licenses/android/APKOpen.cpp, toolkit/xre/nsAppRunner.cpp,
    toolkit/xre/nsEmbedFunctions.cpp, xpcom/build/Omnijar.*,
    xpcom/build/nsXPComInit.cpp: Updated part 3 of bz#620931.
  * js/src/xpconnect/shell/xpcshell.cpp: Add a -a option to xpcshell to set
    an application directory. bz#620931 (part 6)
  * browser/installer/Makefile.in, browser/installer/precompile_cache.js:
    Make startup cache generation work better with new omni.jar handling.
    bz#620931 (part 7)
  * toolkit/components/places/tests/unit/test_database_replaceOnStartup.js:
    Don't modify in-tree default.sqlite. bz#666709, bz#668906.
  * storage/src/mozStorageService.cpp,
    storage/test/unit/test_storage_service.js: Add a safeguard to
    openUnsharedDatabase. bz#668906.
  * toolkit/mozapps/downloads/tests/unit/test_DownloadUtils.js: Fix with
    locales with a different decimal separator. bz#671533.
  * xpcom/build/nsXPComInit.cpp: Initialize NS_XPCOM_LIBRARY_FILE from
    NS_GRE_DIR. bz#671564.
  * testing/xpcshell/runxpcshelltests.py: Allow to pass an application
    directory to xpcshell tests. bz#671562.
  * modules/plugin/test/unit/head_plugins.js, netwerk/test/unit/test_socks.js,
    toolkit/mozapps/extensions/test/xpcshell/test_plugins.js: Fix some tests
    using CurProcD where GreD should be used.
  * xpcom/tests/unit/test_iniProcessor.js: Cleanup temporary files from
    test_iniProcessor.js. bz#671570.
  * modules/libpref/test/unit/test_libPrefs.js: Cleanup temporary files from
    test_libPrefs.js. bz#671576. Together with bz#671570 and bz#666709 above,
    Closes: #632890.
  * toolkit/mozapps/extensions/test/xpcshell/test_update.js: Don't hardcode
    en-US in test_update.js. bz#671631.
  * modules/libpref/src/nsPrefService.cpp: Always load $gre/defaults/pref
    prefs. bz#671798.
  * js/src/xpconnect/shell/xpcshell.cpp: Provide NS_APP_PREF_DEFAULTS_50_DIR
    and NS_APP_PREFS_DEFAULTS_DIR_LIST in xpcshell dir provider. bz#671804.

 -- Mike Hommey <glandium@debian.org>  Fri, 15 Jul 2011 12:04:39 +0200

iceweasel (5.0-2) experimental; urgency=low

  * debian/rules: Fix configure permissions for source tarballs generated from
    mercurial.
  * debian/test.mk: Create a xulrunner symbolic link in
    build-iceweasel/dist/bin so that reftests work.
  * debian/watch: Always get the latest release.

  * js/src/nanojit/njconfig.cpp: Allow ARMv4T in nanojit.
  * ipc/chromium/src/base/platform_thread_posix.cc,
    ipc/chromium/src/base/third_party/nspr/prcpucfg.h,
    ipc/chromium/src/build/build_config.h: Allow ipc code to build on
    GNU/kfreebsd. Closes: #626314.

 -- Mike Hommey <glandium@debian.org>  Fri, 01 Jul 2011 14:43:39 +0200

iceweasel (5.0-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2011-{09,19-22,25-28}, also known as
    CVE-2011-0061, CVE-2011-2374, CVE-2011-2375, CVE-2011-2373,
    CVE-2011-2372, CVE-2011-2371, CVE-2011-2366, CVE-2011-2367,
    CVE-2011-2368, CVE-2011-2369, CVE-2011-2370.

  * debian/xulrunner-GRE_VERSION.install.in: /etc/gre.d is not used anymore.
  * debian/branding/content/aboutDialog.css, debian/branding/content/jar.mn:
    Updated branding.
  * debian/rules: xulrunner and iceweasel now have the same version.
  * debian/dh/dh_xulrunner.in: Modify the strings we try to find in the xpcom
    standalone glue.

  * other-licenses/bsdiff/Makefile.in: Fix bsdiff build failure with system
    bzip2. bz#644692.
  * layout/base/nsDocumentViewer.cpp: Use an integer type in
    DocumentViewerImpl::SetMinFontSize, instead of float. bz#652139.
  * browser/base/content/aboutDialog.*,
    browser/branding/*/content/aboutDialog.css
    browser/branding/*/content/jar.mn,
    other-licenses/branding/firefox/content/aboutDialog.css,
    other-licenses/branding/firefox/content/jar.mn: Move some parts of
    aboutDialog.css into branding. bz#652306.
  * configure.*: Disable building embedded libjpeg-turbo when building with
    system libjpeg. bz#652399.

 -- Mike Hommey <glandium@debian.org>  Mon, 20 Jun 2011 17:17:04 +0900

iceweasel (4.0.1-4) experimental; urgency=low

  * The 'I meant that to be in previous release but forgot' release.
  * xulrunner/installer/Makefile.in: Add -lmozalloc in link flags provided in
    libxul.pc. bz#662223.
  * memory/mozalloc/mozalloc.h, memory/mozalloc/Makefile.in,
    xpcom/xpcom-config.h.in: Define NS_ATTR_MALLOC and NS_WARN_UNUSED_RESULT
    in xpcom-config.h, and include it from mozalloc.h. bz#662224.

 -- Mike Hommey <glandium@debian.org>  Mon, 20 Jun 2011 15:29:09 +0900

iceweasel (4.0.1-3) experimental; urgency=low

  * debian/installer/Makefile.in: Remove MOZ_IPC ifdef, it's not strictly
    required, and won't be defined anymore in 5.0.
  * debian/rules:
    - Use official branding as reference when comparing to ours.
    - Construct GRE_VERSION from the first two digits in GRE_MILESTONE.
    - Handle build id from the debian version number.
    - Handle UPSTREAM_RELEASE correctly for beta releases.
    - Set MOZ_UA_BUILDID on betas and releases.

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Jun 2011 11:39:56 +0900

iceweasel (4.0.1-2) experimental; urgency=low

  * xpcom/base/nsDebugImpl.h, xpcom/base/nsTraceRefcntImpl.h,
    xpcom/glue/nsEnumeratorUtils.cpp, xpcom/io/nsUnicharInputStream.h,
    intl/unicharutil/util/nsUnicharUtils.h, toolkit/xre/nsAppRunner.cpp,
    embedding/browser/gtk/src/EmbedPrivate.cpp: Add missing constructors
    according to 8.5 [dcl.init], para 9 in C++03, para 6 in C++0x,
    because gcc 4.6 enforces it.
  * ipc/chromium/src/chrome/common/ipc_message_utils.h: Fix for s390, where
    size_t is unsigned long.

  * debian/copyright: Updated to fit the replacement of the remove.nonfree
    script. Closes: #624587.

 -- Mike Hommey <glandium@debian.org>  Sat, 30 Apr 2011 19:29:34 +0200

iceweasel (4.0.1-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2011-{12,17-18}, also known as
    CVE-2011-0079, CVE-2011-0081, CVE-2011-0069, CVE-2011-0070,
    CVE-2011-0068, CVE-2011-1202.

  * debian/rules, toolkit/components/url-classifier/src/Makefile.in:
    Remove alpha specific thungs because it is unsure they still have any
    positive effect, and alpha has many other problems that would need fixing
    if porters care.

  * modules/libpr0n/encoders/png/nsPNGEncoder.cpp: Now that we use the bundled
    PNG library, revert patch to use png_set_filter to avoid using write
    filters.
  * browser/app/Makefile.in, browser/app/profile/firefox.js,
    browser/components/safebrowsing/Makefile.in,
    browser/components/safebrowsing/content/application.js: Use
    MOZ_OFFICIAL_BRANDING instead of MOZILLA_OFFICIAL to choose the shavar to
    use for safebrowsing.
  * modules/plugin/Makefile.in: Filter by toolkit instead of by OS to decide
    whether to go into modules/plugin/test.
  * xulrunner/app/xulrunner.js: Don't set extensions.dss.enabled at the XRE
    level. It looks like the addons manager bug this would circumventing has
    been fixed since 3.6.
  * modules/plugin/base/src/nsPluginHost.cpp: Simplify MOZILLA_DISABLE_PLUGINS
    environment variable handling.
  * modules/libpr0n/test/reftest/pngsuite-ancillary/reftest.list: Revert what
    was supposed to be a temporary patch.
  * browser/components/build/Makefile.in: Revert our patch to link against
    nspr, this was fixed upstream in a different location.
  * security/manager/ssl/public/Makefile.in,
    security/manager/ssl/public/nsIBadCertListener.idl,
    security/manager/ssl/src/nsNSSIOLayer.*: Embedding as it existed is going
    to go away in 5.0, don't fool ourselves in keeping that any longer.
  * ipc/chromium/src/build/build_config.h: Add mips, hppa, ia64, s390 and sparc
    defines.
  * configure.in, gfx/ycbcr/Makefile.in: Reverted patch to avoid building ARM
    neon code.
  * gfx/ycbcr/yuv_convert_arm.cpp: Allow to build on armv4t.
  * gfx/ycbcr/yuv_convert.cpp: Do runtime detection of NEON in
    ConvertYCbCrToRGB565.
  * xpcom/base/nsDebugImpl.cpp: Fix FTBFS in xpcom/base on armv4t differently.
  * js/src/nanojit/NativeARM.cpp: Force NativeARM.o to have arch armv4t in its
    .ARM.attributes.
  * js/src/jsnum.h, js/src/jsvalue.h: Don't use std::signbit, and replace
    JSDOUBLE_IS_* definitions with bitwise operations. bz#640494.
  * js/src/shell/jsworkers.cpp: Get rid of STL algorithm use. bz#640494.
  * js/src/configure.in: Update to landed version of bz#589744.
  * configure.in, js/src/configure.in: Updated to latest version of bz#626035.

  * debian/rules: Enable IPC on all architectures.

 -- Mike Hommey <glandium@debian.org>  Fri, 29 Apr 2011 08:01:15 +0200

iceweasel (4.0-3) experimental; urgency=low

  * accessible/src/base/TextUpdater.cpp: Fix crash @nsAccessible::AsHyperText()
    bz#643906. Closes: #619637.
  * configure*, gfx/ycbcr/Makefile.in: Avoid building arm neon code. bz#547946.
  * js/src/xpconnect/src/xpcprivate.h,
    js/src/xpconnect/src/xpccallcontext.cpp: Ensure XPCCallContext string
    cache is aligned. bz#634594.
  * gfx/ots/include/opentype-sanitiser.h: strict alignment issues when
    displaying OpenType fonts. bz#643137.

 -- Mike Hommey <glandium@debian.org>  Sun, 27 Mar 2011 14:23:44 +0200

iceweasel (4.0-2) experimental; urgency=low

  * debian/rules: Define __ARM_PCS when building on armel. Fixes FTBFS with
    gcc 4.5 not declaring either __ARM_PCS or __ARM_PCS_VFP.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Mar 2011 15:45:17 +0100

iceweasel (4.0-1) experimental; urgency=low

  * New upstream release. It's actually the same as rc2.

  * debian/rules: Adjust version checking for version 4.0.
  * debian/control: Refreshed.

  * ipc/chromium/Makefile.in: Fix FTBFS in IPC on Linux PPC, part 2.
  * xpcom/base/nsDebugImpl.cpp: Fix FTBFS in xpcom/base on armv4t. bz#643779.

 -- Mike Hommey <glandium@debian.org>  Tue, 22 Mar 2011 21:06:29 +0100

iceweasel (4.0~rc2-2) experimental; urgency=low

  * debian/rules: Actually disable methodjit on armel, instead of all other
    architectures.
  * ipc/chromium/src/build/build_config.h: Fix FTBFS in IPC on Linux PPC.
    bz#643112.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 Mar 2011 11:42:44 +0100

iceweasel (4.0~rc2-1) experimental; urgency=low

  * New upstream release candidate.
  * debian/rules: Modify gross hack on the version checks to make it work with
    RC2, which claims to be final.
  * debian/control*: Include our tee-enabled cairo NMU from mozilla.debian.net
    in build dependencies.
  * debian/rules:
    - Add IPC support for powerpc.
    - Disable methodjit on armel.

  * gfx/layers/basic/BasicImages.cpp: fix bad rendering of video with 16-bits
    displays. bz#640588. Closes: #617475.
  * configure*: Allow to build against SQLite 3.7.3 for backports.
  * js/src/Makefile.in: Avoid "The cacheFlush support is missing on this
    platform" error on alpha, ia64, mips and s390.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 Mar 2011 09:01:30 +0100

iceweasel (4.0~rc1-1) experimental; urgency=low

  * New upstream release candidate.
    - Long link URLs are cropped in the middle instead of at the end.
      Closes: #615853.
  * debian/rules: Gross hack on the version checks to make it work with
    RC, which claims to be final.
  * js/src/jsnum.h, js/src/jsvalue.h: Use std::signbit when using js
    headers in C++. Fixes FTBFS with -std=c++0x, which we use.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 Mar 2011 10:19:52 +0100

iceweasel (4.0~b12-1) experimental; urgency=low

  * New upstream beta release.
    - Properly build documents with overflow:hidden elements. Closes: #562996.
    - window.alert dialogs are not popups any more. Closes: #239105.
    - Upscaling of images uses bilinear filtering. Closes: #596774.
    - Various improvements to the :visited css support to mitigate history
      sniffing. Closes: #560108.
    - Properly render SVG files with flowRoot. Closes: #513885.
    - Fullscreen mode doesn't prevent proper search engine from being used.
      Closes: #514939.
    - Authentication dialogs are not really popups anymore, so focus problems
      with them are fixed. Closes: #609768.
    - Better focus handling with location bar vs. content. Closes: #611354.
    - Various fixes for use with cairo 1.10, which most notably fixes
      animated GIFs. Closes: #589576.
  * debian/rules: Handle beta versions in milestone check.
  * This new version makes use of APNG files in the GUI that can't easily
    be replaced with GIF versions, so we're switching back to the embedded
    libpng library. As a consequence, the APNG related patches were dropped.

  * debian/copyright: Updated, but there are most probably still things
    missing.
  * debian/rules, config/autoconf.mk.in: Bump base version to 2.0.
  * debian/rules:
    - Don't modify application.ini on the beta release.
    - Adjust dh_xulrunner test to match the removal of unixprint plugin.
    - Add new variables for packages lists, as required by
      toolkit/mozapps/installer/packager.mk.
  * debian/control*:
    - Add a build dependency on mesa-common-dev.
    - libmozjs4d doesn't break xulrunner-1.9.2.
    - Build depend on libvpx-dev.
    - Build depend on libnss3-dev >= 3.12.9~beta2.
    - Build depend on libcairo2-dev >= 1.10.2-2~ for tee surfaces.
    - Remove build-dep on libpng12-dev.
  * debian/xulrunner-GRE_VERSION.install.in,
    debian/xulrunner-GRE_VERSION.links.in: Adapt dh_install and dh_link data
    files to new files in built application.
  * debian/symbols.filter, debian/rules: Don't filter libmozjs symbols.
  * debian/libmozjsSO_VERSION.symbols.*, debian/rules: Don't provide a
    symbols file yet.
  * js/src/Makefile.in: Bump libmozjs version.
  * debian/xulrunner.mozconfig:
    - Use internal png library. Works-around: #486827.
    - Use system libvpx.
    - Build with shared js library.
  * debian/iceweasel.mozconfig:
    - Disable webm support to avoid failure to build against libxul. This
      doesn't remove webm support from underlying xulrunner.
    - Build iceweasel without omni.jar until I figure out what to do with the
      default profile.
  * debian/xulrunner-GRE_VERSION.prerm.in,
    debian/xulrunner-GRE_VERSION.postinst.in: Fit to new component
    registration. The new component registration doesn't create compreg.dat
    and xpti.dat anymore, and .autoreg is not used either.
    python-xpcom and other similarly integrated components won't register
    automatically until I either implement something to do so, or these
    components get integrated as extensions.
  * debian/branding:
    - Remove brandTrade entity, we don't need it anymore.
    - browserconfig.properties is now installed in the chrome.
    - branding doesn't use xpcnativewrappers=yes anymore.
    - Add icon16.png and icon128.png to branding. These are required for
      the new about:home.
    - Add missing contentaccessible=yes in content/jar.mn.
    - Modify for the new about dialog.
    - Use about:home as homepage.
  * debian/iceweasel.install, debian/iceweasel.links.in: Don't install
    browserconfig.properties from usr/lib/iceweasel, it's not shipped
    anymore.
  * debian/iceweasel.install:
    - Don't install .autoreg, it isn't used anymore.
  * debian/installer/Makefile.in: Define JAREXT when building package manifest.
  * debian/noinstall.in: LICENSE file is not installed anymore.
  * debian/iceweasel.install, debian/xulrunner-GRE_VERSION.install.in:
    Install chrome.manifest in GRE and APP directories.
  * debian/rules, debian/vendor.js: Set general.useragent.compatMode.firefox
    instead of general.useragent.extra.firefoxComment.
  * debian/rules, debian/iceweasel.install: Install vendor.js with dh_install
    instead of manually in debian/rules.
  * debian/watch: Updated.
  * debian/xulrunner-GRE_VERSION.install.in,
    debian/xulrunner-GRE_VERSION.links.in: Install omni.jar files for
    xulrunner.
  * debian/installer/Makefile.in, debian/installer/package-manifest.browser:
    Properly handle the various MOZ_CHROME_FILE_FORMATs in the package
    manifests.
  * debian/source.filter: Don't remove branding from source tarball, it's
    free as in speech.
  * debian/test.mk:
    - Don't skip but a few xpcshell tests.
    - xpcshell-tests now need a X server.
    - Remove the check-date-format-tofte.js test from its new location.
    - Remove the test_handlerService.js test from its new location.
    - dist/bin/distribution is not needed anymore.

  * js/src/tracejit/Writer.*: "Fix" tracejit to build against nanojit headers
    in dist/include/nanojit.
  * configure.in, configure:
    - Don't take toolkit from the libxul sdk, it's not provided in
      mozilla-config.h anymore.
    - Allow to build against nspr 4.8.6.
  * layout/style/jar.mn, netwerk/protocol/res/nsResProtocolHandler.cpp,
    browser/locales/Makefile.in, ipc/glue/GeckoChildProcessHost.cpp,
    js/src/xpconnect/loader/mozJSComponentLoader.cpp, modules/libjar/nsJAR.cpp,
    modules/libpref/src/nsPrefService.cpp,
    netwerk/protocol/res/nsResProtocolHandler.cpp,
    startupcache/StartupCache.cpp, toolkit/xre/nsAppRunner.cpp,
    toolkit/mozapps/installer/packager.mk, toolkit/xre/nsEmbedFunctions.cpp,
    toolkit/xre/nsXREDirProvider.cpp, xpcom/build/Makefile.in,
    xpcom/build/Omnijar.*, xpcom/build/nsXPComInit.cpp,
    xpcom/components/nsComponentManager.cpp, xulrunner/confvars.sh: Add support
    for omni.jar in xulrunner. bz#620931.
  * configure.in, configure, js/src/configure.in, js/src/configure:
    Don't force build flags upon ARM compilers. bz#626035.
  * js/src/configure.in: Fallback to perf measurement stub when perf_event_open
    syscall isn't supported. bz#589744.
  * config/rules.mk, js/src/config/rules.mk: Remove -ljs_static from test
    linking flags. part of bz#584474.
  * content/base/src/nsWebSocket.cpp: Use chrome://global url instead of
    chrome://browser for websockets errors. bz#636960.
  * toolkit/xre/nsAppRunner.cpp: Restore DESKTOP_STARTUP_ID if a restart is
    required. bz#607900.

 -- Mike Hommey <glandium@debian.org>  Sat, 26 Feb 2011 11:13:10 +0100

iceweasel (3.6.13-3) UNRELEASED; urgency=low

  * debian/branding/locales/en-US/brand.*: Changed vendorShortName to
    Mozilla to fit upstream.
  * debian/branding/Makefile.in, debian/branding/aboutIce.*,
    debian/rules: Prepare aboutIce component to the XPCOM changes in
    Gecko 2.0.
  * debian/extra-stuff/Makefile.in, debian/extra-stuff/addonsInfo.*,
    debian/extra-stuff/packages-static.xulrunner: Prepare extra components
    to the XPCOM changes in Gecko 2.0.
  * debian/iceweasel.install, debian/rules: Install vendor.js with dh_install
    instead of manually in debian/rules.
  * debian/extra-stuff/Makefile.in,
    debian/extra-stuff/packages-static.xulrunner, debian/iceweasel.install,
    debian/installer/Makefile.in, debian/installer/package-manifest.*,
    debian/rules: Use packager.mk to install about:iceweasel files.
  * debian/iceweasel.desktop: Add x-scheme-handler/http* MimeTypes.
    Closes: #613109.

  * browser/components/nsBrowserGlue.js: Unbrand Browser Glue Service.
  * browser/locales/en-US/chrome/overrides/appstrings.properties,
    browser/locales/Makefile.in: Use MOZ_APP_DISPLAYNAME to fill
    appstrings.properties.
  * browser/branding/*/locales/en-US/brand.dtd,
    browser/base/content/credits.xhtml: Use &brandTrade; instead of &trade;.
  * browser/base/content/credits.xhtml, browser/base/Makefile.in:
    Use MOZ_APP_DISPLAYNAME to make credits.xhtml vary depending on branding.
  * browser/locales/en-US/searchplugins/answers.xml,
    browser/locales/en-US/searchplugins/google.xml,
    browser/locales/Makefile.in: Modify search plugins depending on
    MOZ_APP_NAME.
  * browser/app/Makefile.in, browser/app/application.ini, browser/confvars.sh,
    config/autoconf.mk.in, configure.in: Don't hardcode anything in
    application.ini files. bz#525882.
  * browser/components/safebrowsing/content/application.js,
    browser/app/profile/firefox.js: Determine which phishing shavar to use
    depending on MOZ_OFFICIAL.

  * debian/branding/configure.sh, debian/branding/locales/en-US/brand.dtd:
    Adjust Iceweasel branding to unbranding changes above.

 -- Mike Hommey <glandium@debian.org>  Sat, 19 Feb 2011 13:47:22 +0100

iceweasel (3.6.13-2) experimental; urgency=low

  * debian/control: Refresh from debian/control.in.
  * debian/*.mozconfig: Add a comment on top of mozconfig files to avoid
    people using them.
  * debian/remove.nonfree, debian/repack.py, debian/source.filter,
    debian/watch: Update debian/watch and provide a script repacking
    upstream source tarballs.
  * debian/iceweasel.README.Debian: Fix for the default dsp wrapper behaviour.
  * debian/iceweasel.desktop: Add russian translation. Closes: #608876.
    Thanks Alexander Sashanov.
  * debian/control.in, debian/rules, debian/xulrunner-GRE_VERSION.links.in:
    Use /usr/share/myspell/dicts for dictionaries when building for lenny.
    Closes: #609111.
  * debian/extra-stuff/Makefile.in, debian/extra-stuff/debUpdateNotifier.*,
    debian/extra-stuff/filemonitor/,
    debian/extra-stuff/packages-static.xulrunner,
    debian/xulrunner-GRE_VERSION.install.in: Remove update notifier, it's
    not quite as helpful as it should be.
  * debian/control.*:
    - Relax libglib2.0-dev build dependency.  2.18.0 was only needed for
      filemonitor, which we just removed.
    - Add a minimum version for build dependency on libevent-dev, for
      event_base_loopbreak() and event_base_new().

  * testing/xpcshell/runxpcshelltests.py: Add a 2 minutes timeout on xpcshell
    tests.

 -- Mike Hommey <glandium@debian.org>  Sun, 09 Jan 2011 13:46:07 +0100

iceweasel (3.6.13-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2010-{74-84}, also known as
    CVE-2010-3776, CVE-2010-3777, CVE-2010-3769, CVE-2010-3771,
    CVE-2010-3772, CVE-2010-3768, CVE-2010-3775, CVE-2010-3766,
    CVE-2010-3767, CVE-2010-3773, CVE-2010-3774, CVE-2010-3770.
  * debian/copyright: Updated to include gfx/ots.
  * debian/libmozjsSO_VERSION.symbols.in: Add new symbols.

 -- Mike Hommey <glandium@debian.org>  Fri, 10 Dec 2010 00:11:50 +0100

iceweasel (3.6.12-2) experimental; urgency=low

  * layout/base/tests/TestPoisonArea.cpp: Allow TestPoisonArea to work on
    more architectures.
  * layout/base/tests/Makefile.in: Revert previous hack to avoid building and
    running TestPoisonArea.

 -- Mike Hommey <glandium@debian.org>  Sat, 30 Oct 2010 10:46:09 +0200

iceweasel (3.6.12-1) experimental; urgency=low

  * New upstream release.
  * Fix for mfsa2010-73, also known as CVE-2010-3765.

 -- Mike Hommey <glandium@debian.org>  Thu, 28 Oct 2010 09:21:33 +0200

iceweasel (3.6.11-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2010-{64-69}, also known as
    CVE-2010-3176, CVE-2010-3175, CVE-2010-3179, CVE-2010-3180,
    CVE-2010-3183, CVE-2010-3177, CVE-2010-3178.
  * debian/control*: Bump build dependencies on libnspr4-dev, libnss3-dev,
    and libsqlite3-dev to fit what configure will be looking for.

 -- Mike Hommey <glandium@debian.org>  Wed, 20 Oct 2010 02:15:38 +0200

iceweasel (3.6.10-1) experimental; urgency=low

  * New upstream release.
  * config/JarMaker.py: Use errno.ENOENT instead of "2" in JarMaker.py.
    bz#595459. Fixes FTBFS on Hurd.
  * debian/rules, debian/xulrunner-dev.install.in: Build npapi_getinfo in
    build-xulrunner/dist/bin, and use an RPATH. Some plugins depend on
    libxpcom.so, and dlopen() from npapi_getinfo fails unless libxpcom.so
    can be loaded too. Fixes FTBFS on hppa as a side effect.

 -- Mike Hommey <glandium@debian.org>  Thu, 16 Sep 2010 09:15:51 +0200

iceweasel (3.6.9-1) experimental; urgency=low

  * New upstream release.
  * Fixes for mfsa2010-{49-51,53-57,59-63}, also known as
    CVE-2010-3169, CVE-2010-2765, CVE-2010-2767, CVE-2010-3166,
    CVE-2010-2760, CVE-2010-3168, CVE-2010-3167, CVE-2010-2766,
    CVE-2010-2762, CVE-2010-2763, CVE-2010-2768, CVE-2010-2769,
    CVE-2010-2764.

  * debian/README.Debian: Move to debian/iceweasel.README.Debian.
  * debian/branding/content/*.png.uu (removed),
    debian/branding/content/*-base.png, debian/source/include-binaries,
    debian/branding/content/Makefile.in: Replace .uu files with their binary
    counterpart, now that dpkg-dev supports binary files in the debian/
    directory.
  * debian/control*:
    - Remove build dependency on sharutils.
    - Install libmozjs debug symbols together with the xulrunner ones.
    - Remove extra ~ in iceweasel version dependency on xulrunner, which
      was only required for 3.6.4~build2.
  * debian/rules:
    - Refactor file preprocessing.
    - Actually allow the build sequence to start from intermediate stamps.
    - Don't fail to build if the build-xulrunner directory exists.
    - Move .PHONY definitions for test targets to debian/test.mk.
    - Add some sanity checks on version numbers.
    - Use the new DEBIAN_RELEASE variable for dh_gencontrol.
    - Enhance the check-system-libs rule to check in the all autoconf.mk
      files.
    - Further split build and install process in several stamped steps.
    - Actually set CXX in default case, and re-export it.
    - Move stamps creation at the end, so that "touch" always happens at
      the end.
    - Separate dh_xulrunner check from dh_install rule for better debugging.
  * debian/test.mk:
    - Move tests HOME directory into build-xulrunner/dist instead of now
      nonexistent dist.
    - Don't automatically modify TESTS when TEST_PATH is set.
    - Force armel JIT to compile ARMv4T instructions during tests.
    - Define generic -skip rules for tests.
    - Put all tests requiring an application in a separate variable.
    - Use iceweasel for reftest/crashtest.
  * debian/reftest-app: Remove our custom reftest-app.
  * debian/extra-stuff/Makefile.in: Remove duplicated variables definitions.
  * debian/branding/content/jar.mn: Add missing aboutFooter.png to branding.
  * debian/rules, debian/noinstall.in: Move testsuite related header field
    removal to noinstall.in.
  * debian/rules, debian/branding/jar.mn, debian/branding/Makefile.in: Check
    the iceweasel branding installs all files provided by upstream unofficial
    branding.
  * debian/dh/dh_xulrunner.in:
    - Fix small formatting issue in dh_xulrunner manual page.
    - Remove debug output in dh_xulrunner.
  * debian/rules, debian/dh/dh_xulrunner_test, debian/dh/dh_xulrunner.in:
    Better check for the dh_xulrunner behaviour.
  * debian/rules, debian/dh/npapi_getinfo.c, debian/dh/dh_xulrunner.in,
    debian/xulrunner-dev.install.in: New dh_xulrunner feature: return
    plugins handled mime types in a substvar.
  * debian/xulrunner-dev.links.in: Install a symlink to nspr-config for the
    SDK.
  * debian/branding/firefox-branding.js: Unset startup.homepage_override_url
    and startup.homepage_welcome_url. In other words, don't display anything
    special after an upgrade or for the first time the browser is started.
  * debian/xulrunner-GRE_VERSION.postinst.in,
    debian/xulrunner-GRE_VERSION.prerm.in,
    debian/xulrunner-GRE_VERSION.manpages.in,
    debian/xulrunner-stub-GRE_VERSION.1.in: Add a /usr/bin/xulrunner-stub
    binary in the form of an alternative, and a corresponding manual page.
  * debian/smjs.1, debian/control*: Add a note that smjs is not recommended
    for production use.

  * gfx/qcms/iccread.c: Fix unaligned reads in qcms. bz#504766.
    Closes: #591512.
  * browser/components/privatebrowsing/src/nsPrivateBrowsingService.js: Align
    -private description in --help output.
  * js/src/nanojit/NativeARM.*, js/src/nanojit/avmplus.*,
    js/src/nanojit/njcpudetect.h: Fix ARMv4T JIT support, and use patches as
    landed in upstream nanojit.
  * profile/dirserviceprovider/src/nsProfileLock.*,
    toolkit/xre/nsSigHandlers.cpp: Support platforms without SA_SIGINFO.
    bz#593767. Closes: #595535. Thanks Samuel Thibault.
  * xulrunner/installer/*.pc.in: pkg-config files don't need to require the
    version of nspr xulrunner was built against. Closes: #595842.

  * testing/xpcshell/head.js, debian/test.mk: Revert previous temporary hacks
    to track down kfreebsd buildd issues.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Sep 2010 09:05:03 +0200

iceweasel (3.6.8-2) experimental; urgency=low

  * New upstream release.

  [ iceweasel ]
  * debian/iceweasel.install, debian/rules: Build in a subdirectory instead
    of within the source directory.
  * debian/iceweasel.mozconfig, debian/rules: Move most configure options
    to a separate mozconfig file.
  * debian/iceweasel.install: Install blocklist.xml.
  * debian/noinstall, debian/rules: Remove some installed files from
    debian/tmp, and use dh_install --fail-missing.
  * debian/rules: Add --with-system-libxul configure option.
  * debian/rules: Rename CONFIGURE_OPTIONS to CONFIGURE_FLAGS
  * debian/control*:
    - Reformat.
    - Remove Eric Dorland from the Uploaders field. Given his limited time
      and lost interest, Eric agreed to formally retire from iceweasel
      maintenance. Thanks for all these years, Eric.

  * build/Makefile.in, build/automation-build.mk: Revert cleaning patches.

  [ xulrunner ]
  * debian/control*, debian/extra-stuff/packages-static.xulrunner,
    debian/libmozillainterfaces-java.*, debian/rules,
    debian/xulrunner-BASE_VERSION.install.in: Remove unsupported javaxpcom
    support.
  * debian/rules, debian/test.mk: Build in a subdirectory instead of within
    the source directory.
  * debian/mozconfig*, debian/rules: Move default-mozilla-five-home
    definition from mozconfig to debian/rules.
  * debian/mozconfig, debian/rules: Rename mozconfig to xulrunner.mozconfig.
  * debian/*: Rename BASE_VERSION to GRE_VERSION.

  * Makefile.in, build/Makefile.in, build/automation-build.mk,
    config/rules.mk, js/src/Makefile.in, js/src/config/rules.mk,
    js/src/xpconnect/src/Makefile.in, testing/testsuite-targets.mk,
    xpcom/tests/Makefile.in: Revert cleaning patches.
  * extensions/java/xpcom/Makefile.in,
    toolkit/toolkit-makefiles.sh: Revert javaxpcom patches.
  * memory/jemalloc/jemalloc.c: Properly disable ncpus in jemalloc, which
    the previous patch didn't do.

  [ merged packages ]
  * debian/control*, debian/rules: Merged iceweasel and xulrunner source
    packages. Binary packages are kept as they were before.
  * debian/copyright, debian/watch: Use Iceweasel's version.
  * debian/changelog: Keep Iceweasel changelog. Xulrunner's go in a separate
    debian/changelog.xulrunner file, for historical purpose. The file is not
    installed in binary packages.
  * debian/control*: Fix xulrunner-dev dependencies. As ${source:*Version}
    will return iceweasel version, ${binary:Version} is better to use. It
    turns out it is safe to use now xulrunner-dev is not Arch: all.
  * debian/extra-stuff/Makefile.in:
    - Fix to support subdirectory build.
    - Avoid duplicated entries in generated jar manifest.
  * debian/rules:
    - Set LDFLAGS for iceweasel the same way xulrunner does.
    - Export CFLAGS and CXXFLAGS directly from rules instead of setting them
      when calling configure.
  * debian/extra-stuff/Makefile.in, debian/noinstall*, debian/rules: Use
    debian/noinstall to avoid installing some xulrunner files, instead of
    filtering the package manifest.
  * debian/rules, debian/*.manpages*: Use .manpages files instead of calling
    dh_installman manually. Iceweasel was doing that, but not xulrunner.
  * Skip version 3.6.8-1, as xulrunner packages versions numbers would then
    be 1.9.2.8-1, which was already used.
  * debian/reftest-app/defaults/preferences/reftest-app.js: Add a default
    value for the dom.ipc.plugins.enabled pref to the reftest app.

  * testing/xpcshell/head.js: Add a 2 minutes timeout on xpcshell tests.
  * debian/test.mk: Add logging messages during xpcshell tests to track down
    kfreebsd buildd issues.

 -- Mike Hommey <glandium@debian.org>  Fri, 20 Aug 2010 21:57:53 +0200

iceweasel (3.6.7-1) experimental; urgency=low

  * New upstream release.
  * Fixes mfsa-2009-45, also known as CVE-2010-1206.
  * debian/control:
    - Remove conflict with very old package.
    - Bump Standards-Version to 3.9.0.0.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Jul 2010 00:21:17 +0200

iceweasel (3.6.4-1) experimental; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Jun 2010 15:27:03 +0200

iceweasel (3.6.4~build2-1) experimental; urgency=low

  * debian/copyright, debian/remove.nonfree: Update to fit new upstream
    (pre)release.
  * debian/iceweasel-runner: Don't override MOZ_APP_LAUNCHER, which was
    already set.
  * debian/firefox, debian/iceweasel.install, debian/iceweasel.postrm,
    debian/iceweasel.preinst: Divert /usr/bin/firefox and put a wrapper script
    instead. The wrapper script runs the diverted firefox if it exists, and
    iceweasel otherwise. Closes: #576392.
  * debian/README.Debian: Add a note about safe browsing in README.Debian.
    Closes: #575039.
  * debian/rules:
    - Build with --std=gnu++0x.
    - Don't check for libiw, necko wifi is part of libxul already.
  * debian/control*:
    - Remove dependency on psmisc as we've not been using fuser for years.
    - Iceweasel 3.6.4~build2 needs to depend on xulrunner 1.9.2.4~build2.
  * debian/branding/Makefile.in, debian/branding/aboutIce.js,
    debian/branding/ice.*, debian/branding/jar.mn, debian/iceweasel.install:
    Add a about:iceweasel page similar to about:mozilla. Closes: #413725.

  * configure.in: Revert change to force not to use -fshort-wchar.

 -- Mike Hommey <glandium@debian.org>  Mon, 03 May 2010 13:44:40 +0200

iceweasel (3.6.3-1) experimental; urgency=low

  * New upstream release.
  * debian/rules, debian/control: Bump GRE version to 1.9.2.
  * debian/branding/Makefile.in: document.png moved in upstream tarball.
  * debian/patches/*: Refresh patches and add some more:
    - More s/%APP%/firefox/ changes for 3.6.
    - Additional --with-libxul-sdk changes for 3.6.

 -- Mike Hommey <glandium@debian.org>  Fri, 02 Apr 2010 21:44:36 +0200

iceweasel (3.5.9-2) unstable; urgency=low

  * debian/remove.nonfree: There are still some .cvsignore files in the
    upstream tarballs.
  * debian/rules, debian/iceweasel.links.in, debian/iceweasel.bug-script.in,
    debian/iceweasel.bug-control.in, debian/control.in, debian/control:
    Generate GRE version dependent information from GRE_VERSION set in
    debian/rules.
  * debian/rules, debian/control*: Have iceweasel 3.5.x depend on xulrunner
    1.9.1.x at least. This will force upgrades of xulrunner when iceweasel
    is upgraded.

 -- Mike Hommey <glandium@debian.org>  Fri, 02 Apr 2010 20:08:22 +0200

iceweasel (3.5.9-1) unstable; urgency=low

  * New upstream release.
  * config/autoconf.mk.in: Revert previous changes to install in an
    unversioned directory.
  * debian/rules: Pass an installdir variable to install into
    /usr/lib/iceweasel.
  * debian/control:
    - Suggest libkrb53 for backports.
    - Build-depend on xulrunner-dev << 1.9.2.
  * debian/iceweasel.prerm, debian/iceweasel.postinst: Remove old mozilla
    alternative. I think there is no reason to keep this anymore.
  * debian/iceweasel.links: Remove firefox and mozilla-firefox links.
    It will help make transition to Firefox easier if that ever happens.
  * debian/remove.nonfree: We now remove more non-free data. Also cleaned up
    outdated stuff. Closes: #567915
  * debian/source/format, debian/patches/*: Switch to 3.0 (quilt) format,
    with patches.

  * browser/components/safebrowsing/content/application.js,
    browser/app/profile/firefox.js: Use googpub-phish-shavar instead of
    goog-phish-shavar for safe browsing. This is a first step for fixing safe
    browsing. Either the current setup will work if Google allows our client
    string to get this data, or we'll be allowed to say we're firefox to the
    safe browsing server. Closes: #561927.

 -- Mike Hommey <glandium@debian.org>  Thu, 01 Apr 2010 16:23:51 +0200

iceweasel (3.5.8-1) unstable; urgency=low

  * New upstream release.
  * browser/components/nsBrowserContentHandler.js: Revert temporary hack to
    force homepage_override to be triggered.
  * extensions/reporter/resources/content/reporter/reporterOverlay.xul,
    browser/base/content/baseMenuOverlay.xul: Resurrect release notes menu
    item. Also resurrect the check for updates one, since it is #ifdef'ed on
    something we disable.
  * browser/components/safebrowsing/content/report-phishing-overlay.xul:
    Revert the change in report phishing menu item location. Now we
    resurrected the release notes item and restored the updateSeparator,
    this change is pointless.
  * browser/base/content/credits.xhtml: Correct old merge mistake.
  * browser/locales/en-US/searchplugins/google.xml: Fix Google suggestions
    in search box. Closes: #568004.
  * build/Makefile.in: Remove leaktest files in make clean. bz#541769.
  * build/Makefile.in, build/automation-build.mk, build/automation.py.in,
    build/pgo/Makefile.in, layout/tools/reftest/Makefile.in,
    testing/mochitest/Makefile.in: Don't remove build/automationutils.py
    on make clean. bz#525047.
  * build/automation-build.mk: Remove automation.py in make clean. bz#541768.

  * debian/control:
    - iceweasel provides gnome-www-browser: Closes: #568320.
    - Bump Standards-Version to 3.8.4.0.
  * debian/branding/firefox-branding.js:
    - Add a release notes URL.
    - Point to localized urls on mozilla.debian.net.
  * debian/rules:
    - Remove Debian revision from the User Agent string.
    - Don't set distribution-id, it's only used in toolkit, i.e. xulrunner.
    - Remove uneffective --disable-gtktest flag.
  * debian/iceweasel.install, debian/wikipedia-en.xml: Remove
    wikipedia-en.xml searchplugin. There is now a better search plugin (with
    suggestions) provided upstream.
  * debian/rules, debian/iceweasel.install, debian/debsearch.*: Refresh
    debsearch search plugin.
  * debian/iceweasel.1: Improve manual page for -P option. Closes: #568677.
  * debian/iceweasel-xremote-client: Don't need to set LD_LIBRARY_PATH.
  * debian/iceweasel.install, debian/rules: Don't install xpm files in
    chrome/icons/default. They are not provided there upstream anymore,
    there is no reason to do so.
  * debian/rules, debian/*.svg, debian/iceweasel.install, debian/*.png.uu,
    debian/branding: Move images generation and cleanup in debian/branding.
  * debian/rules:
    - Remove unused variables in debian/rules.
    - Remove binary-indep rules, as we don't build an arch: all package
      anymore.
    - Don't unnecessarily set LD_LIBRARY_PATH when building.
    - Remove old comments from dh-make templates.
    - Use browser/config/version.txt content as UPSTREAM_VERSION.
    - Use a variable for GRE version.
    - Use the GRE directory as hint for dh_shlibdeps.
    - Install the MPL license text in all packages.
    - Don't fix permissions that don't need to be fixed.
  * debian/README.Debian: Remove mostly irrelevant parts of README.Debian.
  * debian/compat, debian/rules: Switch to dh.
  * debian/iceweasel.postinst: Remove /usr/lib/iceweasel/updates on upgrades.
  * debian/rules:
    - There is no bashism in debian/rules anymore.
    - Use make dependency to "generate" the MPL file.
    - Set LDFLAGS at configure time.
  * debian/vendor.js: Don't trigger the debAbout component. Now we have a
    release notes link in about:, the debAbout generated links are pointless,
    especially since they create problems in the target web pages
    (e.g. unstyled BTS).
  * debian/iceweasel-gnome-support.{prerm,postinst},
    debian/iceweasel.{prerm,postinst}: Merge iceweasel-gnome-support
    maintainer scripts into iceweasel ones.

 -- Mike Hommey <glandium@debian.org>  Wed, 17 Feb 2010 22:46:30 +0100

iceweasel (3.5.6-2) unstable; urgency=low

  * debian/iceweasel-runner:
    - Allow iceweasel-runner not to hardcode the iceweasel base directory.
      Closes: #507120.
    - Remove old compatibility stuff.
  * debian/iceweasel.desktop: Only put the name in the Name field of the
    freedesktop application file. Closes: #507961.
  * debian/iceweasel.dirs:
    - Make it clear that plugins should live in /usr/lib/mozilla/plugins/
      by shipping the directory in the iceweasel package. Closes: #520676.
    - Likewise for extensions in /usr/{lib,share}/mozilla/extensions/$app-id.
      Closes: #564669.
  * debian/control:
    - Suggest ttf-lyx | latex-xft-fonts (latex-xft-fonts is kept for stable
      users). Closes: #539537.
    - Replace libkrb53 suggestion with libgssapi-krb5-2.
    - Remove the iceweasel-gnome-support package.
    - Rewrite the short description. Also slightly modify the long
      description. Closes: #400858.
    - Build conflict with libhildonmime-dev and libosso-dev. Closes: #544369
  * debian/iceweasel.1:
    - Fix trivial typo in the manual page. Closes: #528789.
    - Synchronize manual page with iceweasel --help output, and add various
      other information. Closes: #362020, #520660, #556258.
  * debian/homepagereset.js, debian/iceweasel.install: Remove the
    homepagereset component. It was used to reset the homepage user settings
    if it were a very old value. Anyone using these old homepages should have
    had their homepage reset by now.
  * debian/control, debian/iceweasel.bug-presubj, debian/iceweasel.install,
    debian/rules: Use dh_bugfiles instead of installing reportbug-related
    files by hand.
  * debian/iceweasel.bug-script: Add reportbug script to list addons.
    This uses a new helper in xulrunner-1.9.1. Closes: #356647.
  * debian/iceweasel.bug-control: Request xulrunner-1.9.1 dependency list in
    bug reports.
  * debian/branding/Makefile.in, debian/branding/firefox-branding.js:
    Use http://mozilla.debian.net pages for homepage_override and welcome.
  * browser/components/nsBrowserContentHandler.js: Temporary hack to force
    homepage_override to be triggered. This hack is to be removed in next
    release. Its sole purpose is to get people to see the pages on
    http://mozilla.debian.net/ despite the upstream version not being bumped.
  * debian/iceweasel.prerm: When removing the package, cleanup files
    iceweasel creates if run as root.
  * debian/iceweasel.install, debian/iceweasel.prerm: Make .autoreg part of
    the package.
  * debian/iceweasel-restart-required.update-notifier,
    debian/iceweasel.install, debian/iceweasel.postinst: Remove update
    notification through update-notifier
  * browser/components/nsBrowserContentHandler.js,
    browser/components/shell/src/nsSetDefaultBrowser.js: Fix misalignments
    in --help command line. bz#458631.
  * browser/base/content/browser.css: Favicons in search bar dropdown not
    shown if menus_have_icons=false. bz#508221. Closes: #561902.

 -- Mike Hommey <glandium@debian.org>  Wed, 03 Feb 2010 07:55:01 +0100

iceweasel (3.5.6-1) unstable; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Dec 2009 11:08:01 +0100

iceweasel (3.5.5-1) unstable; urgency=low

  * New upstream release.
  * debian/remove.nonfree: Synchronize with Iceape 2.0.
  * debian/copyright: Update with missing information, and remove lcms
    licensing as it was dropped in 3.5.
  * debian/iceweasel-runner: Synchronize with Iceape 2.0's iceape-runner:
    - Remove obsolete (and commented) Xprint support.
    - Only handle --verbose, -V, -g and --debugger options.
    - Output less variables when running verbosely.
  * debian/README.Debian: Point to the proper file containing the
    app.update.enabled setting.
  * debian/rules: Properly modify {Min,Max}Version in application.ini.
  * debian/control, debian/iceweasel.preinst: Removed upgrade path from
    old firefox packages.
  * debian/rules: Add a "like Firefox/version" string to the UA.
    Closes: #399633.
  * debian/control:
    - Set the pkg-mozilla team as maintainer.
    - Bump Standards-Version to 3.8.3.0.
  * browser/components/sessionstore/src/nsSessionStore.js: Avoid wrong
    sessionstore data to keep windows out of user sight.
    Closes: #552426, #553453.

 -- Mike Hommey <glandium@debian.org>  Thu, 12 Nov 2009 17:32:42 +0100

iceweasel (3.5.4-1) unstable; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 28 Oct 2009 16:36:06 +0100

iceweasel (3.5.3-2) unstable; urgency=low

  * debian/iceweasel-runner: Set the MOZ_APP_LAUNCHER in the runner script to
    register the proper name with XSMP. Closes: #437999.
  * debian/watch: Fix to fit new upstream tarball names.
    Thanks Yan Morin <progysm@gmail.com>. Closes: #550482.

 -- Mike Hommey <glandium@debian.org>  Sat, 10 Oct 2009 16:03:21 +0200

iceweasel (3.5.3-1) experimental; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 10 Sep 2009 22:04:25 +0200

iceweasel (3.5.2-1) experimental; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 20 Aug 2009 07:30:00 +0200

iceweasel (3.5.1-1) experimental; urgency=low

  * New upstream release.
  * debian/copyright:
    - Fix GPL and LGPL text location.
    - Update copyright information.
  * debian/control:
    - Add ${misc:Depends} in all binary packages dependencies.
    - Set iceweasel-dbg's section to debug.
    - Bumped Standards-Version to 3.8.2.0.
  * debian/rules: Removed call to deprecated dh_desktop.
  * debian/iceweasel.postinst: Remove call to update-desktop-database, which
    is not in /usr/sbin anyways, and is called automatically (was added by
    dh_desktop before, and run by desktop-file-utils triggers now).

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Jul 2009 20:49:41 +0200

iceweasel (3.5-1) experimental; urgency=low

  * New upstream release.
  * debian/control, debian/rules, debian/iceweasel.links: Build against and
    depend on xulrunner 1.9.1.
  * configure.in, configure: Don't check for libasound.
  * debian/branding/locales/en-US/brand.dtd: Add missing entity.
  * browser/components/build/Makefile.in: Link against nspr.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Jul 2009 07:59:42 +0200

iceweasel (3.0.11-1) unstable; urgency=low

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sat, 13 Jun 2009 20:33:30 +0200

iceweasel (3.0.9-1) unstable; urgency=high

  * New upstream release.
  * Fixes mfsa-2009-20, also known as CVE-2009-1310.

 -- Mike Hommey <glandium@debian.org>  Wed, 22 Apr 2009 21:18:38 +0200

iceweasel (3.0.7-1) unstable; urgency=high

  * New upstream release.
  * Fixes mfsa-2009-11, also known as CVE-2009-0777.

 -- Mike Hommey <glandium@debian.org>  Sun, 08 Mar 2009 11:23:28 +0100

iceweasel (3.0.6-1) unstable; urgency=low

  * New upstream release.
  * Fixes mfsa-2009-03, also known as CVE-2009-0355.

 -- Mike Hommey <glandium@debian.org>  Wed, 04 Feb 2009 08:19:24 +0100

iceweasel (3.0.5-1) unstable; urgency=low

  * New upstream release.
  * Fixes mfsa-2008-{63,69}, also known as CVE-2008-5505 and CVE-2008-5513.
  * debian/vendor.js: Remove EULA override, since the EULA was removed
    upstream, and its replacement has been made hidden to unofficial builds.

 -- Mike Hommey <glandium@debian.org>  Sat, 20 Dec 2008 13:40:23 +0100

iceweasel (3.0.4-1) unstable; urgency=low

  * New upstream release. (Closes: #505557)
  
  [ Mike Hommey ]
  * debian/iceweasel-gnome-support.postinst,
    debian/iceweasel-gnome-support.prerm: Handle gnome-www-browser alternative.
    Restored from 3.0~b5-3. Closes: #492286.
  * debian/branding/locales/browserconfig.properties: Change the homepage to
    about:. Closes: #499346
  * browser/branding/unofficial/locales/browserconfig.properties: Revert
    previous change, this is not the installed file.
  * debian/homepagereset.js: Force homepage reset if it was previously set to
    the granparadiso homepage.
  * debian/iceweasel-restart-required.update-notifier: Added japanese
    translation. Thanks Hideki Yamane. Closes: #503595.
  * browser/components/shell/src/nsGNOMEShellService.cpp: Fix various problems
    in the handling of GNOME background color. Closes: #495897.

  [ Eric Dorland ]
  * debian/iceweasel.desktop: Just specify "iceweasel" as the icon, so it
    can pick the scalable one under certain circumstances. (Closes:
    #451943)

 -- Eric Dorland <eric@debian.org>  Sun, 23 Nov 2008 01:32:40 -0500

iceweasel (3.0.3-3) unstable; urgency=low

  * browser/app/profile/firefox.js: Replace %APP% with firefox in some places.
    Closes: #501540, #502450.
  * browser/branding/unofficial/locales/browserconfig.properties: Change the
    homepage to about:. Closes: #499346.
  * browser/app/profile/firefox.js, browser/locales/en-US/firefox-l10n.js:
    Remove general.useragent.locale prefs from firefox*.js. Closes: #495381.
  * browser/components/feeds/src/FeedConverter.js: Allow external web feed
    application to work without gnome libraries. Closes: #406380.
  * debian/presubj: Minor changes and add a note about MOZILLA_DISABLE_PLUGINS
    environment variable.
  * debian/control: Depend on a version of xulrunner-1.9 that handles the
    MOZILLA_DISABLE_PLUGINS environment variable.

 -- Mike Hommey <glandium@debian.org>  Fri, 24 Oct 2008 08:16:02 +0200

iceweasel (3.0.3-2) unstable; urgency=low

  * debian/iceweasel-xremote-client, debian/iceweasel-runner: Use 'iceweasel'
    as default application id instead of 'firefox'.
  * debian/iceweasel.1: Update the manpage accordingly.
  * Thanks to Sven Hartge. Closes: #501304, #501363, #501394, #501445.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Oct 2008 07:36:53 +0200

iceweasel (3.0.3-1) unstable; urgency=high

  * New upstream release. (Closes: #500374)
  
  * debian/presubj: Fix typo. Thanks Rémi Vanicat. (Closes: #444736)
  * browser/app/application.ini: Our name should be Iceweasel and not
    Firefox. This name here is used early in the startup, for things like
    the group leader window name. (Closes: #428836)
  * browser/app/application.ini: Set the profile path explicitely now that
    we have a different application name.
  * debian/iceweasel-runner: Add the -profile and
    -install-global-extension to the list of single arg flags for
    iceweasel. (Closes: #425874, #440455)
  * debian/iceweasel.desktop: Fixed Finnish desktop file
    translation. Thanks Timo Jyrinki. (Closes: #483941)

 -- Eric Dorland <eric@debian.org>  Mon, 06 Oct 2008 01:59:30 -0400

iceweasel (3.0.1-1) unstable; urgency=low

  * New upstream release.
  * debian/rules:
    - Install the 64x64 icon into the proper place. Closes: #479032.
    - Broaden version range for the GRE in application.ini.
  * browser/components/preferences/applications.js: Avoid spurious "Run" items
    in application handlers configuration pane.
  * browser/components/preferences/applicationManager.xul: Fix breakage of the
    application manager by change to applications.js in 3.0~rc2-2.
  * debian/iceweasel-runner: Don't set MOZILLA_NO_JEMALLOC when using aoss.
  * debian/control:
    - Depend on a version of xulrunner with a fixed jemalloc.
    - Updated Standards-Version to 3.8.0.1. No changes required.
  * debian/remove.nonfree: Don't remove files that don't exist anymore, and
    properly remove some files with spaces in their name.
  * debian/iceweasel.links: /usr/share/icons/hicolor/64x64/apps/iceweasel.png
    is not a link anymore.

 -- Mike Hommey <glandium@debian.org>  Mon, 14 Jul 2008 22:51:39 +0200

iceweasel (3.0~rc2-2) unstable; urgency=low

  * debian/iceweasel-runner:
    - Fix startup with aoss as ICEWEASEL_DSP. Closes: #485623.
    - Use MOZILLA_NO_JEMALLOC instead of LD_PRELOAD to disable jemalloc.
  * browser/components/preferences/applications.js: Avoid failure to
    initialize the applications preferences pane when the shell service is not
    loaded, which happens when xulrunner-1.9-gnome-support is not installed.
    Closes: #485765.
  * browser/confvars.sh: Set MOZ_APP_NAME to iceweasel. This will make the
    shell service use the proper path when setting the default browser.
    Closes: #399632.
  * configure, configure.in: Force to not use -fshort-wchar. Closes: #474281.
  * debian/control:
    - Build depend on version of xulrunner-dev that doesn't use -fshort-wchar.
    - Depend on version of xulrunner-1.9 implementing MOZILLA_NO_JEMALLOC and
      lockPref in preferences.
  * debian/iceweasel.cfg: Removed.
  * debian/iceweasel.install: Don't install iceweasel.cfg.
  * debian/vendor.js: Moved the locked preference for app.update.enabled here,
    now that can be done here with newest xulrunner-1.9. Note that
    iceweasel.cfg was not taken into account due to general.config.filename
    mistakenly not being set.
  * debian/iceweasel.js: Fixed preferences location in /usr/lib/iceweasel and
    added a note about lockPref.
  * debian/rules, debian/iceweasel.install: Now that we don't have flat
    chrome, we can't use icons from chrome/browser/content. Change links to
    point to a proper location, and install missing 64x64 icon. Thanks
    Franklin PIAT. Closes: #486521.

 -- Mike Hommey <glandium@debian.org>  Sat, 21 Jun 2008 15:57:49 +0200

iceweasel (3.0~rc2-1) unstable; urgency=low

  * New upstream release candidate.

 -- Mike Hommey <glandium@debian.org>  Sat, 07 Jun 2008 12:46:43 +0200

iceweasel (3.0~rc1-1) experimental; urgency=low

  * configure.in, configure: Fix LIBXUL_SDK_DIR variable use. Closes: #479041.
  * debian/iceweasel-runner: Work around problems with aoss and libjemalloc by
    preloading the glibc. Closes: #475166.
  * debian/iceweasel.postinst:
    - Remove any compreg.dat and xpti.dat that would be left from earlier runs
      of iceweasel as root, causing possible random crashes with xpcom.
      Closes: #481020.
    - Touch .autoreg on install/upgrade, so that components registration is
      triggered for the components provided by iceweasel.
  * debian/control:
    - Build depend on xulrunner-dev 1.9~rc1 and stop build depending on
      xulrunner-1.9-common which was only required because of incompatible
      platform.ini in xulrunner-1.9-common 1.9~b5-1.
    - iceweasel depends on xulrunner >= 1.9~rc1.
  * debian/about_debian.js: Removed, as this component will be provided by
    xulrunner.
  * debian/iceweasel.install: Don't install about_debian.js.
  * debian/rules: Use proper flag to disable optimization.
  * debian/branding/branding.nsi, debian/branding/content/contents.rdf:
    Removed useless branding files.
  * debian/branding/locales/en-US/brand.dtd: Removed useless entity.
  * debian/vendor.js:
    - Add package name for debAbout.js component.
    - Avoid displaying useless EULA at iceweasel startup.
  * debian/rules: Install debian/vendor.js and append
    general.useragent.extra.firefoxComment there.
  * configure.in, configure: Don't build libjemalloc when building against
    libxul-sdk.
  * browser/base/content/baseMenuOverlay.xul,
    browser/components/safebrowsing/content/report-phishing-overlay.xul,
    extensions/reporter/resources/content/reporter/reporterOverlay.xul:
    Arrange menu overlays so that nothing ends up after "About Iceweasel".

 -- Mike Hommey <glandium@debian.org>  Sat, 24 May 2008 22:48:48 +0200

iceweasel (3.0~b5-4) experimental; urgency=low

  [ Eric Dorland ]
  * debian/control:
    - Add Replaces on iceweasel-gnome-support for imgicon move.
      (Closes: #478084)
    - Fix GNOME spelling errors.
    - Remove binutils and dpkg-dev build dependencies that were workarounds
      for broken version that are no longer in Debian.
  * debian/rules: Add calls to dh_desktop.
  * debian/iceweasel.postinst: Fix inverted check for a running
    iceweasel. Thanks Andreas Beckmann. (Closes: #473756)
  * debian/iceweasel.desktop: Add trailing semicolons to Categories and
    Mimetype to comply the standard. Thanks Michael Biebl. (Closes:
    #468117)

  [ Mike Hommey ]
  * debian/control:
    - Replace a bunch of build dependencies with xulrunner-dev and
      xulrunner-1.9-common (a versioned dependency is required for this one
      because of an incompatible platform.ini in 1.9~b5-1).
    - iceweasel now depends on xulrunner-1.9 (we rely on xulrunner-stub from
      version 1.9~b5-4).
    - iceweasel-dbg depends on xulrunner-1.9-dbg.
    - iceweasel-gnome-support is transformed into a dummy package to install
      xulrunner-1.9-gnome-support.
  * debian/iceweasel-gnome-support.*: Removed.
  * debian/iceweasel.install, debian/iceweasel.links:
    - Don't install files that are provided by xulrunner-1.9, including the
      firefox binary, which is a copy of xulrunner-stub.
    - defaults/pref is now defaults/preferences.
    - Install application.ini in /usr/lib/iceweasel instead of
      /usr/share/iceweasel. Xulrunner following symlinks, it fails running
      iceweasel without the file being in /usr/lib/iceweasel.
  * debian/rules:
    - Build against xulrunner-1.9.
    - Don't install files in the iceweasel-gnome-support package and don't
      filter anything in the iceweasel package.
    - Don't set general.useragent.product and general.useragent.productSub,
      they have no effect anymore.
    - defaults/pref is now defaults/preferences.
    - Remove specific CFLAGS for alpha and ppc64, since we don't build from
      code that may require it.
    - Properly cleanup debian/branding with clean rule.
  * debian/iceweasel.links:
    - Install the xulrunner-stub as a /usr/lib/iceweasel/firefox-bin symlink.
      It will also allow smooth upgrade for those whose session manager stored
      firefox-bin as iceweasel main executable.
    - Help xulrunner-stub by pointing to xulrunner's home with a
      /usr/lib/iceweasel/xulrunner symlink to /usr/lib/xulrunner-1.9.
  * debian/iceweasel.postinst: Remove /usr/lib/iceweasel/.autoreg on upgrade.
  * debian/iceweasel-xremote-client: Don't set MOZILLA_FIVE_HOME anymore.
  * toolkit/library/Makefile.in,
    xpcom/reflect/xptcall/src/md/unix/Makefile.in: Revert changes to these
    files, as they are not used for the build anymore.

 -- Mike Hommey <glandium@debian.org>  Thu, 01 May 2008 18:56:40 +0200

iceweasel (3.0~b5-3) experimental; urgency=low

  * debian/README.Debian: Change the paragraph about pango, since this is now
    the only font backend and MOZ_DISABLE_PANGO is effectless.
  * debian/presubj: Remove the paragraph about MOZ_DISABLE_PANGO.
  * debian/iceweasel-runner: Don't export the MOZ_DISABLE_PANGO variable.
  * debian/rules:
    - Remove old unused stuff.
    - Use upstream optimization flags.
    - Arrange LDFLAGS so that -Wl,--as-needed appears before -lpthread.
  * debian/iceweasel-gnome-support.install: Remove the imgicon component from
    the iceweasel-gnome-support package. (Closes: #477661)
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in: Fix FTBFS on hppa.
    (Closes: #473766)

 -- Mike Hommey <glandium@debian.org>  Sat, 26 Apr 2008 09:35:27 +0200

iceweasel (3.0~b5-2) experimental; urgency=low

  [ Mike Hommey ]
  * allmakefiles.sh: Make the branding directory cleanup properly.
  * browser/build.mk, browser/installer/Makefile.in,
    toolkit/mozapps/installer/packager.mk: Cleanup the few remaining files in
    browser/installer when distcleaning.
  * configure.in, configure: Check less things during configure when using
    libxul-sdk.
  
  [ Eric Dorland ]
  * debian/rules: Install the libimgicon.so component in the regular
    iceweasel package and not iceweasel-gnome-support. It's needed to
    display the icons and doesn't actually depend on anything gnome
    specific. (Closes: #474728)
  * debian/rules: Suggest xfonts-mathml and ttf-mathematica4.1 for mathml
    support. (Closes: #445564)

 -- Eric Dorland <eric@debian.org>  Tue, 22 Apr 2008 01:26:06 -0400

iceweasel (3.0~b5-1) experimental; urgency=low

  * New upstream beta release.
  * debian/branding/locales/Makefile.in: Fix location of the branding
    directory.

 -- Eric Dorland <eric@debian.org>  Wed, 02 Apr 2008 22:58:08 -0400

iceweasel (3.0~b4-2) experimental; urgency=low

  * debian/branding/*, debian/rules, debian/iceweasel.install: Use the
    --with-branding flag, create a branding directory and generate all of
    our snazy icons inside of it.
  * debian/filter-globe.xsl: Remove, no longer needed.
  * debian/control: Fix build dependencies, add zip and
    libdbus-glib-1-dev, and tighten the cairo dependency. Thanks Michel
    Dänzer. (Closes: #472467)
  * debian/rules: Disable the crash reporter, Mozilla probably won't
    appreciate our reports.

 -- Eric Dorland <eric@debian.org>  Tue, 01 Apr 2008 01:42:10 -0400

iceweasel (3.0~b4-1) experimental; urgency=low

  * New upstream beta release.
  
  * debian/control:
    - Sort the Build-Depends by alphabetical order and add proper linebreaks.
    - Update Standards-Version to 3.7.3.
    - Point Vcs-* headers at new Git repo.
  * browser/base/content/baseMenuOverlay.xul,
    browser/base/content/baseMenuOverlay.xul,
    browser/base/content/credits.xhtml,
    browser/components/nsBrowserGlue.js,
    browser/locales/en-US/chrome/overrides/appstrings.properties,
    browser/locales/en-US/searchplugins/answers.xml,
    browser/locales/en-US/searchplugins/google.xml: Re-port a bunch of
    Firefox to Iceweasel renames.
  * debian/iceweasel-dom-inspector.install,
    debian/iceweasel-dom-inspector.links, debian/control, debian/rules:
    The dom-inspector has been removed from 3.0, so remove the package and
    conflict against the old one.

 -- Eric Dorland <eric@debian.org>  Sun, 23 Mar 2008 23:09:32 -0400

iceweasel (3.0~b3-1) experimental; urgency=low

  * New upstream beta release.
  * debian/rules: Remove the --enable-chrome-format=flat for now.

 -- Eric Dorland <eric@debian.org>  Tue, 04 Mar 2008 01:36:37 -0500

iceweasel (3.0~b2-1) UNRELEASED; urgency=low

  * New upstream beta release.
  * debian/remove.nonfree: Don't remove atk components from other-licenses.
  * debian/rules:
    - Don't build static, seems static building is incompatible with libxul.
    - Need to build with internal libpng, since the system on doesn't support
      APNG.
    - Don't use system nss, nspr and hunspell for the moment.
    - Don't install the nspr, nss, etc links for now.
    - Pass --disable-install-strip and drop --disable-strip-libs, which 
      doesn't exist anymore.
  * toolkit/library/Makefile.in: Include -lXrender, the GTK libs don't
    seem to pull it in and we need it.
  * debian/iceweasel.install: 
    - Apparently the unixprintplugin isn't there anymore, remove the line.
    - Collapse the chrome installation, the manifest files there are the only 
      ones we want.
  * debian/iceweasel.install, debian/iceweasel.links:
    - Install and link to the new modules directory.
    - Install and link to new .ini files.

 -- Eric Dorland <eric@debian.org>  Mon, 21 Jan 2008 17:56:50 -0500

iceweasel (2.0.0.11-1) unstable; urgency=low

  * New upstream release, not actually different from 2.0.0.10-2.  
  
  [ Eric Dorland ]
  * debian/iceweasel.desktop: Set the Category to Network;WebBrowser and
    remove invalid Applcation.
  * debian/rules: Don't unilaterally ignore make distclean errors.

  [ Mike Hommey ]
  * debian/shlibs.local: Not needed now that older versions of libnss are not
    longer in the archive.

 -- Eric Dorland <eric@debian.org>  Sat, 01 Dec 2007 20:40:54 -0500

iceweasel (2.0.0.10-2) unstable; urgency=low

  * content/canvas/src/nsCanvasRenderingContext2D.cpp: Apply patch from
    bz#391028 to fix bz#405584, a regression in Canvas.drawImage.

 -- Eric Dorland <eric@debian.org>  Tue, 27 Nov 2007 13:13:56 -0500

iceweasel (2.0.0.10-1) unstable; urgency=low

  * New upstream release.
    - Fix the following security issues: CVE-2007-5960, CVE-2007-5959,
      CVE-2007-5947. (Closes: #451624)
  
  [ Mike Hommey ]
  * layout/build/Makefile.in: Properly get cairo lib dependencies for arch
    where we build with a libgklayout.so, such as mips.

  [ Eric Dorland ]
  * debian/control:
    - Add Vcs-* headers.
    - Use binary:Version rather than Source-Version where appropriate.

 -- Eric Dorland <eric@debian.org>  Tue, 27 Nov 2007 03:13:22 -0500

iceweasel (2.0.0.9-2) unstable; urgency=low

  * configure, configure.in, content/canvas/src/Makefile.in,
    layout/svg/renderer/src/cairo/Makefile.in,
    config/static-config.mk, config/autoconf.mk.in: Properly get cairo lib
    dependencies and don't rely on GTK bringing them, which just don't
    happen anymore (see #343711). Patch adapted from bz#344818.
  * debian/rules: Add -l option to dh_shlibdeps call so that private libraries
    are properly found by newest dpkg-shlibdeps. Also removed useless call to
    dh_shlibdeps in build-indep target.
  * debian/control: Build depend on non broken versions of dpkg-dev.
    (Closes: #452312)

 -- Mike Hommey <glandium@debian.org>  Fri, 23 Nov 2007 20:40:22 +0100

iceweasel (2.0.0.9-1) unstable; urgency=low

  * New upstream release. (Closes: #449195)

 -- Eric Dorland <eric@debian.org>  Sun, 04 Nov 2007 22:53:03 -0500

iceweasel (2.0.0.8-1) unstable; urgency=low

  * New upstream release.
    - Fixes the following security issues: CVE-2007-4841, CVE-2007-5338,
      CVE-2007-5337, CVE-2007-5334, CVE-2007-3511, CVE-2006-2894, 
      CVE-2007-2292, CVE-2007-1095, CVE-2007-5339, CVE-2007-5340. 
      (Closes: #445514, #438873)

 -- Eric Dorland <eric@debian.org>  Sat, 20 Oct 2007 02:04:01 -0400

iceweasel (2.0.0.7-2) unstable; urgency=low

  * gfx/src/gtk/gtk2drawing.c: Add patch from bz#389801 for gtk problems
    with gtk 2.12. (Closes: #444149)

 -- Eric Dorland <eric@debian.org>  Thu, 27 Sep 2007 22:26:44 -0400

iceweasel (2.0.0.7-1) unstable; urgency=low

  * The "pointlessly following upstream" release.
  * New upstream security release, fixes a Windows only vulnerability.
  
  * debian/iceweasel.menu: Drop the Web Browser menu hint in the face of
    the menu reorg. (Closes: #435106)
  * debian/debsearch.src: Fix for new packages.debian.org, thanks Hristo
    Hristov. (Closes: #440826)
  * debian/wikipedia-en.xml: Update to newer Wikipedia search engine
    plugin. (Closes: #443465)
  * debian/iceweasel.NEWS: Remove, it is now quite outdated. (Closes: #434526)
  * debian/control, debian/iceweasel.postinst: Add dependency on procps,
    and check if firefox is running before printing the message about
    restarting. (Closes: #435119)
  * configure.in, configure: Steal asac's patch to work around visibility
    issues in gcc 4.2. (Closes: #428282)

 -- Eric Dorland <eric@debian.org>  Mon, 24 Sep 2007 00:07:12 -0400

iceweasel (2.0.0.6-1) unstable; urgency=high

  * New security/stability upstream release (v2.0.0.6)
  * MFSA 2007-26 aka CVE-2007-3844
  * MFSA 2007-27 aka CVE-2007-3845
  * debian/remove.nonfree: Also remove DLLs we don't have source for.

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Aug 2007 08:30:37 +0200

iceweasel (2.0.0.5-2) unstable; urgency=high

  * configure, configure.in: Make sure we won't be bitten by upstream
    changing libjpeg, libpng or zlib internal version, which makes system
    library not used even though --with-system-* argument is given to
    configure. This time, it happened with libpng.
  * uriloader/exthandler/unix/nsGNOMERegistry.cpp: Remove an include that
    should have been removed earlier.

 -- Mike Hommey <glandium@debian.org>  Sat, 21 Jul 2007 22:15:43 +0200

iceweasel (2.0.0.5-1) unstable; urgency=high

  [ Mike Hommey ]
  * New security/stability upstream release (v2.0.0.5)
  * MFSA 2007-18 aka CVE-2007-3734 (browser), CVE-2007-3735 (Javascript)
  * MFSA 2007-19 aka CVE-2007-3736
  * MFSA 2007-20 aka CVE-2007-3089
  * MFSA 2007-21 aka CVE-2007-3737
  * MFSA 2007-22 aka CVE-2007-3285
  * MFSA 2007-24 aka CVE-2007-3656
  * MFSA 2007-25 aka CVE-2007-3738
  * config/system-headers, config/Makefile.in: Add system wrapper for
    hunspell.hxx.
    (Partially fixes #428282)

  [ Eric Dorland ]
  * debian/iceweasel.menu: Change section for the new menu hierarchy.

 -- Mike Hommey <glandium@debian.org>  Thu, 19 Jul 2007 23:30:11 +0200

iceweasel (2.0.0.4-1) unstable; urgency=low

  * New upstream release. (Closes: #427785)
  * Fixes mfsa-2007-{12-14}, mfsa-2007-{16-17}, also known as
    CVE-2007-1362, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869,
    CVE-2007-2870, CVE-2007-2871.
  * uriloader/exthandler/unix/nsOSHelperAppService.cpp: Revert our changes
    that are deprecated by upstream changes.
  * uriloader/exthandler/unix/nsGNOMERegistry.h: Adapt so that our changes
    build correctly.
  * debian/iceweasel.desktop: Add Swedish translation. Thanks Daniel
    Nylander. (Closes: #420051)
  * security/manager/ssl/src/nsCertVerificationThread.cpp,
    security/manager/ssl/src/nsSSLThread.cpp: Avoid some cpu wake ups in
    PSM. bz#380558
  * modules/libpref/src/init/all.js: Set layout.css.dpi to 0 instead of -1.
    Iceweasel will use system DPI and avoid using huge fonts on systems where
    DPI < 96. (Closes: #409074)
  * debian/control:
    + Build depend on libnspr4-dev and libnss3-dev.
    + Remove mozilla-firefox* and firefox* transition packages.
  * debian/mozilla-firefox*, debian/firefox*: Removed.
  * debian/rules:
    + Use system nspr and nss.
    + Don't shlibsign.
    + Install symlinks for nspr and nss libraries in /usr/lib/iceweasel.
  * shlibs.local: Force versioned dependencies on libnss because of our use
    of the libnssckbi.so file under /usr/lib/nss which appeared in version
    3.11.5-1.
  * extensions/reporter/resources/content/reporter/reporterOverlay.xul:
    Put the "Report Broken Site" item before the about separator.
    (Closes: #416190)

 -- Mike Hommey <glandium@debian.org>  Sat, 09 Jun 2007 08:26:05 +0200

iceweasel (2.0.0.3-2) unstable; urgency=low

  * debian/README.Debian: ICEWEASEL_DSP default is none, not auto.
  * debian/copyright: Updated part about removed files.
  * configure, configure.in, config/autoconf.mk.in,
    extensions/spellchecker/myspell/src/Makefile.in,
    extensions/spellchecker/myspell/src/mozMySpell.h: Modified to have
    system hunspell library used instead of myspell. (Closes: #400621)
  * debian/rules: Replaced --enable-system-myspell with
    --enable-system-hunspell.
  * debian/control: Don't build depend on libmyspell-dev but on correct
    version of libhunspell-dev.
  * configure, configure.in: Apply fix from bz#366844 to avoid bashisms and
    do better checks.

 -- Mike Hommey <glandium@debian.org>  Fri, 23 Mar 2007 20:01:19 +0100

iceweasel (2.0.0.3-1) unstable; urgency=low

  * New upstream release. Fixes mfsa-2007-11.
  * Cleaned up the orig.tar.gz from non-free files.
  * debian/remove.nonfree: Added the script used to do the clean-up for
    documentation purpose.
  * uriloader/exthandler/unix/nsOSHelperAppService.cpp: Make MIME registry
    use system mime.types when it doesn't get extensions from the Gnome
    registry. This will make the helper configuration dialogs work better.
  * debian/control:
    + Build Conflict on graphicsmagick-imagemagick-compat to avoid bug
      #413954.
    + Bumped Standards-Version to 3.7.2.2. No changes.
  * debian/iceweasel.install: Don't install iceweasel.png in
    /usr/share/pixmaps.
  * debian/rules: Install several icons in the hicolor theme.
  * debian/iceweasel.links:
    + Change links for /usr/share/pixmaps/firefox.png and
      /usr/share/pixmaps/mozilla-firefox.png.
    + Link some icons in iceweasel directories into the appropriate hicolor
      directory.
    + Make /usr/share/pixmaps/iceweasel.png a link to the appropriate hicolor
      icon.
    (Closes: #414012)
  * browser/locales/en-US/searchplugins/answers.xml,
    browser/locales/en-US/searchplugins/google.xml: Remove firefox branding in 
    search engines. Note the output=firefox is necessary for google
    suggestions. (Closes: #414933)

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Mar 2007 20:29:33 +0100

iceweasel (2.0.0.2+dfsg-3) unstable; urgency=low

  * debian/iceweasel-runner: Fix the previous fix, so that arguments are not
    doubled. (Closes: #413162)
  * debian/Options.png.uu, debian/iceweasel.png.uu, debian/iceweasel48.png.uu,
    debian/document.png.uu, debian/mozicon128.png.uu, debian/mozicon16.xpm,
    debian/mozicon50.xpm, debian/default.xpm, debian/iceweasel.xpm: Removed.
  * debian/iceweasel_icon.svg, debian/iceweasel_logo.svg: Added source SVG
    files for the logo and the icon, and changed the color of the globe.
    (Closes: #404882, #408108, #409035)
  * debian/filter-globe.xsl: Added XSLT stylesheet to filter the globe out of
    the icon.
  * debian/about.png.uu, debian/aboutCredits.png.uu: Removed the logo and icon
    from these, so that they can be used as a base to generate the final PNG
    images, combined with the proper icon and logo.
  * debian/control: Added build dependencies on librsvg-bin, xsltproc and
    imagemagick to generate all appropriate images from the SVG files.
  * debian/rules: Added rules to generate all the necessary images and clean
    up generated images.
  * debian/copyright: Added copyright for the svg files.
  * debian/homepagereset.js: Custom component to reset the browser homepage
    if it is set to the old localstart.html page from the mozilla-browser
    package, which doesn't exist any more. (Closes: #410841)
  * debian/iceweasel.install: Install the homepagereset component.
  * browser/base/content/browserconfig.properties: Set home page to about:.
  * toolkit/content/about.xhtml: Add links to about:bugs and
    about:README.Debian to the about: page. Also remove the non-link to
    upstream release notes.
  * debian/about_debian.js: Custom component to add support for
    about:README.Debian and about:bugs addresses.
  * debian/iceweasel.install: Install the about_debian component.
  * layout/base/nsPresContext.cpp, layout/base/nsPresContext.h: Fix for hang
    up when switching GTK theme. bz#352096. Thanks Alexander Sack.
  * debian/iceweasel.install, debian/iceweasel.links: Install the
    browserconfig.properties file.
  * debian/rules: Avoid compressing README.Debian for it to be seen in
    about:README.Debian.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in: Fixed test on OS_TEST so
    that hppa stops using the unsupported stubs.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in: Update patch for Linux
    ppc to match those on iceape and xulrunner.
  * xpcom/typelib/xpidl/xpidl.c: Revert useless patch: xpidl is not installed
    anymore.
  * configure, configure.in:
    + Reverted remainings of an old patch for pango that was reverted in
      2.0+dfsg-1.
    + Update patch for zip check to match that of xulrunner.
  * layout/generic/nsTextTransformer.h: Avoid freeze/crash when null
    characters are present in justified text by discarding NULL characters
    before displaying. bz#366902 I don't like to have the two backends do
    different things, so we just unconditionally apply the workaround. (Stolen
    from xulrunner)
  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_linux_m68k.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_m68k.cpp: Better patch
    for m68k, from Modified by Roman Zippel. (Stolen from xulrunner)
  * modules/libjar/nsJAR.h, modules/libjar/nsJAR.cpp: Invalidate cache for a
    zip file that got modified. It will prevent corruption of the XUL FastLoad
    cache when upgrade is performed while an instance of the application is
    running. bz#368428. (Stolen from iceape and xulrunner)
  * browser/base/content/baseMenuOverlay.xul: Removed "Release Notes" and
    "Check for Updates" menu items from the Help menu. (Closes: #407508)
  * debian/control: Added build dependencies on autotools-dev.
  * debian/rules: Added rules to update config.guess and config.rules at
    configure time, and remove the changes at clean time.

 -- Mike Hommey <glandium@debian.org>  Sun,  4 Mar 2007 22:29:59 +0100

iceweasel (2.0.0.2+dfsg-2) unstable; urgency=low

  [ Mike Hommey ]
  * debian/iceweasel-runner: Use of a dummy argument is useless now set -- is
    being used. Plus, it avoids an ill side effect of now using set --.
    (Closes: #412344, #412404, #412418, #412585, #412711, #412746, #412876)
    
  [ Eric Dorland ]
  * debian/iceweasel-runner: 
    - Patch from Sam Pennyto fix firefox reference. Clean up wording a 
      bit too. (Closes: #412475)
    - Don't lose $prev in some cases. Thanks Loic Grenie.

 -- Eric Dorland <eric@debian.org>  Fri,  2 Mar 2007 03:36:58 -0500

iceweasel (2.0.0.2+dfsg-1) unstable; urgency=high

  * New upstream release. Fixes security vulnerabilities: CVE-2007-0775,
    CVE-2007-0776, CVE-2007-0777, CVE-2007-0995, CVE-2006-6077,
    CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800,
    CVE-2007-0008, CVE-2007-0009, CVE-2007-0981.
  * browser/app/firefox-branding.js: Set app.releaseNotesURL to the
    correct url for release notes. (Closes: #411226)
  * debian/iceweasel-runner: Use set -- everywhere. Thanks Loic Grenie. 

 -- Eric Dorland <eric@debian.org>  Sun, 25 Feb 2007 06:08:04 -0500

iceweasel (2.0.0.1+dfsg-4) unstable; urgency=low

  * debian/iceweasel.menu: Add a longtitle. 
  * browser/app/nsBrowserApp.cpp, toolkit/xre/nsXULAppAPI.h,
    toolkit/xre/nsAppRunner.cpp: Add a new displayName field and set it to
    "Iceweasel". Use it in a number of places instead of name for
    display. (Closes: #411493)

 -- Eric Dorland <eric@debian.org>  Tue, 20 Feb 2007 18:33:58 -0500

iceweasel (2.0.0.1+dfsg-3) unstable; urgency=high

  * debian/README.Debian: Fix typo, thanks Joey "I See All!"
    Hess. (Closes: #407366)
  * debian/presubj: Fix embarrassing typos and wording. Thanks Ross
    Boylan. (Closes: #407726)
  * debian/iceweasel.1: Mention "aoss" as a dsp wrapper, and fix esd and
    arts references. Thanks Alain Kalker. (Closes: #407662)
  * intl/unicharutil/util/nsUnicharUtils.h: Patch from David
    Mosberger-Tang to fix unaligned access on ia64.
  * browser/app/nsBrowserApp.cpp: Fix another Firefox reference. Thanks
    Ben Stewart (Closes: #408883)
  * browser/app/firefox-branding.js: Set startup.homepage_override_url and
    startup.homepage_welcome_url to "" to really disable the upgrade page
    overrides. (Closes: #407533)
  * debian/control: Call iceweasel-gnome-support a component rather than an
    extension. Thanks Axel Beckert. (Closes: #409950)
  * gfx/src/gtk/nsFontMetricsPango.cpp: Patch from bz#335810 to preserve
    horizontal position in text input fields. (Closes: #409634, 406612)
  * netwerk/base/src/nsSimpleURI.cpp, netwerk/base/src/nsStandardURL.cpp,
    netwerk/base/src/nsURLHelper.cpp: Fix for security bug CVE-2007-0981
    from bz#370445. (Closes: #411192) 

 -- Eric Dorland <eric@debian.org>  Sun, 18 Feb 2007 20:56:27 -0500

iceweasel (2.0.0.1+dfsg-2) unstable; urgency=high

  [ Eric Dorland ]
  * debian/rules: Use chmod a-x instead of just -x. (Closes: #404548)
  * browser/locales/en-US/chrome/browser/credits.dtd,
    browser/base/content/credits.xhtml: Remove trademark symbol and fix
    the motto. (Closes: #404945)
  * debian/control: Remove recommends added into the previous version,
    libmyspell already has them.
  * security/nss/lib/freebl/unix_rand.c: #undef DO_NETSTAT instead of just
    setting it to 0, to really stop it from running netstat. (Closes:
    #405531)
  * browser/base/content/browserconfig.properties: Change the default
    start homepage to http://www.debian.org/. 
  * browser/app/firefox-branding.js: Set
    "browser.startup.homepage_override.mstone" to "ignore" to prevent
    annoying Firefox branded firstrun and upgrade pages. (Closes: #404649)
  * debian/README.Debian: Document why we're now called
    Iceweasel. (Closes: #399814)
  * debian/copyright: Indicate that the debian directory is licensed like
    firefox, under the GPL/LGPL/MPL. (Closes: #406846)

  [ Mike Hommey ]
  * debian/iceweasel-runner: Removed bashisms.
  * debian/README.Debian: Updated information about ICEWEASEL_DSP setting and
    java plugin. Also replaced Firefox by Iceweasel where appropriate.
  * debian/iceweasel.links: Removed /usr/{lib|share}/firefox links.
    (Closes: #404733)

 -- Eric Dorland <eric@debian.org>  Tue, 16 Jan 2007 00:02:34 -0500

iceweasel (2.0.0.1+dfsg-1) unstable; urgency=high

  [ Eric Dorland ]
  * New upstream release. Fixes mfsa-2006-{68-73,74,75} also known as
    CVE-2006-6497, CVE-2006-6498, CVE-2006-6499, CVE-2006-6500,
    CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504,
    CVE-2006-6506, CVE-2006-6507.
  * directory/c-sdk/ldap/docs/draft-ietf-ldapext-ldap-c-api-05.txt,
    netwerk/protocol/ftp/doc/rfc959.txt: Removed from the orig.tar.gz
    because of freeness issues. (Closes: #400339, #393370)
  * debian/copyright: Update to list the files removed from the upstream
    tarball.

  * browser/locales/en-US/updater/updater.ini,
    browser/app/profile/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf.in,
    browser/locales/en-US/chrome/overrides/appstrings.properties,
    browser/components/nsBrowserGlue.js,
    toolkit/locales/en-US/chrome/mozapps/extensions/extensions.properties:
    Rename Firefox to Iceweasel. (Closes: #399656, #400721)
  * browser/locales/en-US/chrome/browser/aboutDialog.dtd,
    browser/base/content/credits.xhtml: Remove references to Firefox
    trademarks.
  * debian/wikipedia-en.xml, debian/wikipedia.gif.uu,
    debian/wikipedia.src, debian/iceweasel.install, debian/rules: Add new
    style Wikipedia search plugin and remove old one.
  * debian/presubj: Fix references to Firefox. (Closes: #399817)
  * debian/control: 
    - Clearify relationship to Firefox in the Iceweasel description. 
      (Closes: #399678)
    - Add Recommends on some myspell dictionaries. (Closes: #400622)
  * debian/iceweasel-dom-inspector.links: Fix mistaken link to
    /usr/lib/firefox. (Closes: #399631)
  * browser/locales/en-US/chrome/browser/preferences/advanced.dtd: Fix
    accelerator key for "Iceweasel". (Closes: #400308)
  * debian/iceweasel.1: 
    - Fix some incorrect references to Firefox. Thanks Chris Neugebauer. 
      (Closes: #400708)
    - ICEWEASEL_DSP default is none, not auto. Thanks Rafal Rutkowski.
  * debian/debsearch.png.uu, debian/debsearch.gif.uu,
    debian/iceweasel.install, debian/rules: Install a .png version of the
    debsearch logo, with better transparency. Thanks Daniel Hess. (Closes:
    #400248)
  * debian/iceweasel-runner: Fix ICEWEASEL_DSP set from the
    environment. Thanks Rafal Rutkowski. (Closes: #404356)

  [ Mike Hommey ]
  * debian/watch: Updated for non experimental versions.
  * browser/base/branding/searchconfig.properties: Replaced firefox with
    iceweasel.
  * debian/firefox.prerm, debian/firefox.postinst: Removed. (Closes: #402407)
  * debian/firefox/preinst: Remove old generated files from firefox.
  * debian/iceweasel-gnome-support.postinst, debian/iceweasel.prerm,
    debian/iceweasel-gnome-support.prerm: Replaced firefox by iceweasel.
  * configure, configure.in: Fix OS_TARGET so that it is correctly set
    to Linux for things that expect this value instead of linux-gnu, such as
    the extensions manager (Closes: #401987)
  * debian/iceweasel.preinst: Applied patch from Peter Green to fix some
    issues with upgrades where doesn't /etc/firefox contain firefox's config
    files for some reason (Closes: #399670). Also replace FIREFOX with
    ICEWEASEL in /etc/iceweasel/iceweaselrc.

  [ Alexander Sack ]
  * debian/default.xpm, debian/mozicon16.xpm, debian/mozicon50.xpm,
    debian/iceweasel.png.uu, debian/about.png.uu, debian/mozicon128.png.uu,
    debian/document.png.uu, debian/iceweasel48.png.uu, debian/Options.png.uu
    debian/aboutCredits.png.uu: Added unicko iceweasel artwork.
  * debian/iceweasel.install: installing appropriate artwork files from
    above to /usr/share/iceweasel/chrome/icons/default and
    /usr/share/iceweasel/icons/.
  * debian/rules: uudecoding artwork files from above. Installing appropriate
    files in build tree in 'build-stamp' and cleaning them up in 'clean'

 -- Eric Dorland <eric@debian.org>  Mon, 25 Dec 2006 15:30:04 -0500

iceweasel (2.0+dfsg-1) unstable; urgency=low

  * New upstream release. This release dedicated to Mike Connor.

  [ Eric Dorland ]
  * Too many renames of firefox to iceweasel to count. 
  * debian/iceweasel.desktop: Remove duplicate pt_BR entries and replace
    Firefox with Iceweasel.
  * debian/iceweaselrc: Rename FIREFOX_DSP to ICEWEASEL_DSP.
  * configure.in: MOZ_APP_DISPLAYNAME=Iceweasel.
  * config/autoconf.mk.in: Set mozappdir to /usr/lib/iceweasel.
  * debian/iceweasel.preinst: Copy /etc/firefox into /etc/iceweasel
  * modules/libpref/src/init/all.js: Use iceweasel.cfg instead of
    firefox.cfg.
  * iceweasel.png.uu: Generate iceweasel.png, not firefox.png.
  * browser/locales/en-US/chrome/branding/brand.properties,
    browser/locales/en-US/chrome/branding/brand.dtd: Switch Bon Echo to
    Iceweasel.

  [ Mike Hommey ]
  * gfx/src/gtk/mozilla-decoder.cpp, config/autoconf.mk.in: Revert changes
    for pangocairo support, since we solved the build problem by correctly
    detecting pangoxft instead.
  * debian/control: Suggest libkrb53 for kerberos authentication.
  * modules/libpr0n/build/Makefile.in: Add empty line at the end to avoid
    useless change to show up in the diff.
  * security/nss/lib/freebl/unix_rand.c: Stole patch from Ubuntu that adapted
    the previous changes to the new version of the upstream file.
  * modules/libpref/src/init/all.js: Stole patch from Ubuntu that changes some
    default fonts from serif to sans-serif.
  * debian/rules:
    + Set distribution id to 'org.debian'.
    + Force the build to have a "correct" build ID.
  * browser/components/feeds/src/FeedWriter.js: Patch from bz#343360 to make
    feed subscription and preview work properly. (Closes: #387639)

 -- Eric Dorland <eric@debian.org>  Mon, 13 Nov 2006 23:18:40 -0500

firefox (2.0~rc1+dfsg-1) experimental; urgency=low

  [ Eric Dorland ]
  * New upstream release candidate release.

  [ Mike Hommey ]
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in: Revert patch from version
    1.5.0.6-5, the problem was configure.in changes not applied in configure,
    which was already done on this branch anyways.
    Adapted to not build the ppc_linux code for ppc64, though.
  * debian/watch: Updated watch file for new version scheme.
  * config/make-jars.pl: Applied patch from bz#336056 to allow ~ in the
    destination directory (which is required since we now have a ~ in the
    main firefox directory name).
  * gfx/src/ps/nsFontMetricsPS.cpp: Applied patch from Alexander Sack to fix
    crashes while printing. (Closes: #389724)

 -- Mike Hommey <glandium@debian.org>  Sat,  7 Oct 2006 09:23:12 +0200

firefox (1.5.dfsg+1.5.0.7-1) unstable; urgency=high

  * New upstream release. Urgency high because it fixes security issues.
  * editor/libeditor/text/nsPlaintextEditor.cpp: Quite likely reverted the
    OverTheSpot patch, did not feel confident reapplying it with the
    upstream changes in this file. Please submit an updated patch to get
    it back.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in: Slightly puzzling patch
    from Andreas Jochens to make firefox compile on ppc64 again. (Closes:
    #387423)

 -- Eric Dorland <eric@debian.org>  Mon, 18 Sep 2006 01:55:57 -0400

firefox (1.5.dfsg+1.5.0.6-5) unstable; urgency=high

  * Severity high because we fix an RC bug.
  * debian/control: Adjust mozilla-firefox-dom-inspector for binNMU safety
    as well.
  * debian/firefox.desktop: Patch from Yavor Doganov to add a Bulgarian
    translation. (Closes: #386988)
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in: Fix slight mistake in
    Mike's previous patch that misrecognized ppc arches. Thanks Markus for
    the patch. (Closes: #386367)

 -- Eric Dorland <eric@debian.org>  Wed, 13 Sep 2006 01:45:20 -0400

firefox (1.5.dfsg+1.5.0.6-4) unstable; urgency=high

  [ Eric Dorland ]
  * Urgency still high, as we're still trying to get into testing.
  * debian/firefox.desktop: Patch from Nick Niktaris with Greek
    translation. (Closes: #384678)
  * debian/control: Add Suggests on mozplugger. (Closes: #384382)

  [ Mike Hommey ]
  * debian/control: Adjust dependencies for binNMU safety.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in, configure.in, configure:
    Use ${host_cpu} instead of uname -m so that firefox can safely build on
    s390x with a s390 target, and on amd64 with an x86 target.
  * uriloader/exthandler/unix/nsGNOMERegistry.cpp,
    uriloader/exthandler/unix/nsGNOMERegistry.h,
    uriloader/exthandler/unix/nsOSHelperAppService.cpp,
    uriloader/exthandler/unix/nsMIMEInfoUnix.cpp,
    uriloader/exthandler/unix/nsMIMEInfoUnix.h: Adapted patch from bz#273524 to
    make helper applications with parameters work. (Closes: #355511)
  * debian/watch: Updated.

 -- Eric Dorland <eric@debian.org>  Mon,  4 Sep 2006 23:25:44 -0400

firefox (1.99+2.0b2+dfsg-1) experimental; urgency=low

  * New upstream beta release.

  * extensions/inspector/build/src/Makefile.in,
    extensions/inspector/build/src/inspector.pkg,
    extensions/inspector/build/src/nsInspectorModule.cpp: Removed, the problem
    was lying in debian/rules. /me goes hiding under a rock.
  * layout/inspector/public/Makefile.in: Reverted previous changes.
  * debian/rules: Don't exclude inspector files when dh_installing the firefox
    package. We need the inspector.xpt file from the components directory. The
    files for the dom-inspector package are already excluded from the
    firefox.install file anyway.
  * debian/firefox-dom-inspector.install,
    debian/firefox-dom-inspector.links: Simplified.
  * debian/control:
    + Turn firefox-dom-inspector into an arch: all package, since the binary
      component has been merged into the firefox binary.
    + Adjust dependencies for binNMU safety.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in, configure.in, configure:
    Use ${host_cpu} instead of uname -m so that firefox can safely build on
    s390x with a s390 target, and on amd64 with an x86 target.
  * uriloader/exthandler/unix/nsGNOMERegistry.cpp,
    uriloader/exthandler/unix/nsGNOMERegistry.h,
    uriloader/exthandler/unix/nsOSHelperAppService.cpp,
    uriloader/exthandler/unix/nsMIMEInfoUnix.cpp,
    uriloader/exthandler/unix/nsMIMEInfoUnix.h: Adapted patch from bz#273524 to
    make helper applications with parameters work. (Closes: #355511)
  * debian/copyright: Adjusted with updated information for firefox 2.0, which
    is now properly tri-licensed \o/. (Closes: #330295)
  * debian/rules: Install the MPL file taken from the upstream LICENSE file.
  * debian/watch: Updated.

 -- Mike Hommey <glandium@debian.org>  Fri,  1 Sep 2006 08:36:26 +0200

firefox (1.5.dfsg+1.5.0.6-3) unstable; urgency=low

  * browser/app/Makefile.in: Workaround to force link the xpcom library to
    the firefox binary despite -Wl,--as-needed in the LDFLAGS.
    (Closes: #378667)
  * debian/firefox.install: Don't install xpt_link, xpt_dump, xpidl,
    xpicleanup, xpcshell nor regxpcom. They are of no use to firefox users and
    are provided with xulrunner anyway. (Closes: #362190)

 -- Mike Hommey <glandium@debian.org>  Sun, 20 Aug 2006 19:49:25 +0200

firefox (1.5.dfsg+1.5.0.6-2) unstable; urgency=low

  * debian/firefox.desktop: 
    - Polish translation from Ian Jackson by way of an Ubuntu user. 
      (Closes: #382079)
    - Patch from Ian Jackson to stop claiming dav:// URLs when firefox
      doesn't understand them. (Closes: #382080)
  * editor/libeditor/text/nsPlaintextEditor.cpp: Apply patch from
    bz#271815 to fix OverTheSpot mode used by many Asian language input
    modules. (Closes: #379935)

 -- Eric Dorland <eric@debian.org>  Tue, 15 Aug 2006 00:09:55 -0400

firefox (1.5.dfsg+1.5.0.6-1) unstable; urgency=low

  * New upstream release.

 -- Eric Dorland <eric@debian.org>  Thu,  3 Aug 2006 13:17:45 -0400

firefox (1.5.dfsg+1.5.0.5-1) unstable; urgency=high
 
  [ Eric Dorland ]
  * New upstream release. Urgency high because it fixes MFSA 2006-44 to
    MFSA 2006-56 excluiding MFSA-2006-49. (Closes: #380463)
  
  [ Mike Hommey ]
  * debian/firefox.prerm: Remove /usr/lib/firefox/.autoreg instead of
    /var/lib/firefox/.autoreg.
  * browser/app/profile/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf.in:
    Removed very old and now useless changes.
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_alpha.cpp: Removed
    useless new line that showed up in the diff.gz.

 -- Eric Dorland <eric@debian.org>  Sun, 30 Jul 2006 17:08:38 -0400

firefox (1.99+2.0b1+dfsg-1) experimental; urgency=low

  * New upstream beta targetted at experimental:
    - Much better search plugins handling. They can be added and removed at
      will, and even better, system-wise search plugins can be ignored at the
      profile level. (Closes: #352195, #320957, #296425, #308005)
  * browser/components/shell/src/Makefile.in: Correctly install the
    setDefaultBrowser component.
  * config/rules.mk: Don't install extensions in the chrome.
  * debian/firefox.links: Link /usr/lib/firefox/dictionaries to
    /usr/share/myspell/dicts.
  * config/autoconf.mk.in, configure, configure.in: Add the
    --enable-system-myspell argument to configure to use the system myspell
    library.
  * extensions/spellcheck/myspell/src/Makefile.in: Use the system myspell
    library when asked to.
  * debian/rules:
    - Add --enable-system-myspell to configure call.
    - Do shlibsign libfreebl's (there can be several depending on the arch).
  * debian/control: Add libmyspell-dev to build dependencies.
  * browser/components/microsummaries/src/Makefile.in, config/Makefile.in:
    Add rules so that make clean cleans everything.
  * allmakefiles.sh: Removed references to nonexisting Makefiles in
    extensions/xmlextras/base.
  * configure, configure.in: Apply patches from bz#334866, bz#319012 and
    bz#335949 + fixups to workaround gcc visibility hidden bugs, especially
    #331460 (an instance of which is actually still present in C++,
    see gcc#26905).
  * extensions/inspector/build/src/Makefile.in,
    extensions/inspector/build/src/inspector.pkg,
    extensions/inspector/build/src/nsInspectorModule.cpp: Added missing files
    for the DOM Inspector component.
  * extensions/inspector/build/src/Makefile.in,
    layout/inspector/public/Makefile.in: Adapted so that the DOM Inspector
    component would build correctly and the xpt would be installed in
    the extensions directory.
  * extensions/reporter/Makefile.in: Install missing reporter's preference.

 -- Mike Hommey <glandium@debian.org>  Fri, 21 Jul 2006 07:05:25 +0200

firefox (1.5.dfsg+1.5.0.4-3) unstable; urgency=low
  
  [ Eric Dorland ]
  * debian/control: 
    - Fix silly typo of binutils. (Closes: #378582)
    - Standards-Version to 3.7.2.1.
  
  [ Mike Hommey ]
  * debian/rules:
    - Use a specific LD_LIBRARY_PATH at link time so that we don't need to
      link against indirect dependencies. (Closes: #378378)
    - Run shlibsign after the files are stripped so that it is accurate and
      FIPS mode can correctly work.
    - Removed old commented out OPTFLAGS that were kept in case gcc 4.0 did
      no better than gcc 3.x.
    - Removed old exported variables that are useless nowadays.
    - Removed dh_strip call in binary-indep. Who wants to strip
      arch-independant files ;)
  * debian/presubj: Added notes about plugins and crash reports.
  * security/manager/Makefile.in, security/nss/cmd/shlibsign/Makefile:
    Don't build nor install the .chk files but still build shlibsign.
  * debian/firefox.install: Don't install .chk files since we generate them
    after dh_strip.
  * security/nss/cmd/shlibsign/manifest.mn: Don't build in shlibsign/mangle.
    It doesn't build anyway.

 -- Eric Dorland <eric@debian.org>  Wed, 19 Jul 2006 23:56:22 -0400
  
firefox (1.5.dfsg+1.5.0.4-2) unstable; urgency=low

  [ Eric Dorland ]
  * netwerk/base/public/security-prefs.js: Disable SSLv2 by default. I
    thought the weak cipher warning took care of this. (Closes: #371153)
  * debian/firefox-runner: Simplify the dsp autodetection and add aoss to
    the roster. (Closes: #372848)
  * firefox-restart-required.update-notifier, firefox.postinst,
    firefox.install: Add update-notifier to indicate that firefox needs to
    be restarted on upgrade. Based on Ian Jackson's patch, but reworked a
    little. Also with a bad French translation. Translators, assemble!
    (Closes: #365865)
  * config/rules.mk, debian/control: Apply patch from Thiemo Seufer to
    remove mips -xgot hack and build depend on the appropriate binutils on
    mips and mipsel. (Closes: #374372)
  * debian/presubj, debian/README.Debian: Add a bit more information about
    disabling Pango, which often seems to be the source of problems.
  * debian/firefox-runner: 
    - Print out MOZ_NO_REMOTE in verbose mode.
    - Fix some unreachable logic, Thanks Daniel Jacobowitz.

  [ Mike Hommey ]
  * debian/rules:
    - Fix for Gecko date extraction from client.mk.
    - Disabled strict aliasing from optimized builds.
    - Added -Wl,--as-needed to the LDFLAGS, so that we don't get indirect
      libraries linked.
  * config/static-config.mk: Add MOZ_XFT_LIBS to STATIC_EXTRA_LIBS. It used to
    get linked as a side effect of linking to indirect libraries, but should
    be linked directly since Xft symbols are used.
  * debian/firefox-restart-required.update-notifier: Fixed the french
    translation. ;)
  * content/html/content/src/nsGenericHTMLElement.cpp,
    content/html/content/src/nsHTMLInputElement.cpp,
    dom/src/base/nsGlobalWindow.cpp: Fixed crasher and potential crashers.
    Reported bz#343953.

 -- Eric Dorland <eric@debian.org>  Sun,  9 Jul 2006 02:37:28 -0400

firefox (1.5.dfsg+1.5.0.4-1) unstable; urgency=low

  * The "Post-DebConf Hangover" release.
  
  [ Eric Dorland ]
  * New upstream release. Fixes various security issues. MFSA 2006-31 to
    MFSA 2006-43, excluding MFSA 2006-40.
  * debian/control:
    - Standards-Version to 3.7.2.0.
    - Set priority of -dbg to extra and Section to devel.
  * gfx/src/gtk/nsFontMetricsPango.cpp,
    intl/lwbrk/src/nsJISx4501LineBreaker.cpp,
    intl/unicharutil/util/nsUnicharUtils.h,
    intl/unicharutil/util/nsUnicharUtils.cpp,
    layout/generic/nsTextFrame.cpp: Patch from Jurij Smakov (from
    bz#161826) to fix alignment issues on sparc64. (Closes: #354725)

  [ Mike Hommey ]
  * Applied distclean patch from xulrunner (in
    debian/patches/01_distclean.dpatch), except for the javaxpcom stuff we
    don't build anyway.
  * browser/app/profile/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd},
    config/static-rules.mk: More cleaning for firefox.
  * nsprpub/configure: Apply change to nsprpub/configure.in.
    (Closes: #350616)
  * gfx/src/gtk/nsFontMetricsPango.cpp: Some more changes so that it
    actually builds without errors, and use PR_Malloc and PR_Free instead
    of malloc and free.

 -- Eric Dorland <eric@debian.org>  Fri,  2 Jun 2006 12:13:18 -0400

firefox (1.5.dfsg+1.5.0.3-2) unstable; urgency=low

  * debian/firefox.desktop: Add spanish translation, just in time for
    DebConf 6! Thanks Ian Jackson. (Closes: #365870)
  * debian/firefox-runner: Actually apply the patch from Morita Sho in
    #364566. I'm a moron. (Closes: #365956, #365960)
  * debian/control: Standards-Version to 3.7.1.0. Go policy team!

 -- Eric Dorland <eric@debian.org>  Thu,  4 May 2006 01:38:18 -0400

firefox (1.5.dfsg+1.5.0.3-1) unstable; urgency=critical

  * The "secure enough for ya!" release.
  * New upstream release. Contains security fixes, hence severity
    critical. 
    - Fixes CVE-2006-1993 aka MFSA 2006-30. (Closes: #364810)
  
  [ Mike Hommey ]
  * security/manager/Makefile.in, debian/firefox.install: Build and
    install the .chk file again. That will make the FIPS mode work again.
  * debian/control: Bumped Standards-Version to 3.7.0.0. No changes.
  * debian/rules: Fix the navigator.ProductSub value for dumb scripts.
    Closes: #364640, #365099. We now use the date of the client.mk file,
    which is likely to be the closest value to the release date, instead of
    useless build date.
    Add the debian version after the firefox version string.
  * debian/rules: Use dpkg-architecture to find out the host and build that
    we want to pass to the configure script. (Closes: #365738)

  [ Eric Dorland ]
  * debian/firefox-runner: 
    - Quote the APPLICATION_ID variable to handle profiles with a space 
      in the name. Inspired by Morita Sho's patch. (Closes: #364566)
    - echo MOZ_DISABLE_PANGO on verbose.
  * debian/rules: It's baaaackkk. Reenable xprint.

 -- Eric Dorland <eric@debian.org>  Wed,  3 May 2006 00:32:49 -0400

firefox (1.5.dfsg+1.5.0.2-3) unstable; urgency=low

  * debian/rules, debian/control: Build the -dbg package again.
  * debian/firefox.1: Fix some incorrect references to mozilla. Thanks
    Loïc Minier. (Closes: #364101)
  * debian/firefox-runner: Patch from Mikhail Gusarov to be able to use
    Network Audio Server's dsp wrapper. (Closes: #363124)
  * debian/firefox.install: Fix screwed up path to firefox.xpm. (Closes:
    #364359)
  * debian/README.Debian: Document that firefox doesn't allow connections
    on certain ports. Thanks W. Borgert. (Closes: #362785)

 -- Eric Dorland <eric@debian.org>  Sun, 23 Apr 2006 22:41:15 -0400

firefox (1.5.dfsg+1.5.0.2-2) unstable; urgency=critical

  * The "ftp-master's aren't my friends today" release.
  * debian/rules, debian/control: Don't build the -dbg package for now, to
    get around NEW queue processing.

 -- Eric Dorland <eric@debian.org>  Thu, 20 Apr 2006 22:33:18 -0400

firefox (1.5.dfsg+1.5.0.2-1) unstable; urgency=critical

  [ Eric Dorland ]
  * New upstream release. Contains security fixes, hence severity
    critical.
    - Fixes the following vulnerabilites (Thanks Alexander Sack for 
      compiling the list): CVE-2006-1724, CVE-2006-0884, 
      CVE-2006-1730, CVE-2006-1729, CVE-2006-1728, CVE-2006-1727, 
      CVE-2006-1045, CVE-2006-0748, CVE-2006-1726, CVE-2006-1725, 
      CVE-2005-2353. (Closes: #362656)
  * debian/firefox-runner: Patch from Paul Collins to fix some lingering
    ProfileManager launch issues. (Closes: #356250)
  * browser/components/preferences/privacy.xul,
    browser/locales/en-US/chrome/browser/preferences/preferences.dtd:
    Patch from Ian Jackson to make the preferences window bigger for
    people with high rez displays. His changelog entry reads:
    * Make Preferences window not chop off various elements:
      - specify a width of 50em instead of 42em
      - do not specify a height
      - add another <separator/> to the bottom of privacy.xul's prefpane.
        I have no idea why this is necessary :-(.
      Malone 36985.
  * configure.in, configure: Small typo in configure.in that wasn't
    setting TARGET_XPCOM_ABI properly and breaking binary extensions on
    some arches. (Closes: #359228)

  [ Mike Hommey ]
  * debian/rules: Disable elf-dynstr-gc, which is pretty useless nowadays.
  * security/coreconf/rules.mk: Fix perl code that got broken by newer make.
    Taken from bz#325148.
  * browser/app/Makefile.in: Apply patch from bz#314927 to install default.xpm
    in the correct place.
  * debian/rules, debian/firefox.dirs, debian/firefox.install: Updated to fit
    this change.
  * security/coreconf/rules.mk: Force use of the -g flag in the CFLAGS.
 
 -- Eric Dorland <eric@debian.org>  Sun, 16 Apr 2006 18:40:02 -0400

firefox (1.5.dfsg+1.5.0.1-5) unstable; urgency=low

  [ Mike Hommey ]
  * debian/rules:
    - Add -g to the build flags when building with DEB_BUILD_OPTIONS=nostrip.
      If we ask for nostrip, we want the debugging
      symbols, right? ;)
    - Changed the way we identificate ourselves in vendor.js.
  * layout/build/Makefile.in, layout/build/nsLayoutModule.cpp: Remove useless
    useragent setter at startup so that general.useragent.product and
    general.useragent.productSub set in our vendor.js preference file work at
    startup time.
  * security/coreconf/Linux.mk:
    - Patch from Martin Michlmayr for mips64 builds.
    - Don't use x86 as CPU_ARCH when building on an unsupported architecture.
  * security/manager/Makefile.in, security/nss/lib/ckfw/builtins/Makefile,
    security/nss/lib/manifest.mn: Don't build the stuff we don't need, and
    dynamically link libnssckbi to both libplc4 and libplds4 instead of
    linking statically.
  * debian/firefox.postinst, debian/firefox.prerm,
    debian/firefox-gnome-support.postinst, debian/firefox-gnome-support.prerm:
    Touch a .autoreg file at configure time, or removal of gnome-support and
    remove it with the package. This will trigger autoregistration of the
    components if the compreg.dat and xpti.dat files are older than the
    .autoreg file. We used to remove compatibility.ini for that reason, but
    stopped doing that because firefox was supposed to do that correctly,
    which actually only correctly works on new upstream versions, not new
    debian revisions, or installation of gnome-support.
  * xpfe/components/killAll/Makefile.in: Correctly install the killAll
    component.

  [ Eric Dorland ]
  * debian/control:
    - Set Section of firefox-gnome-support and
      mozilla-firefox-gnome-support to gnome.
    - Standards-Version to 3.6.2.2.
    - debhelper build-dep to >= 5.0.
    - Add firefox-dbg package.
  * debian/compat: Set to 5.
  * debian/rules:
    - Remove silly CVS tarball cleanup target.
    - Add arch-independant debhelper calls, and make other debhelper
      calls arch-dependent.
    - Add --dbg-package=firefox-dbg to dh_strip call.
    - Always build with the -g flag. (Based on a change Mike made)
    - Patch from Andreas Jochens to use -mminimal-toc when building on 
      ppc64. (Closes: #361035)
    - Use --disable-strip, --disable-strip-libs in configure parameters.
      Thanks Ian Jackson.
    - Use .upstream instead of .orig to make it more clear and not  
      confuse the clean target. Thanks Ian Jackson. (Closes: #362186)
    - Disable xprint support for now, while the Xorg 7 transition sorts 
      itself out. Should be reenabled next release.
  * debian/firefox.xpm: Add more Debian compliant menu icon.
  * debian/firefox.install, debian/rules: Install new Debian compliant
    icon.
  * debian/firefox.desktop: Add StartupNotify=true for pretty waiting
    cursor. Thanks Sven Arvidsson. (Closes: #361527)
  * debian/firefox-dom-inspector.preinst,
    debian/firefox-dom-inspector.links,
    debian/firefox-dom-inspector.install: Install non-architecture
    specific bits of the inspector into /usr/share/firefox.
  * debian/firefoxrc: Disable the dsp wrapper by default. esddsp is just
    too buggy to allow this to continue. May reenable later if they clean
    up their act. Leaving the bugs open for now.
  * debian/firefox.NEWS: 
    - Document the dsp wrapper changes.
    - Remove old mozilla-firefox entries.
  * debian/firefox.1: Fix typo of firefox, thanks Andrew Rendle. (Closes:
    #362413)
  * debian/firefox.install: We don't get .chk files anymore for some
    reason.

 -- Eric Dorland <eric@debian.org>  Fri, 14 Apr 2006 15:52:41 -0400

firefox (1.5.dfsg+1.5.0.1-4) unstable; urgency=low

  [ Mike Hommey ]
  * debian/firefox-runner, debian/firefox.1: Patch from Ian Jackson to
    make -P, -CreateProfile and -ProfileManager options correctly work
    again, and improve the manual page. (Closes: #356250)
  * debian/firefox.desktop:
    - Fix trivial syntax problems. (Closes: #356263)
    - Added Japanese and Korean translations.
  * debian/firefox.dirs: Removed remainings of the time when we had a file
    in /usr/sbin. (Closes: #356268)
  * debian/firefox-gnome-support.prerm,
    debian/firefox-gnome-support.postinst: Removed bashisms. (Closes:
    #349946)
  * debian/README.Debian:
    - Replaced the bug reporting information by an invitation to read
      /usr/share/bug/firefox/presubj. (Closes: #356269)
    - Changed the heading to "Firefox for Debian".

  [ Eric Dorland ]
  * debian/firefox-gnome-support.postinst,
    debian/firefox-gnome-support.prerm: Add forgotten #DEBHELPER# token.

 -- Eric Dorland <eric@debian.org>  Sun, 12 Mar 2006 21:34:14 -0500

firefox (1.5.dfsg+1.5.0.1-3) unstable; urgency=low

  [ Eric Dorland ]
  * debian/control: Use strict dependencies for the transition packages,
    no reason a transition package should be upgraded before the real
    package.
  * debian/README.Debian: Fix all references to
    /etc/mozilla-firefox/mozilla-firefoxrc. (Closes: #351956)
  * debian/firefox.desktop: Patch from Ian Jackson to add more
    translations and more inline with the GNOME HIG. (Closes: #351807)
  * widget/src/gtk2/nsWindow.cpp: Apply new ignore extended mouse buttons
    patch from Peter Colberg (Closes: #351972)
  * debian/firefox.1: Lower case first letter of -ContentLocale.
  * debian/firefox.1, debian/firefox-runner: Add -no-remote switch to turn
    on MOZ_NO_REMOTE. Use it for profile related commands as
    well. (Closes: #351717, #344849)
  * wikipedia.gif.uu, wikipedia.src, rules, firefox.install: Patch from
    Ian Jackson to add wikipedia search engine. (Closes: #354107)

  [ Mike Hommey ]
  * modules/libpref/src/init/all.js: Set default fonts for all languages to
    serif, sans-serif and monospace. It might solve a lot of fonts problems.
  * config/config.mk, config/make-jars.pl, configure.in,
    security/nss/lib/fortcrypt/swfort/pkcs11/config.mk,
    extensions/inspector/Makefile.in: Allow building without zip when
    building flat chrome.
  * configure: Ran autoconf accordingly to changes in configure.in.
  * debian/control: Removed build dependency on zip.
  * debian/rules: Build flat chrome.
  * debian/firefox.install: Changed wildcards accordingly.
  * config/rules.mk:
    + Don't build chromelist.txt files.
    + Fixed "jar" build so that inspector files don't get duplicated in the
      extension directory.

 -- Eric Dorland <eric@debian.org>  Sun, 26 Feb 2006 11:45:15 -0500

firefox (1.5.dfsg+1.5.0.1-2) unstable; urgency=low

  [ Mike Hommey ]
  * debian/firefox-runner: export MOZ_DISABLE_PANGO. (Closes: #351959)
  * debian/README.Debian: changed reference to the rc file in /etc.
    (Closes: #351956)
  
  [ Eric Dorland ]
  * debian/firefox.preinst: Fix {}'s bashism. Thanks Jeff King. (Closes:
    #351811)
  * modules/libpref/src/init/all.js: Make print.postscript.print_command
    space-safe. Thanks Ian Jackson. (Closes: #351809)
  * debian/firefox-runner: Don't completely override
    $MOZ_PLUGIN_PATH. Thanks Ian Jackson. (Closes: #351806)

 -- Eric Dorland <eric@debian.org>  Thu,  9 Feb 2006 01:23:35 -0500

firefox (1.5.dfsg+1.5.0.1-1) unstable; urgency=low

  * The "those Ubuntu guys are great after all" release.
  * New upstream release. (Closes: #351442)
  
  [ Mike Hommey ]
  * debian/presubj: Added indications to try to reproduce without extensions
    before actually filing a bug, and a hint to the safe mode.
  * debian/firefox.install: added the reporter chrome files. (Closes: #344888)
  * widget/src/gtk2/nsWindow.cpp: Revert additional stale patch for
    extended mouse buttons support.
  * debian/firefox.postinst, debian/firefox.prerm: unbashified.
    (Closes: #349946)
  * debian/control, debian/firefox-gnome-support.postinst,
    debian/firefox-gnome-support.prerm: Let the firefox-gnome-support
    package provide gnome-www-browser and handle a gnome-www-browser
    alternative. Thanks Loïc Minier. (Closes: #350788)
  * debian/firefox-runner: Enable Pango support by default. The
    MOZ_ENABLE_PANGO environment variable is now useless. (Closes: #338716)
  * debian/README.Debian: Change the paragraph about Pango to hint about
    the MOZ_DISABLE_PANGO variable. 

  [ Eric Dorland ]
  * content/events/src/nsEventStateManager.cpp,
    modules/libpref/src/init/all.js, widget/public/nsGUIEvent.h: Apply
    patch from Ian Jackson to revert a stale patch for multiple mouse
    button support that was fixed in a different way in 1.5
    (Closes: #348375)
  * debian/firefox.preinst: Check md5sum's of old conffiles before cp'ing
    them on upgrade. This won't stop all unnecessary conffile prompting in
    all situations (especially from really old versions), but should
    definitely should work for upgrading from testing or stable. (Closes:
    #345112)
  * debian/firefox.install:
    - Remove run-mozilla.sh. (Closes: #348902)
    - Reorganize things a bit.
    - Move profile into /etc/firefox here, instead of in the rules file.
  * debian/firefox.install, debian/firefox.preinst, debian/firefox.links,
    debian/firefox.dirs, debian/rules: Move chrome, defaults, greprefs
    into /usr/share/firefox for more FHS goodnesss.
  * debian/firefox.1: Document -new-tab and -new-window options, and
    remove deprecated -remote option. (Closes: #348699)
  * debian/firefox-runner: Apply patch to properly URL escape local
    files. Thanks Morita Sho. (Closes: #348451)
  * browser/app/profile/firefox.js:
    - Reallow 40-bit ciphers, since now firefox warns people who 
      use them. (Closes: #349624)
    - Enable bidi UI elements for our bi-directional friends. 
      (Closes: #348069)
  * debian/rules: Remove glob pattern from dh_install invocation. Thanks
    Ian Jackson. (Closes: #350571)
  * browser/base/content/aboutDialog.xul: Fix spurious scrollbar in the
    about dialog box. Thanks Ian Jackson. (Closes: #350608)
  * js/src/fdlibm/fdlibm.h: Patch to fix little endianess of
    mipsel. Thanks Ian Jackson and Thiemo Seufer. (Closes: #350621)
  * browser/base/content/search.xml: Patch from Ian Jackson to remove
    misleading Clear option from search box context menu. (Closes: #350611)
  * debian/watch: Fix regex to actually find the upstream tarballs.
  * modules/libpref/src/init/all.js: Cope better with printers with spaces
    in the name. Thanks Ian Jackson.
  * toolkit/components/passwordmgr/base/nsPasswordManager.cpp: Take patch
    from bz#235336 as suggested by Ian Jackson to allow password manager
    to work with sites that only have a password field, no username.

 -- Eric Dorland <eric@debian.org>  Mon,  6 Feb 2006 23:10:29 -0500

firefox (1.5.dfsg-4) unstable; urgency=low

  [ Eric Dorland ]
  * debian/control, debian/rules: 
    - Remove Kerberos options, it is now loaded dynamically.
    - Use /usr/share/firefox now for finding default.xpm.
  * debian/firefox.install, debian/firefox.links, debian/firefox.preinst:
    Start moving some clearly non-arch specific things
    (/usr/lib/firefox/searchplugins, /usr/lib/firefox/icons,
    /usr/lib/firefox/res) out of /usr/lib/firefox and into
    /usr/share/firefox to make things more FHS friendly. Can't believe no
    one ever called me on this before.
  * toolkit/components/remote/nsGTKRemoteService.cpp,
    widget/src/xremoteclient/XRemoteClient.cpp: Apply patch from bz#312154
    to fix remote interface on PPC (and probably other arches). (Closes:
    #343913)
  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_linux_m68k.cpp: Patch from
    Zack Weinberg to fix FTBFS on m68k. (Closes: #343687)
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_arm.cpp: Patch from Antti
    P Miettinen to fix small optimization problem with newer gcc's
    (Closes: #344846)

  [ Mike Hommey ]
  * debian/firefox-runner: Cleaned up now useless variables.

 -- Eric Dorland <eric@debian.org>  Tue, 10 Jan 2006 10:11:34 -0500

firefox (1.5.dfsg-3) unstable; urgency=low

  * debian/control: 
    - Need explicit build dependency on gtk >= 2.8.
    - Upgrade Standards-Version to 3.6.2.1. No changes.
    - Add compatibility packages for mozilla-firefox-dom-inspector
      and mozilla-firefox-gnome-support and make all the upgrade packages 
      Architecture: all. (Closes: #343879, #344379)
  * debian/watch: Add watch file.
  * debian/about.png.uu: Add uuencoded version of previous about box
    graphic.
  * debian/rules: uudecode and install the about.png into the right
    location.
  * debian/firefox-runner: Add MOZ_PLUGIN_PATH to include plugins at the
    old location for now. (Closes: #344085, #341682)
  * widget/src/gtk2/nsWindow.cpp: Patch from bz#305970 to fix broken
    contextual menu on Save File As. (Closes: #344430)

  * config/mkdepend/imakemdep.h, security/nss/lib/pki1/pki1.h: Remove some
    patches that are now useless (suggested by Mike Hommey).
  * mailnews/extensions/palmsync/palm.html,
    browser/themes/pinstripe/browser/browser.css,
    gfx/src/mac/nsNativeThemeMac.h,
    directory/c-sdk/ldap/docs/draft-ietf-ldapext-ldap-c-api-05.txt,
    layout/html/tests/table/bugs/bug123862.html,
    layout/html/tests/table/bugs/bug119786.html,
    layout/html/tests/table/bugs/bug101759.html,
    layout/html/tests/table/bugs/bug14489.html,
    layout/html/tests/table/bugs/bug222846.html,
    layout/html/tests/block/bugs/155333-1.html,
    layout/html/tests/block/bugs/185411-2.html,
    layout/html/tests/block/bugs/13599.html,
    layout/html/tests/block/bugs/53960.html,
    layout/html/tests/block/bugs/155333-2.html,
    layout/html/tests/block/bugs/38157-a.html,
    layout/html/tests/block/bugs/38157-b.html,
    layout/html/tests/block/bugs/46918.html,
    layout/html/tests/block/printing/145305-11.html,
    layout/html/tests/block/printing/145305-21.html,
    layout/html/tests/block/printing/145305-13.html,
    layout/html/tests/block/printing/145305-17.html,
    layout/html/tests/block/printing/145305-19.html,
    layout/html/tests/block/printing/145305-4.html,
    layout/html/tests/block/printing/127145-1.html,
    layout/html/tests/block/printing/145305-3.html,
    layout/html/tests/block/printing/145305-7.html,
    layout/html/tests/block/printing/145305-9.html,
    layout/html/tests/frameset/core/r3.html,
    layout/html/tests/frameset/core/r4.html,
    layout/html/tests/frameset/core/blank2.html,
    xpinstall/packager/stage_mfcembed.pl, xpinstall/packager/stage_gre.pl,
    embedding/qa/testembed/Tests.cpp,
    embedding/qa/testembed/nsihttpchanneltests.cpp,
    embedding/qa/testembed/BrowserImpl.cpp,
    embedding/qa/testembed/Tests.h, embedding/qa/testembed/QaUtils.cpp,
    embedding/qa/testembed/resource.h,
    embedding/qa/testembed/DomWindow.cpp,
    embedding/qa/testembed/QaUtils.h, build/unix/abs2rel.pl,
    xpfe/bootstrap/icons/windows/readme.txt,
    security/nss/cmd/ssltap/ssltap-manual.html: Fix mess my subversion
    repository made of line endings. This should reduce the size of the
    diff.gz dramatically.

 -- Eric Dorland <eric@debian.org>  Sat, 24 Dec 2005 03:23:02 -0500

firefox (1.5.dfsg-2) unstable; urgency=low

  * browser/locales/en-US/chrome/branding/brand.dtd,
    browser/locales/en-US/chrome/branding/brand.properties: Change brand
    name from Deer Park to Firefox. About box graphic still needs to be
    fixed. *grumble* *grumble* (Closes: #343704)

 -- Eric Dorland <eric@debian.org>  Sat, 17 Dec 2005 13:45:14 -0500

firefox (1.5.dfsg-1) unstable; urgency=low

  * New upstream release. No actual code changes from RC3. Took the
    opportunity to completely empty the /other-licenses directory of the
    upstream tarball.
  * configure, configure.in: Change MOZ_APP_DISPLAYNAME to Firefox, so we
    can be called Firefox without using
    --enable-official-branding. *grumble*
  * config/autoconf.mk.in, gfx/src/gtk/mozilla-decoder.cpp, configure.in:
    Apply patch from bz#305185 to fix problems building against gtk+ 2.8.
  * debian/control: 
    - Build-Depend on libfreetype6-dev since we do link
      against it directly.
    - Add mozilla-firefox package for easy transition. 
    - Conflict against older mozilla-firefox packages.
  * debian/firefox-runner: 
    - Fix typo. (Closes: #341113)
    - Check /usr/lib/mozilla-firefox/plugins for plugins too for the 
      time being. (Closes: #341682)
  * debian/firefox-dom-inspector.preinst: Remove, not needed since the
    name change.
  * debian/firefox.preinst: 
    - Remove old upgrade code.
    - Move old mozilla-firefox configs into place on install.
  * debian/mozilla-firefox.preinst: Move upgrade code in here. Remove
    mozilla-firefox alternative.
  * debian/mozilla-firefox.postrm: Remove /etc/mozilla-firefox on purge.
  
  * Some patches missed when merging from Mike Hommey:
  * browser/locales/en-US/searchplugins/answers.src: Change updateDays to
    0.
  * config/mkdepend/imakemdep.h: Define for amd64.
  * configure, configure.in: Visibility patch for recent gcc's. (Closes:
    #341766)
  * modules/libpref/src/nsPrefService.cpp: Patch to load preferences from
    defaults/syspref.
  * content/events/src/nsEventStateManager.cpp: Extended mouse events
    patch.
  * gfx/idl/nsIFreeType2.idl, gfx/src/freetype/nsFreeType.cpp,
    gfx/src/freetype/nsFreeType.h, gfx/src/ps/nsFontMetricsPS.h,
    gfx/src/x11shared/nsFontFreeType.cpp,
    gfx/src/x11shared/nsFontFreeType.h,
    layout/svg/renderer/src/libart/nsSVGLibartGlyphMetricsFT.cpp: Patch to
    use new freetype API.

 -- Eric Dorland <eric@debian.org>  Fri, 16 Dec 2005 11:37:23 -0500

firefox (1.4.99+1.5rc3.dfsg-2) unstable; urgency=low

  * The "Grand Renaming" release. Thanks to Mike Hommey for sherperding
    the 1.5 series through experimental. Now it's my turn to muck it up. A
    transition packages will be in the next release.
  * debian/mozilla-firefox*: Rename to firefox*.
  * debian/firefox.install, debian/firefox-dom-inspector.install,
    debian/firefox-gnome-support.install, debian/firefox-runner,
    firefox-xremote-client, firefox.1, firefox.desktop, firefox.dirs,
    debian/firefox.js, debian/firefox.links, debian/firefox.manpages,
    debian/firefox.menu, debian/firefox.mime, debian/firefox.postinst,
    debian/firefox.prerm, debian/firefox.png.uu, debian/README.Debian,
    debian/control, debian/rules: Search/Replace mozilla-firefox ->
    firefox where appropriate.
  * debian/firefox.links: Link old icon name to new.
  * debian/README.Debian: Fix path to .mozilla/firefox/rc. (Closes:
    #335433)
  * config/autoconf.mk.in: Set mozappdir to /usr/lib/firefox.
  
 -- Eric Dorland <eric@debian.org>  Sun, 27 Nov 2005 20:03:02 -0500

mozilla-firefox (1.4.99+1.5rc3.dfsg-1) experimental; urgency=low

  * New upstream 1.5 preview release. Release Candidate 3.
  * debian/mozilla-firefox-runner: Removed the ping stuff, it's now done by
    firefox itself.

 -- Mike Hommey <glandium@debian.org>  Fri, 18 Nov 2005 07:24:05 +0100

mozilla-firefox (1.4.99+1.5rc2.dfsg-1) experimental; urgency=low

  * New upstream 1.5 preview release. Release Candidate 2.
  * xpcom/typelib/xpidl/xpidl.c: Fix crash when no file is given on the
    command line (Closes: #323639). Also fix the error message about extra
    arguments given showing before the crash.
  * configure.in, configure: Work around dash's bug #337294 so that we can
    build fine when sh is dash (Closes: #211010, #256384).
  * debian/mozilla-firefox-runner:
    - Removed the code to detect the JVM and set LD_ASSUME_KERNEL=2.2.5 for
      b0rked 1.3 JVMs: it's been a long time they've not been ABI compatible.
    - Removed setting of MOZILLA_FIVE_HOME. We already have a default one
      built-in.
    - Removed /usr/lib/mozilla/plugins from EXTENT_LD_LIB_PATH, since we never
      get the plugins from there.
    - Removed cleanup of the profile. It is correctly done by firefox, now.

 -- Mike Hommey <glandium@debian.org>  Fri, 11 Nov 2005 08:07:05 +0100

mozilla-firefox (1.4.99+1.5rc1.dfsg-1) experimental; urgency=low

  * New upstream 1.5 preview release. Release Candidate 1.
  * debian/mozilla-firefox.install: Don't install
    /usr/lib/mozilla-firefox/extensions/reporter@mozilla.org, it got moved in
    the chrome.

 -- Mike Hommey <glandium@debian.org>  Tue,  1 Nov 2005 22:01:15 +0100

mozilla-firefox (1.4.99+1.5beta2.dfsg-1) experimental; urgency=low

  * build/unix/run-mozilla.sh, netwerk/base/src/nsStandardURL.cpp:
    Reverted debian changes: they got applied upstream.
  * configure: Applied configure.in changes by hand.
  * debian/rules: Disabled both the installer and the updater, we don't need
    them.

 -- Mike Hommey <glandium@debian.org>  Fri,  7 Oct 2005 15:06:05 +0200

mozilla-firefox (1.4.99+1.5beta1.dfsg-5) experimental; urgency=low

  * debian/control: Bumped Standards-Version to 3.6.2.
  * nsprpub/configure.in: Reverted changed.
  * configure.in: Use -fvisibility=hidden in all cases. There is another bug
    in gcc that makes it generate position dependent code when using the
    system wrappers.
  * configure, nsprpub/configure: Applied configure.in changes with
    autoconf2.13.
  * debian/rules: Put back the /usr/share/pixmaps/mozilla-firefox.xpm file.

 -- Mike Hommey <glandium@debian.org>  Mon,  3 Oct 2005 18:46:50 +0200

mozilla-firefox (1.4.99+1.5beta1.dfsg-4) experimental; urgency=low

  * xpcom/typelib/xpt/src/Makefile.in: Reverted changes.
  * configure.in, nsprpub/configure.in: Added a detection of the gcc bug about
    visibility for builtins, and use -fvisibility=hidden instead of the system
    wrappers in case the bug is found.
  * configure, nsprpub/configure: Applied configure.in changes with
    autoconf2.13. (Really closes: #329642)

 -- Mike Hommey <glandium@debian.org>  Tue, 27 Sep 2005 20:16:34 +0200

mozilla-firefox (1.4.99+1.5beta1.dfsg-3) experimental; urgency=low

  * Sync with unstable branch.
  * xpcom/typelib/xpt/src/Makefile.in: disable visibility stuff for ppc, as a
    workaround for FTBFS. (Closes: #329642)

 -- Mike Hommey <glandium@debian.org>  Mon, 26 Sep 2005 18:35:11 +0200

mozilla-firefox (1.0.7-1) unstable; urgency=high

  * New upstream release. Contains fixes for various security issues.
  * debian/mozilla-firefox-runner: Remove /usr/lib from
    LD_LIBRARY_PATH. (Closes: #321789)

 -- Eric Dorland <eric@debian.org>  Thu, 22 Sep 2005 01:23:10 -0400

mozilla-firefox (1.4.99+1.5beta1.dfsg-2) experimental; urgency=low

  * debian/rules: enabled support for canvas.

 -- Mike Hommey <glandium@debian.org>  Tue, 20 Sep 2005 07:56:01 +0200

mozilla-firefox (1.4.99+1.5beta1.dfsg-1) experimental; urgency=low

  * Cleaned-up source tarball from trademarked content and CVS directories.
  * debian/mozilla-firefox-small.xpm, debian/mozilla-firefox.xpm: Removed.
  * debian/mozilla-firefox.dirs, debian/rules:
    + Create /usr/lib/mozilla-firefox/chrome/icons/default and move
      default.xpm in it. (Closes: #327828)
    + Stop using our own xpm icons, upstream provide them, now.
  * debian/rules: changed the build system a bit.
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_asm_parisc_linux.s,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_parisc_linux.s,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_mips.s: Somewhat these
    files disappeared. Put them back. (Closes: #328074)

 -- Mike Hommey <glandium@debian.org>  Tue, 13 Sep 2005 18:25:48 +0200

mozilla-firefox (1.4.99+1.5beta1-2) experimental; urgency=critical

  * Sync with unstable branch.
  * netwerk/base/src/nsStandardURL.cpp: Apply the patch for the 1.8 branch
    from bz#307259 to fix CAN-2005-2871. (Closes: #327452)
  * debian/mozilla-firefox-gnome-support.install, debian/rules: Move out
    imgicon module in mozilla-firefox-gnome-support. (Closes: #327451)

 -- Mike Hommey <glandium@debian.org>  Sun, 11 Sep 2005 10:45:34 +0200

mozilla-firefox (1.0.6-5) unstable; urgency=critical

  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp: Fix for previous
    arm fix. Thanks Steve. (Closes: #325535)
  * netwerk/base/src/nsStandardURL.cpp: Patch from bz#307259 to fix
    CAN-2005-2871, a buffer overflow vulnerability in IDN
    processing. (Closes: #327452)

 -- Eric Dorland <eric@debian.org>  Sat, 10 Sep 2005 23:03:26 -0400

mozilla-firefox (1.4.99+1.5beta1-1) experimental; urgency=low

  * New upstream beta release.
    + Find toolbar doesn't show up when in text fields. Closes: #280852.
    + Better use of GTK2 themes. The most common case was highlighted menu
      item text appearing in white on a white background. Closes: #223696,
      #257430, #258181, #266334, #278559, #289326, #297320, #310098.
    + Download manager correctly closes. Closes: #259015, #269975.
    + Doesn't crash with the http://ln.hixie.ch/resources/style/orange
      stylesheet. Closes: #277987.
    + Locale extensions can properly be disabled. Closes: #279749 (to check).
    + Doesn't crash on
      http://einsteinmg.dyndns.org/cgi-bin/remangle.cgi?=0x27b9b660 anymore.
      Closes: #294372.
    + Downloads don't freeze when a modal window opens. Closes: #211332.
    + Use GTK stock images. Closes: #281660.
  * Sync with unstable branch changes.
  * browser/app/profile/firefox.js, debian/firefox.js:
    + Removed outdated extensions.update.autoUpdateEnabled and
      extensions.update.autoUpdate;
    + Removed general.useragent.locale.
    + Allow extensions updates. It works correctly with system-wide installed
      ones, now.
  * netwerk/protocol/http/src/nsHttpConnectionMgr.cpp,
    nsprpub/pr/include/md/_linux.cfg, widget/src/gtk2/mozdrawingarea.c,
    widget/src/gtk2/nsDragService.cpp: Reversed changes, since they got
    applied upstream.
  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp: correctly set
    __attribute__. Closes: #325535.
  * debian/rules:
    + set --enable-extensions=default instead of a full list.
      We will get the default set of extensions provided by upstream, and
      won't need to check if they changed.
    + set --enable-pango.
    + set --enable-system-cairo.
  * debian/control: added build dependency on libgnomeui-dev and libcairo2-dev.
  * debian/mozilla-firefox.install, debian/rules: don't install files in
    /usr/lib/mozilla-firefox/chrome/icons/ anymore.
  * debian/mozilla-firefox-runner: Force MOZ_DISABLE_PANGO to 1 if
    MOZ_ENABLE_PANGO is not set.
  * debian/README.Debian:
    + Removed the note about IDN, it is now enabled by default, with correct
      whitelist set.
    + Added a note about MOZ_ENABLE_PANGO.
    + Changed notes about application update, extensions, and packaged
      extensions.
  * modules/libpref/src/init/all.js:
    + Set general.config.obscure_value to 0, we don't care about the config
      file not to be "obscured".
    + Set general.config.filename to firefox.cfg.
  * debian/firefox.cfg: Create configuration to lock some properties.
  * debian/mozilla-firefox.install: Install this firefox.cfg in
    /usr/lib/mozilla-firefox

 -- Mike Hommey <glandium@debian.org>  Fri,  9 Sep 2005 17:40:40 +0200

mozilla-firefox (1.0.6-4) unstable; urgency=low

  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_linux_alpha.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_arm.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_linux_alpha.cpp: Patch
    from Steve Langasek to fix unused vs. used gcc attribute on alpha and
    arm. (Closes: #325535)
  * browser/app/profile/firefox.js: Revert patch to remove the "I'm
    feeling lucky" search. Some like it, some hate it, so upstream
    behaviour wins. If you still feel strongly about it, make your case
    upstream.
  * gfx/src/gtk/nsFontMetricsXft.cpp: Apply patch from bz#252033 to work
    around a bug in XRender that might be causing #319349. 

 -- Eric Dorland <eric@debian.org>  Tue,  6 Sep 2005 02:10:07 -0400

mozilla-firefox (1.0.99+deerpark-alpha2-2) experimental; urgency=low

  * Sync with unstable branch changes, except the controversial "I'm feeling
    lucky" change. I prefer waiting for the controversy to get to a
    conclusion.
  * debian/rules, debian/control: Remove build dependency on libmng-dev and
    the --with-system-mng option to configure, the MNG support has been
    removed upstream.
  * debian/rules: Explicitely set the svg-renderer as cairo. It will use an
    old cairo version bundled with firefox, but there's no other solution for
    the moment. We have to wait for upstream 0.9.x and greater support
    (hoped for 1.5).

 -- Mike Hommey <glandium@debian.org>  Sun,  4 Sep 2005 09:01:54 +0200

mozilla-firefox (1.0.6-3) unstable; urgency=low

  * debian/rules, nsprpub/pr/include/md/_linux.cfg,
    security/coreconf/Linux.mk: Apply patch from Andreas Jochens to allow
    ppc64 builds. (Closes: #322617)
  * debian/mozilla-firefox.prerm: Move -depth option to find to suppress
    warnings. Thanks Mike Hommey.
  * debian/presubj: Have bugzilla bug URL point to a page where you can
    enter a bug.
  * browser/app/profile/firefox.js: removed the "I'm feeling lucky" from
    the keyword.URL, so now if you enter search terms in the address bar
    you will be presented with search results and not taken to the first
    result. Thanks Torok Edwin. (Closes: #321823)

 -- Eric Dorland <eric@debian.org>  Mon, 22 Aug 2005 01:20:28 -0400

mozilla-firefox (1.0.6-2) unstable; urgency=medium

  * modules/libpr0n/src/imgLoader.cpp, modules/libpr0n/src/imgLoader.h:
    Apply ported patch from Serge Belyshev from bz#293307 to fix problem
    with gcc-4.0 on amd64. (Closes: #319336)
  * debian/rules: Remove silly --enable-freetype configure line. Thanks
    Antony Gelberg. (Closes: #319886)

 -- Eric Dorland <eric@debian.org>  Sat, 30 Jul 2005 02:11:03 -0400

mozilla-firefox (1.0.6-1) unstable; urgency=low

  * New upstream release. (Closes: #318672)
  * debian/rules: Remove hack to use gcc 3.4 on amd64, since now we're all
    on gcc 4.0. (Closes: #318684)
  * debian/control:
    - Remove gcc 3.4 build depends on amd64
    - Explicitly build depend on libxinerama-dev. 
  * gfx/src/gtk/nsScreenGtk.cpp: Patch from Loic Minier to fix
    gdk_property_get warnings.
  * widget/src/gtk2/mozdrawingarea.c: Patch from Loic Minier to fix
    crashes under GTK 2.7. (Closes: #318903)

 -- Eric Dorland <eric@debian.org>  Wed, 20 Jul 2005 02:57:44 -0400

mozilla-firefox (1.0.99+deerpark-alpha2-1) experimental; urgency=low

  * New upstream alpha release. Be aware that you WILL have troubles with
    debian packages for firefox extensions.
  * Reverted patches that got incorporated upstream.
  * content/events/src/nsEventStateManager.cpp: Some changes to the previous
    patch to fit changes in API.
  * debian/update-mozilla-firefox-chrome,
    debian/update-mozilla-firefox-chrome.8,
    debian/mozilla-firefox-dom-inspector.post(inst|rm),
    debian/mozilla-firefox-gnome-support.post(inst|rm),
    debian/theme/*, debian/inspector/*: Removed.
  * debian/mozilla-firefox.postinst: Removed call to
    update-mozilla-firefox-chrome.
  * debian/mozilla-firefox-dom-inspector.install: Only install files from
    /usr/lib/mozilla-firefox/extensions/inspector@mozilla.org
  * debian/mozilla-firefox.dirs: Don't create /var/lib/mozilla-firefox/*,
    /usr/lib/mozilla-firefox/extensions nor /usr/lib/mozilla-firefox/plugins.
  * debian/mozilla-firefox.install:
    - Don't install regxpchrome, chrome/pipnss.jar and chrome/help.jar which
      don't exist anymore.
    - Install manifest files in addition to jar files in chrome.
    - Install classic.jar in the normal chrome directory (awaiting EM
      modifications so that it can actually go back in the extensions
      directory).
    - Don't install debian/theme/00classic and debian/theme/Uninstall,
      which got removed.
    - Get the theme in the correct directory (it's not in
      defaults/profile/extensions anymore).
    - Install the reporter extension.
    - Selectively install subdirectories of /usr/lib/mozilla-firefox/defaults,
      since some of them are useless.
    - Install the unixprint plugin.
  * debian/mozilla-firefox.manpages: Removed manual page for
    update-mozilla-firefox-chrome.
  * debian/mozilla-firefox.links: Removed all links in
    /var/lib/mozilla-firefox/.
  * debian/rules:
    - Enable freetype in the build, we'll see if deerpark is any better than
      1.0.x.
    - Commented out OPTFLAGS set for some architectures. We will see if gcc
      4.0 is doing any better.
    - Enabled SVG support. (Closes: #215990)
    - Enabled some more extensions to fit extensions provided by upstream.
    - Added needed --enable-application=browser to the ./configure call.
    - Don't install update-mozilla-firefox-chrome.
    - Don't create installed-chrome.txt.
    - Don't remove installed-extensions.txt, it doesn't exist anyway.
    - Don't move classic theme's install.rdf, it's already at the correct
      place.
    - Remove unneeded removals of preferences files which are not there
      anymore.
  * debian/mozilla-firefox.preinst: Clean-up old generated files (those in
    /var/lib/mozilla-firefox and
    /usr/lib/mozilla-firefox/extensions/*/uninstall/Uninstall. (Note that for
    the latter, some packages do provide them, but they were overwritten by
    update-mozilla-firefox-chrome. They have actually no use, and it is safe
    to remove them. Extensions packages will eventually remove them anyway)
  * debian/mozilla-firefox.prerm: Put -depth option of find before -type d.

 -- Mike Hommey <glandium@debian.org>  Sat, 16 Jul 2005 10:18:40 +0200

mozilla-firefox (1.0.5-1) unstable; urgency=high

  * New upstream release, fixes security issues. (Closes: #318061)
  * debian/rules: Disable freetype in the build for the time being. This
    *might* break printing in some cases.
  * gfx/idl/nsIFreeType2.idl, gfx/src/freetype/nsFreeType.cpp,
    gfx/src/freetype/nsFreeType.h, gfx/src/ps/nsFontMetricsPS.cpp,
    gfx/src/ps/nsFontMetricsPS.h, gfx/src/x11shared/nsFontFreeType.cpp,
    gfx/src/x11shared/nsFontFreeType.h,
    layout/svg/renderer/src/libart/nsSVGLibartGlyphMetricsFT.cpp: Patch
    from bz#234035 to try to get building with the new freetype. (Closes:
    #314243)

 -- Eric Dorland <eric@debian.org>  Sat, 16 Jul 2005 00:43:54 -0400

mozilla-firefox (1.0.4-3) unstable; urgency=low

  * debian/mozilla-firefox.desktop: Add Czech translation from Jan
    Outrata. (Closes: #311376)
  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_ipf64.s,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_ipf64.cpp,
    xpcom/reflect/xptcall/public/xptcstubsdecl.inc: Revert patch from
    David Mosberger for 7+ args on ia64 that was added 1.0.3-2.
  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_ipf32.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_ipf32.s,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_ipf64.s,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_ipf64.cpp,
    xpcom/reflect/xptcall/public/genstubs.pl: Better patch from bz#291378
    which has been accepted upstream for ia64 7+ args fix.
  * xpcom/reflect/xptcall/public/xptcstubsdecl.inc: Call genstubs.pl to
    regenerate this file.
  * dom/src/base/nsGlobalWindow.cpp,
    embedding/components/windowwatcher/src/nsWindowWatcher.cpp: Fix
    injection spoofing, patch from bz#296850. Fixes CAN-2004-0718. 

 -- Eric Dorland <eric@debian.org>  Thu,  9 Jun 2005 23:54:41 -0400

mozilla-firefox (1.0.4-2) unstable; urgency=critical

  * debian/control: Build-depend on libxft-dev not libxft2-dev to appease
    finicky sparc buildd.

 -- Eric Dorland <eric@debian.org>  Mon, 16 May 2005 21:17:57 -0400

mozilla-firefox (1.0.4-1) unstable; urgency=critical

  * New upstream release. Fixes CAN-2005-1477 and CAN-2005-1476. (Closes: #308620)
  * debian/update-mozilla-firefox-chrome.8: Patch from A Costa to fix the
    spelling of maintenace. (Closes: #305968)
  * debian/mozilla-firefox.desktop: Patch from Steinar H. Gunderson to add
    a Norwegian translation. (Closes: #305983)

 -- Eric Dorland <eric@debian.org>  Thu, 12 May 2005 22:59:47 -0400

mozilla-firefox (1.0.3-2) unstable; urgency=high

  * browser/app/profile/firefox.js: Disable SSLv2 and 40-bit ciphers by
    default. 
  * debian/mozilla-firefox.NEWS: Explain the SSL change.
  * extensions/transformiix/source/base/Double.cpp: Patch from David
    Mosberger-Tang (fixed up by me) to fix unaligned access on ia64 (and
    perhaps other platforms). (Closes: #303518)
  * xpcom/reflect/xptcall/public/xptcstubsdecl.inc,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_ipf64.s,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_ipf64.cpp: Another patch
    from David Mosberger-Tang to fix extension loading on ia64. (Closes:
    #303515)

 -- Eric Dorland <eric@debian.org>  Thu, 21 Apr 2005 01:25:02 -0400

mozilla-firefox (1.0.3-1) unstable; urgency=low

  * New upstream release, fixes various security issues, so urgency high.
  * js/src/fdlibm/fdlibm.h: Fix from David Mosberger to define ia64 as
    little-endian arch (also added for mipsel). (Closes: #303438)

 -- Eric Dorland <eric@debian.org>  Sun, 17 Apr 2005 23:13:01 -0400

mozilla-firefox (1.0.2-3) unstable; urgency=high

  * gfx/src/freetype/nsFreeType.cpp,
    netwerk/protocol/http/src/nsHttpConnectionMgr.cpp,
    security/nss/lib/pki1/oiddata.h, security/nss/lib/pki1/pki1.h,
    widget/src/gtk2/nsDragService.cpp: Fixes for gcc-4.0,
    bz#289238. (Closes: #301485)
  * js/src/jsstr.c: Fix for JS memory access security bug, patch from
    bz#288688. (Closes: #302775)

 -- Eric Dorland <eric@debian.org>  Wed,  6 Apr 2005 01:36:11 -0400

mozilla-firefox (1.0.2-2) unstable; urgency=high

  * Last upload should of been marked urgency=high because of the security
    fixes.
  * debian/mozilla-firefox.postinst: Fix ridiculous typos. (Closes:
    #300685)
  * debian/mozilla-firefox-runner: Use pgrep to detect esd and arts
    instead. Thanks Craig Small for the advice. (Closes: #302086)

 -- Eric Dorland <eric@debian.org>  Fri,  1 Apr 2005 01:18:18 -0500

mozilla-firefox (1.0.2-1) unstable; urgency=low

  * New upstream release. Fixes CAN-2005-0399, CAN-2005-0401,
    CAN-2005-0402. (Closes: #301243)
  * debian/control: Update suggest for xprint rename. (Closes: #300976)
  * xpcom/reflect/xptcall/src/md/unix/{Makefile.in,
    xptcinvoke_asm_parisc_linux.s, xptcstubs_asm_parisc_linux.s}: Apply
    patch from Ivar (Contributed by Randolph Chung) to fix Firefox on
    hppa. (Closes: #286038)

 -- Eric Dorland <eric@debian.org>  Fri, 25 Mar 2005 02:30:10 -0500

mozilla-firefox (1.0.1-3) unstable; urgency=low

  * widget/src/gtk2/nsGtkKeyUtils.cpp: Patch from bz#108170 to fix broken
    keymap for Germans. (Closes: #299781)
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in: avoid
    crashing when extension's install.rdf is broken. (Closes: #298796)
    (MH)
  * debian/mozilla-firefox.prerm: Remove
    /usr/lib/mozilla-firefox/defaults/profile/extensions/Extensions.rdf on
    uninstall. (Closes: #298636)
  * debian/mozilla-firefox.postinst: Add little echo to tell people to
    restart firefox after upgrades.
  * debian/presubj: Add a note there about restarting firefox before
    submitting bugs.
  * debian/mozilla-firefox-runner: Properly quote $@ expansion. (Closes:
    #300195)
  * browser/locales/en-US/searchplugins/
    {yahoo.src,google.src,eBay.src,dictionary.src,creativecommons.src,
    amazondotcom.src}: Set updateCheckDays to 0, which avoids duplicated
    search entries in the menu. (Closes: #299006, #299813)

 -- Eric Dorland <eric@debian.org>  Sun, 20 Mar 2005 17:08:12 -0500

mozilla-firefox (1.0.1-2) unstable; urgency=high

  * Changes by Mike Hommey:
  * Urgency: high due to RC bug fix.
  * debian/update-mozilla-firefox-chrome: Re-initialize Extensions.rdf
    inside the script instead of relying on mozilla-firefox's default
    behaviour, which just fails when defaults/profile/extensions/ \
    Extensions.rdf doesn't exist (and it seems some people like to remove
    files in /etc). (Closes: #294175)
  
  * Changes by Eric Dorland:
  * debian/mozilla-firefox.menu: Capitalize "browsers". Thanks Gerfried
    Fuchs.
  * debian/mozilla-firefox-runner: Fix from Marc Horowitz to fix sound
    device detection. (Closes: #297088)
  * toolkit/content/widgets/tabbrowser.xml: Apply patch from bz#283063, to
    fix a memory leak when closing tabs. (Closes: #296749)
  * xpfe/global/resources/content/bindings/browser.xml,
    xpfe/global/resources/content/bindings/tabbrowser.xml,
    toolkit/content/widgets/browser.xml,
    toolkit/content/widgets/tabbrowser.xml: Apply patches from bz#131456
    to fix various tab related memory leaks. (Closes: #280586)
  * netwerk/protocol/http/src/nsHttpHandler.cpp: Patch from bz#265536 to
    differentiate between AMD64 and i386. (Closes: #282592)

 -- Eric Dorland <eric@debian.org>  Sat,  5 Mar 2005 18:46:09 -0500

mozilla-firefox (1.0.1-1) unstable; urgency=high

  * New upstream release. (Closes: #296851)
    - This release fixes the Secunia window injection bug, 
      CAN-2004-1156. (Closes: #293664)
  
  * Changes by Mike Hommey: 
  * debian/rules: Some clean-up.
  * debian/control: Changed my maintainer address.
  * debian/README.Debian: Add a note about automatic updates for
    extensions. (Closes: #296761)

  * Changes by Eric Dorland:
  * browser/app/profile/firefox.js: Remove disable IDN pref, it's the
    default now anyway.

 -- Eric Dorland <eric@debian.org>  Tue,  1 Mar 2005 02:03:48 -0500

mozilla-firefox (1.0+dfsg.1-6) unstable; urgency=high

  * The "And I thought IE had security bugs!" release.
  * toolkit/content/widgets/tabbrowser.xml,
    xpfe/global/resources/content/bindings/tabbrowser.xml: Fix
    "Firetabbing" vulnerability from bugzilla#280056, fixes
    CAN-2005-0231. (Closes: #294415)
  * modules/plugin/base/src/nsPluginHostImpl.cpp: Fix "Fireflashing"
    vulnerability from bugzilla#280664, fixes CAN-2005-0232. (Also Closes:
    #294415)
  * build/unix/run-mozilla.sh: Patch from Javier Fernández-Sanguino Peña
    to fix insecure temp file usage in run-mozilla.sh. (Closes: #294127)
  * netwerk/base/src/nsStandardURL.cpp, netwerk/base/src/nsStandardURL.h:
    Patch from bugzilla#261934 to make the network.enableIDN preference
    work and again.
  * browser/app/profile/firefox.js: Disable IDN by default. This doesn't
    close #293975, but drops its severity. 
  * debian/README.Debian: Add warning and describe how to enable IDN.

 -- Eric Dorland <eric@debian.org>  Wed,  9 Feb 2005 22:56:17 -0500

mozilla-firefox (1.0+dfsg.1-5) unstable; urgency=low

  * debian/mozilla-firefox.desktop: Don't translate "Mozilla Firefox" into
    French.
  * browser/app/profile/firefox.js: Set mozilla.widget.raise-on-setfocus
    to false to prevent unecessary window raising. (Closes: #292049)
  * debian/rules: Don't compile statically on mips and mipsel, since it's
    broken for now.

 -- Eric Dorland <eric@debian.org>  Sun,  6 Feb 2005 15:02:36 -0500

mozilla-firefox (1.0+dfsg.1-4) unstable; urgency=low

  * debian/mozilla-firefox.desktop: Add French translations from Jerome
    Warnier. I will accept more, but closing this bug. (Closes: #292506)
  * debian/README.Debian: Update the Emacs keybindings instructions.
    (Closes: #291691)
  * debian/mozilla-firefox.1: 
    - Remove -splash from the manpage, it has never worked. (Closes: 
      #287088)
    - Add units to -height and -width description. (Closes: #285142)

 -- Eric Dorland <eric@debian.org>  Wed,  2 Feb 2005 01:42:53 -0500

mozilla-firefox (1.0+dfsg.1-3) experimental; urgency=low

  * debian/mozilla-firefox.desktop: Add %u to the exec line so that apps
    know it can handle URLs. (Closes: #290132)
  * debian/README.Debian: 
    - Improve button reversal instructions. Thanks Christian Mayrhuber
    - Fix reference to ~/.firefox. 
  * debian/rules: Enable static building. This will build firefox as one
    large binary (mostly) and should speed a few things up, especially
    program load time. I'd like to hear about any speedup (or slow down)
    you exprience. Porters, please build this for your arch to make sure
    this doesn't break anything.

 -- Eric Dorland <eric@debian.org>  Thu, 20 Jan 2005 01:40:34 -0500

mozilla-firefox (1.0+dfsg.1-2) unstable; urgency=medium

  * debian/mozilla-firefox-gnome-support.postrm,
    debian/mozilla-firefox-dom-inspector.postrm: Don't die if
    update-mozilla-firefox-chrome dies. (Closes: #287355)

 -- Eric Dorland <eric@debian.org>  Sun,  9 Jan 2005 23:51:10 -0500

mozilla-firefox (1.0+dfsg.1-1) unstable; urgency=low

  * Not a new upstream release.
  * other-licenses/branding/firefox, other-licenses/7zstub/firefox: Remove
    these from the .orig.tar.gz, since they are not DFSG-free. We're not
    using the files anyway, so out they go. (Not sure the 7zstub stuff is
    non-free, but it's Windows only so no harm)
  * debian/rules: 
    - Remove explicit low-optimization on alpha, since Falk
      Hueffner claims it works.
    - Move entire defaults/profile directory into /etc/mozilla-firefox, 
      rather than just the bookmarks.html. (Closes: #285538)
  * debian/mozilla-firefox.links: Link entire defaults/profile now.
  * debian/mozilla-firefox.preinst: Add upgrade code to remove old
    defaults/profile to make way for new symlink.
  * debian/mozilla-firefox.dirs: Just create etc/mozilla-firefox.

 -- Eric Dorland <eric@debian.org>  Sun, 19 Dec 2004 01:31:44 -0500

mozilla-firefox (1.0-5) unstable; urgency=medium

  * Changes by Mike Hommey:
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in: Make the
    extensions upgrade work again. (Closes: #282143)
  * debian/rules: Better DEB_BUILD_OPTIONS handling, better debugging
    build (DEB_BUILD_OPTIONS="nostrip debug")
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in,
    toolkit/mozapps/extensions/content/extensions.js: Allow users to
    disable globally installed extensions.

  * Changes by Eric Dorland:
  * debian/rules: Remove explicit low-optimization on sparc. Apparently
    there was an issue for a number of arches that required lower
    optimization settings, but it is now resolved. So porters, please
    check -O2 on arm, alpha, powerpc and ia64 and let me know if it's
    safe. Thanks David S. Miller. (Closes: #284533)

 -- Eric Dorland <eric@debian.org>  Tue,  7 Dec 2004 01:06:48 -0500

mozilla-firefox (1.0-4) unstable; urgency=medium

  * debian/control: Make mozilla-firefox-gnome-support and xprt-xprintorg
    Suggests, no Recommends after a look at policy. (Closes: #282432)
  * debian/README.Debian: 
    - Refer to .mozilla/firefox, not .firefox.
    - Explain how to reenable emacs style keybindings. (Closes: #282321)

 -- Eric Dorland <eric@debian.org>  Sat, 27 Nov 2004 20:40:10 -0500

mozilla-firefox (1.0-3) unstable; urgency=low

  * Changes by Mike Hommey
  * The "becoming more and more an iceweasel" release.
  * debian/firefox.js:
    + Enable firefox's internal locale autodetection.
    + Disable default browser question at startup. (Closes: #280752)
  * debian/mozilla-firefox-runner: Removed our locale autodetection.
    That means now locales installed in user profiles are automatically
    used, and that there is no need for /var/lib/mozilla-firefox/locales.d
    anymore.
  * debian/mozilla-firefox.dirs: Removed creation of
    /var/lib/mozilla-firefox/locales.d.
  * debian/rules: Removed creation of the locale file in
    /var/lib/mozilla-firefox/locales.d.
  * debian/presubj: Put some more recent information.
  * htmlparser/src/nsParser.cpp: Applied patch from bz#57717 so that empty
    html files don't get <html><body></body></html> when viewing source.
  * browser/base/content/aboutDialog.css: increase the User Agent element
    height as in bz#238137 (but up to MacOSX's height) to show the full User
    Agent string.
  * xpcom/io/nsAppDirectoryServiceDefs.h,
    xpcom/io/nsAppFileLocationProvider.cpp,
    xpfe/components/search/src/nsInternetSearchService.cpp: Applied patch from
    bz#123315 so that Internet search services in user profiles are supported.
    (Closes: #219053)
  * debian/mozilla-firefox-runner:
    + Remove compatibility.ini only if it is older than
      /usr/lib/mozilla-firefox/components.ini. That way, we only rebuild it
      after an update-mozilla-firefox-chrome.
    + Detect if we're being run through sudo without the -H option, in which
      case we force setting of $HOME. (Closes: #218156)
  * browser/app/profile/firefox.js: Sync'ed with debian/firefox.js.
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in:
    + Removed some error messages that get there because firefox is trying to
      write in the /usr/lib/mozilla-firefox directory as a user. They are
      useless and lead users to think something is going wrong while it's the
      (stupid but) normal way firefox works.
    + Avoid creation of directories when attempting to read files, that
      throwed uncaught exceptions breaking some stuff in several different
      ways when extensions don't follow the new scheme for extensions.
    + Avoid copying stuff from
      /usr/lib/mozilla-firefox/defaults/profile/extensions/ to
      /usr/lib/mozilla-firefox/extensions/, that's the *very* old way of
      installing extensions, which, since the old scheme has been thrown away,
      won't work anyway, if any extension provides files out there.
    + CheckForMismatches: Avoid to disable already disabled global extensions,
      and don't propose to upgrade the locked extensions. That fixes a
      never-ending loop occuring when running firefox for the first time in a
      user account, while some global extensions are expired.
      (Closes: #278722, #281537)
  * debian/mozilla-firefox.prerm, debian/mozilla-firefox.preinst: Moved
    removal of links to /usr/lib/mozilla-firefox/defaults/profile/extensions/
    sitting in /usr/lib/mozilla-firefox/extensions/, if any remaining, from
    prerm to preinst. We remove them once and for all, they won't be created
    by us anymore.
  * debian/update-mozilla-firefox-chrome:
    + Removed support for extensions in
      /usr/lib/mozilla-firefox/defaults/profile/extensions/.
    + Removed some clean-up that had been introduced to help the Extensions
      Manager not to die, and which, actually, did not work out quite so well.
      Anyways, with the changes this time, the EM is supposed to support much
      more problems than ever before (as usual ;) ) so we don't need that
      anymore.
    + Avoid stupid mv error messages when firefox-bin -register fails (which
      is not supposed to happen, but you're never too careful)
  * debian/update-mozilla-firefox-chrome, debian/mozilla-firefox.preinst:
    Move removal of some very old stuff to preinst, to do it once and for all
    instead of doing it every time we run update-mozilla-firefox-chrome.
  * netwerk/protocol/ftp/src/nsFtpConnectionThread.cpp: Applied patch from
    bz#124561 to get a prompt for username/password in case anonymous login
    fails.
  * debian/mozilla-firefox-runner:
    + Added check for more arguments so that the url in the command line get
      detected more accurately.
    + When a file name is given on the command line, prepend "file://" and
      change spaces into %20. (Closes: #281800)

  * Changes by Eric Dorland
  * debian/mozilla-firefox.prerm: Patch from Philipp Weis to fix order of
    find arguments. (Closes: #280852)
  * debian/mozilla-firefox.desktop: Support new mime type handler in Gnome
    2.8. (Closes: #281274) (MH: I added some more myme-types)
  * debian/mozilla-firefox.postinst: Run update-desktop-database if it
    exists.
  * widget/src/gtk/nsWidget.cpp: We don't use gtk anymore, might as well
    revert these patches. Thanks Stephane Despret. 

 -- Eric Dorland <eric@debian.org>  Thu, 18 Nov 2004 22:16:28 -0500

mozilla-firefox (1.0-2) unstable; urgency=low

  * Changes by Mike Hommey
  * The "don't do too much on the same day, it's bad for health" release.
  * debian/firefox.js: Re-activated the extensions update service, and
    removed the update url.
  * browser/app/profile/firefox.js: Sync'ed with debian/firefox.js.
  * debian/mozilla-firefox-dom-inspector.preinst: Removed old inspector.js
    file.
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in,
    toolkit/mozapps/extensions/content/extensions.js: Disabled possibility
    to update locked extensions and themes. Locked extensions being the
    ones installed by the packaging system, they should be updated through
    that.
  * toolkit/mozapps/update/src/nsUpdateService.js.in: Disabled application
    update functionnality. Firefox should be updated through the packaging
    system.
  * browser/components/prefwindow/content/pref-advanced.xul: Removed the
    preferences panel item to activate application update, since it is
    totally disabled.
  * debian/mozilla-firefox-runner: Remove compatibility.ini instead of
    compreg.dat. (Eric: This will cause a rebuild of the compreg.dat)
  
  * Changes by Eric Dorland:
  * debian/mozilla-firefox.NEWS: Fix typos.
  * README.Debian: 
    - Add note about application update being completely disabled.
    - Fix path to XUL.mfsal

 -- Eric Dorland <eric@debian.org>  Wed, 10 Nov 2004 22:56:22 -0500

mozilla-firefox (1.0-1) unstable; urgency=medium

  * New upstream release (Closes: #280449)
  
  * Changes by Mike Hommey:
  * netwerk/protocol/ftp/src/nsFtpConnectionThread.cpp: Apply new patch
    #164795 from bz#266835 + some tweaks as previously. This might lead to
    encoding problems with the password, but it is supposed to be ASCII
    anyway.
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in: Reworked the
    previous patches so that the Extensions Manager shows extensions that
    have been disabled due to version mismatch, and added a workaround so
    that components registration works correctly.
  * debian/update-mozilla-firefox-chrome: Removed part that is useless due
    to last changes in the Extensions Manager.
  * Make the inspector a real extension again:
    - debian/inspector/00dom-inspector: File for
      /var/lib/mozilla-firefox/extensions.d.
    - debian/inspector/Uninstall: Uninstall file needed in extension 
      directory.
    - debian/inspector/install.rdf: install.rdf taken from older versions, 
      and adapted to newer versions, adding registered chrome.
    - debian/mozilla-firefox-dom-inspector.dirs: Removed. Everything will 
      be created by dh_install.
    - debian/mozilla-firefox-dom-inspector.install: install
      debian/inspector.rdf and most inspector files in the right place in
      /usr/lib/mozilla-firefox/extensions/{641d8d09-7dda-4850-8228-ac0ab65e2ac9}
      and /var/lib/mozilla-firefox
  * Make the classic theme a real extension, even though it's still in 
    the main package:
    - debian/theme/00classic: File for 
      /var/lib/mozilla-firefox/extensions.d.
    - debian/theme/Uninstall: Uninstall file needed in extension 
      directory.
    - debian/mozilla-firefox.install: Install all files in the right 
      place in
      /usr/lib/mozilla-firefox/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
    - debian/mozilla-firefox.dirs: Removed creation of
      /usr/lib/mozilla-firefox/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/chrome, 
      it will be done by dh_install.
    - browser/app/profile/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf.in:
      Added chrome to be registered.
  * Removed support for /var/lib/mozilla-firefox/chrome.d:
    - debian/mozilla-firefox.dirs: Removed creation of the directory.
    - debian/rules: Removed creation of files there, and put the
      installed-chrome.txt, excluding inspector and classic theme stuff,
      directly in /usr/lib/mozilla-firefox/chrome.
    - debian/update-mozilla-firefox-chrome: Removed all
      /var/lib/mozilla-firefox/chrome.d related stuff.
    - debian/mozilla-firefox.links: Removed installed-chrome.txt link.
    - toolkit/mozapps/extensions/src/nsExtensionManager.js.in: disable
      extensions that fail to install chrome.
  * debian/mozilla-firefox-runner: Remove user profile compreg.dat at
    launch time.
  * Moved some files in /var/lib/mozilla-firefox:
    - debian/mozilla-firefox.links: Add a symlink for Extensions.rdf 
      and components.ini, from /usr to /var.
    - debian/mozilla-firefox.prerm: Don't remove files we don't 
      provide and remove files at their new locations.
    - debian/mozilla-firefox.preinst: Remove
      /var/lib/mozilla-firefox/installed-chrome.txt.
    - debian/update-mozilla-firefox-chrome: Create links for 
      Extensions.rdf and components.ini after register call, and remove 
      components.ini before.
  * Clean-up in files generated by update-mozilla-firefox-chrome:
    - debian/mozilla-firefox.links: Put all the links generated by
      update-mozilla-firefox-chrome into the package.
    - debian/mozilla-firefox.prerm: Remove all /var files generated 
      in the remove target, and changed the way we clean-up 
      /var/lib/mozilla-firefox.
  * debian/mozilla-firefox.install: Removed chromelist.txt.
  * Add support for extensions preferences:
    - debian/update-mozilla-firefox-chrome: Handle
      /usr/lib/mozilla-firefox/defaults.ini file.
    - debian/mozilla-firefox.links: Add a symlink to /var for 
      defaults.ini.
    - toolkit/mozapps/extensions/src/nsExtensionManager.js.in: Added 
      defaults registration in -register command.
    - mozilla-firefox-dom-inspector.install: Move inspector.js into 
      the appropriate extension specific directory.
  * Move preferences back into /usr:
    - debian/rules: Don't move the prefs into 
      /etc/mozilla-firefox/pref, and put the vendor thing into /usr 
      as well, and remove firefox-l10.js file.
    - debian/mozilla-firefox.preinst: remove old prefs in /etc and 
      old symlink /usr/lib/mozilla-firefox/defaults/pref.
    - debian/firefox.js: new Debian default preferences file.
    - debian/mozilla-firefox.install: install firefox.js in
      /etc/mozilla-firefox/pref.
    - debian/mozilla-firefox.links: rename
      /usr/lib/mozilla-firefox/defaults/pref symlink to
      /usr/lib/mozilla-firefox/defaults/syspref.
    - toolkit/mozapps/extensions/src/nsExtensionManager.js.in: Added 
      a hook so that defaults/syspref gets registered in defaults.ini 
      after all other extensions preferences.
  * debian/mozilla-firefox.preinst: only clean-up stuff if we are
    upgrading from a version known to still have the files. Added some
    more clean-up.
  * debian/mozilla-firefox.install: Removed useless init.d.
  * modules/libpref/src/init/all.js: Fixed all chrome URLs which refered to
    mozilla stuff.
  * debian/update-mozilla-firefox-chrome: Remove some more files before running
    firefox-bin -register.

  * Changes by Eric Dorland:
  * debian/mozilla-firefox.NEWS: Add warning about broken extension and
    locale packages with this release. 
  * debian/mozilla-firefox-runner: Comment out warning about xprint,
    xprint isn't necessarily needed for printing since postscript was
    reenabled. (Closes: #279858)

 -- Eric Dorland <eric@debian.org>  Wed, 10 Nov 2004 00:33:44 -0500

mozilla-firefox (0.99+1.0RC1-4) unstable; urgency=low

  * debian/mozilla-firefox-runner:
    - Fixed to run properly with dash. (Closes: #279549).
    - Fixed indentation.
    - Added a basic debugger support.
  * debian/mozilla-firefox.1: Added information about debugger options.
  * debian/rules: Added a debug option to DEB_BUILD_OPTIONS. If you want to
    build a fully gdb'able package, use DEB_BUILD_OPTIONS="noopt nostrip
    debug"
  * netwerk/protocol/ftp/src/nsFtpConnectionThread.cpp: Apply new patch from
    bz#266835.
    - Further change this patch to use Append rather than AppendLiteral,
      which doesn't seem to exist. (ED)

 -- Mike Hommey <mh@glandium.org>  Thu,  4 Nov 2004 22:01:51 +0900

mozilla-firefox (0.99+1.0RC1-3) unstable; urgency=low

  * netwerk/protocol/ftp/src/nsFtpConnectionThread.cpp: Apply patch from
    bz#266835 to fix anonymous user password issue. (Closes: #226784)
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in: (MH)
    - Fully apply previous patches, which for some reason left a spurious code
      line which made the extensions manager not like expired extensions
      anymore. (Closes: #279140)
    - Enhanced extensions manager so that the behaviour described in
      https://bugzilla.mozilla.org/show_bug.cgi?id=247846#c14 *actually*
      works. Extensions packagers are invited to move their chrome files
      accordingly, and remove /var/lib/mozilla-firefox/chrome.d files so that
      extensions chrome don't get registered when they are forced-disable due
      to version mismatch or some other reason.
  * debian/mozilla-firefox-runner: 
    - Fix some thinkos. (MH)
    - Fix for loading files from the command line. (Closes: #279018) (MH)
    - Removed setting --display from $DISPLAY, let it get it from the 
      environment, but pass --display if it is set. (Mike, 
      I'm worried this will screw up some session 
      managers, let me know what you think, we can revert it)
    - Removed FIREFOX_OPEN_IN stuff, so that firefox now obeys to "open 
      links from other applications in" setting. (Closes: #279073) (MH)
    - Enhanced command line parsing, and drop empty arguments. 
      (Closes: #279138) (MH)
    - No need for a find to look for XUL.mfasl, we already have its 
      location from the path list taken from profiles.ini. (MH)
    - Better detection of dsp wrapper, when FIREFOX_DSP=auto. 
      (Closes: #254611) (MH)
    - Correctly open local files even when firefox was not previously 
      running. (Closes: #279018) (MH)
  * debian/mozilla-firefox.1: (MH)
    - Removed references to FIREFOX_OPEN_IN.
    - Added the -safe-mode option.
  * debian/mozilla-firefoxrc: Removed FIREFOX_OPEN_IN. (MH)
  
 -- Eric Dorland <eric@debian.org>  Tue,  2 Nov 2004 00:46:28 -0500

mozilla-firefox (0.99+1.0RC1-2) unstable; urgency=medium

  * browser/app/profile/firefox.js: Disable browser update checking by
    default.
  * debian/mozilla-firefox-runner: Apply patch from Aurelien Jarno to fix
    variable name typo. (Closes: #278844)

 -- Eric Dorland <eric@debian.org>  Fri, 29 Oct 2004 23:50:59 -0400

mozilla-firefox (0.99+1.0RC1-1) unstable; urgency=medium

  * New upstream release.
  * layout/xul/base/src/nsImageBoxFrame.{cpp,h}: Remove some conflicts
    from a previous patch.

 -- Eric Dorland <eric@debian.org>  Thu, 28 Oct 2004 23:33:46 -0400

mozilla-firefox (0.10.1+1.0PR-5) unstable; urgency=low

  * debian/rules: (MH)
    - Use upstream extensions set. This will eventually get a
      correct help menu and fix some yet undiscovered UI issues. 
      (Closes: #257946)
    - Added support for DEB_BUILD_OPTIONS=noopt.
    - Changed OPTFLAGS assignment.
    - Remove whitespace characters in version number for UserAgent
      branding.
    - Install mozilla-firefox-runner into /usr/lib/mozilla-firefox/firefox
      (Closes: #278477)
  * debian/mozilla-firefox.links: (MH)
    - Link /usr/bin/firefox and /usr/bin/mozilla-firefox to 
      /usr/lib/mozilla-firefox/firefox.
    - Removed obsolete profile/US links.
  * debian/mozilla-firefox.dirs: Create /etc/mozilla/profile instead of
    /etc/mozilla/profile/US. (MH)
  * toolkit/xre/nsAppRunner.cpp: Fix crash in nsCmdLineService::Initialize
    when argc is changed by gtk (when treating gtk specific arguments)
    (MH)
  * debian/mozilla-firefox-runner (Changes by MH):
    - Removed workaround for bug #122990. First, xmlterm is not an activated
      extension, and secondly, if it still requires the TERM environment
      variable, it is the user's duty to set it to whatever he wants, not
      firefox's start script's.
    - Removed the ulimit -c setting. First, it is set by default to 0 on a
      newly installed debian, and secondly, it is user's choice to set it or
      not if he needs to get core files.
    - Removed unused shell variables.
    - Removed unsetting AUDIODEV variable. If it still crashes, it does belong
      to some other code than firefox. The AUDIODEV environment variable is
      used nowhere in firefox code:
      http://lxr.mozilla.org/aviarybranch/search?string=AUDIODEV
      Note that there is a "A crash which occurred when AUDIODEV doesn't
      contain "/" was fixed." log message in esound version 0.2.33 changes and
      that the bug may have belonged there.
    - Replaced ${HOME}/.mozilla-firefoxrc file by a ${HOME}/.mozilla/firefox/rc
      file. The former is still supported, though, but will bring a warning
      message. If both are present, only the latter is taken into account.
    - Changed the way system and user FIREFOX_DSP and FIREFOX_OPEN_IN
      variables are handled. First, use system values defined in
      /etc/mozilla-firefox/mozilla-firefoxrc, then override with
      ${HOME}/.mozilla/firefox/rc and then with runtime environment variables.
    - Don't die when DISPLAY is not set. Display can be passed by --display
      option, and if not set and needed (some options don't require it),
      firefox will complain.
    - Some shell code simplifications by using some coreutils.
    - Added better command line parsing.
    - Added verbosity mode.
    - Removed setting of FONTCONFIG_PATH, /usr/lib/mozilla-firefox/res/Xft
      doesn't exist
    - Factorized localization detection.
  * debian/mozilla-firefox.1 (MH):
    - Made some clean-up between dashes and hyphens.
    - Removed obsolete options and added new ones.
    - Added informations about some debian specific stuff.
  * debian/update-mozilla-firefox-chrome: Changed the way we move files to
    /var/lib/mozilla-firefox. It will avoid creating files with a * in their
    name whenever registration failed. (MH)
  * debian/README.Debian: Update java instructions, tell them to just use
    java-package.

 -- Eric Dorland <eric@debian.org>  Thu, 28 Oct 2004 21:30:40 -0400

mozilla-firefox (0.10.1+1.0PR-4) unstable; urgency=medium

  * This release mostly courtesy Mike Hommey. 
  * layout/src/xul/base/src/nsImageBoxFrame.*: Backported patch from
    bz#255372. (Closes: #278046)
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in: Force locking
    globally installed extensions, that will prevent extensions packages
    files to be unexpectedly removed by firefox.
  * debian/control: Add Mike Hommey as an Uploader.
  * debian/mozilla-firefox.install: Removed content-packs.jar which is
    mozilla-browser specific.
  * debian/mozilla-firefox.dirs: 
    - Remove leading /'s.  
    - Create
    /usr/lib/mozilla-firefox/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
    /chrome directory so that preview is shown in the Themes Manager. Yes,
    this is stupid, but it is the way firefox wants it (and it's not even
    created by make install, nor in the official binary tarball. It is
    only created at run time, but you know what ? under *nix, a normal
    user can't create that directory) (Closes: #276404)
  * debian/rules: Add a /etc/mozilla-firefox/pref/vendor.js file adding
    the debian package version to the UserAgent. (Closes: #268654)
  * debian/README.Debian: Update java instructions. I'd love some more
    definitive pointers. (Closes: #277983)

 -- Eric Dorland <eric@debian.org>  Tue, 26 Oct 2004 00:11:48 -0400

mozilla-firefox (0.10.1+1.0PR-3) experimental; urgency=low

  * debian/control: 
    - Rename the mozilla-firefox-gnome-vfs package
      mozilla-firefox-gnome-support since it does more than vfs. No 
      need for Replaces or anything, since it never actually made it to 
      the archive.
    - Remove strict build dependencies on g++ and binutils, since the 
      fixed versions have hit sarge.
    - Remove hppa build depends, since gcc has also been fixed there.
    - Build-depend on libgnome2-dev and libgconf2-dev to build in more 
      gnome support.
    - Have mozilla-firefox recommend it's gnome support. 
  * debian/rules: 
    - Remove hppa CC redefinitions.
    - Exclude *gnome* not just *gnomevfs*.
    - dh_install for gnome-support.
  * debian/mozilla-firefox-gnome-vfs.*: Rename to
    mozilla-firefox-gnome-support.*.
  * debian/mozilla-firefox-gnome-support.install: Grab *gnome*, not just
    *gnomevfs*.

 -- Eric Dorland <eric@debian.org>  Thu, 21 Oct 2004 23:04:53 -0400

mozilla-firefox (0.10.1+1.0PR-2) experimental; urgency=low

  * debian/mozilla-firefox-runner: 
    - Patch from Sam Morris to handle cleanup of directories with 
      unusual names.
    - Fix return value check, patch from rgselk. (Closes: #269690)
  * debian/mozilla-firefox.1: List full path to firefox-bin. (Closes:
    #275563)
  * debian/rules: 
    - --with-gssapi=/usr, enable Negotiate extension. (Closes:
      #274258)
    - Enable gnomevfs support, 
  * debian/control: 
    - Build-depend on libkrb5-dev.
    - Build-depend on libgnomevfs2-dev.
    - New gnomevfs package, based on work by Mike Hommey. (Closes: 
      #262062)
  * debian/mozilla-firefox-gnome-vfs.post{inst,rm}: Added, same as
    corresponding files from mozilla-firefox-dom-inspector.
  * debian/mozilla-firefox-gnome-vfs.install: Install gnomevfs components.
  * browser/app/profile/firefox.js: Set
    network.negotiate-auth.trusted-uris to https:// to enable the
    negotiate extension over secure links.
  * config/rules.mk: Tweak patch from Thiemo Seufer to include svg_doc in
    non-optimization. (Closes: #273353)

 -- Eric Dorland <eric@debian.org>  Sun, 17 Oct 2004 21:25:08 -0400

mozilla-firefox (0.10.1+1.0PR-1) experimental; urgency=critical

  * New upstream release, fixes security issue bz#259708. (Closes:
    #274493)

 -- Eric Dorland <eric@debian.org>  Sun,  3 Oct 2004 03:32:43 -0400

mozilla-firefox (0.10+1.0PR-1) experimental; urgency=low

  * New upstream release. (Closes: #273700, #267003)
  * toolkit/mozapps/extensions/src/nsExtensionManager.js.in,
    netwerk/dns/src/nsIDNService.cpp,
    modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp,
    gfx/src/windows/nsImageWin.cpp, gfx/src/shared/gfxImageFrame.cpp,
    browser/app/profile/firefox.js: Resolve conflicts between my tree and
    upstream.
  * browser/app/Makefile.in: Fix $(DESTDIR) variable.
  * accessible/src/atk/nsAccessibleWrap.cpp,
    accessible/src/atk/nsAccessibleWrap.h: Apply patch from bugzilla for
    alpha fix that's more likely to make it into CVS.
  * debian/update-mozilla-firefox-chrome: Patch from Mike Hommey to make
    update-mozilla-firefox-chrome more verbose on -v.
  * debian/rules:
    - Remove typeaheadfind for new find toolbar to work. (Mike Hommey) 
      (Closes: #267170)
    - Changes to reflect new upstream files. 
  * debian/control: 
    - Remove build-depend on libcairo-dev.
    - Build depend on libxt-dev, seems to be necessary now. (Closes: 
      #274311)
  * debian/docs: Removed, as browser/README.html disappeared. (Mike Hommey)
  * debian/mozilla-firefox.dirs: 
    - Changes to reflect new upstream files.
    - Removed obsolete libnullplugin.so.
  * debian/mozilla-firefox.install: 
     - Remove .jar's that aren't there anymore.
     - Removed obsolete libnullplugin.so.
  * debian/mozilla-firefox-dom-inspector.dirs,
    debian/mozilla-firefox-dom-inspector.install, debian/rules: Upstream
    doesn't consider DOM Inspector as a real extension, and do not provide
    the appropriate files to make it appear in the extensions
    manager. Removed all the extension related stuff in the package. (Mike
    Hommey)
  * other-licenses/libart_lgpl: Removed, was for SVG, no longer needed.
  * modules/plugin/samples/default/unix/*: Reverted debian specific
    changes, we don't want them in the diff since libnullplugin won't get
    installed.

 -- Eric Dorland <eric@debian.org>  Fri,  1 Oct 2004 18:50:46 -0400

mozilla-firefox (0.9.3-6) unstable; urgency=high

  * gfx/src/gtk/fontEncoding.properties: Uncomment symbol fonts. (Closes:
    #272927)
  * debian/control: Build-depend on binutils (>= 2.15-4) but only on mips
    and mipsel. (Closes: #273353)
  * configure.in, configure, rules.mk: Patch from Thiemo Seufer to
    increase stability and performance on mips. (Closes: #272159)
  * debian/mozilla-firefox-runner: Detect failure of ping()
    better. (Closes: #267393)
  * layout/html/document/src/html.css: Testing fix for xprint problems.

 -- Eric Dorland <eric@debian.org>  Mon, 27 Sep 2004 17:07:37 -0400

mozilla-firefox (0.9.3-5) unstable; urgency=high

  * debian/update-mozilla-firefox-chrome: Apply another patch form Mike
    Hommey to fix a few more issues in the script. (Closes: #271480)
  * Fixes to Secunia security bugs, ported from bugzilla: 
    (Closes: #271888)
    - browser/base/content/browser.js, 
      xpfe/communicator/resources/content/contentAreaDD.js: Fix for
      drag and drop exploit, bz#250862.
    - caps/include/nsScriptSecurityManager.h, caps/src/caps.properties,
      caps/src/nsScriptSecurityManager.cpp: Fix for enablePrivilege
      exploit, bz#253942.
    - gfx/src/shared/gfxImageFrame.cpp, gfx/src/windows/nsImageWin.cpp,
      modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp: Fix for various
      overflows in the BMP code, bz#255067.
    - netwerk/dns/src/nsIDNService.cpp: Fix for bug in non-ASCII 
      characters in domain names, bz#256316
    - content/xbl/src/nsXBLPrototypeHandler.cpp: Clipboard injection 
      fix, bz#257523.

 -- Eric Dorland <eric@debian.org>  Thu, 16 Sep 2004 20:06:47 -0400

mozilla-firefox (0.9.3-4) unstable; urgency=high

  * Urgency high, go into testing dammit!
  * Apply patch from Mike Hommey as -3.1, which wasn't actually
    released. See below. (Closes: #271480)
  * debian/rules: Patch from Matthew Mueller to fix underquoted
    argument. (Closes: #271432)
  * debian/control: Build depend on binutils (>= 2.15-3) with fixed mips
    support. We still need a fixed gcc.

 -- Eric Dorland <eric@debian.org>  Mon, 13 Sep 2004 20:41:27 -0400

mozilla-firefox (0.9.3-3.1) unstable; urgency=low

  * debian/rules: removed
    /usr/lib/mozilla-firefox/defaults/profile/extensions/installed-extensions.txt
  * debian/update-mozilla-firefox-chrome:
    + Added a "verbose" mode.
    + Added warning messages (only shown in verbose mode) about some
      extensions specific issues. This is intended to be useful for extensions
      maintainers.
    + Check if the installed-extensions.txt file disappears, which tells if the
      mozilla-firefox -register went ok.
  * debian/update-mozilla-firefox-chrome.8:
    + Fixed typos.
    + Added reference to the -v option for the verbose mode.
  * debian/mozilla-firefox-runner: enhanced the profile directory check. It
    didn't work if the path indicated in the profiles.ini was not absolute.

 -- Mike Hommey <mh@glandium.org>  Mon, 13 Sep 2004 20:31:21 +0900

mozilla-firefox (0.9.3-3) unstable; urgency=high

  * Acknowlege NMU from Mike Hommey. He did a fantastic job in porting a
    large amount of fixes from upstream CVS. I owe him several large
    beverages of his choice. (Closes: #259046, #259836)
  * Port all of Mike's changes to my local CVS.
  * debian/mozilla-firefox-runner: 
    - Pass command-line arguments to get_locale so they can actually 
      be used. (Closes: #240058)
    - Apply patch from Mike Hommey to use the profiles.ini to find the 
      path to the profile to clean XUL.mfasl. (Closes: #267326)
  * debian/update-mozilla-firefox-chrome: Patch from Mike Hommey to fix
    some bashisms introduced by his NMU.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in,
    xpcom/reflect/xptcall/src/md/unix/xptcinvoke_asm_mips.s,
    xpcom/reflect/xptcall/src/md/unix/xptcinvoke_mips.cpp,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_mips.s.m4,
    xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_mips.s: Patch from
    Thiemo Seufer to fix mips. This requires patches to gcc and binutils
    to work and fully close #270621.

 -- Eric Dorland <eric@debian.org>  Wed,  8 Sep 2004 21:13:35 -0400

mozilla-firefox (0.9.3-2.2) unstable; urgency=high

  * The "never edit the diff file unless you're sure nothing will be
    missing" release.
  * debian/mozilla-firefox.prerm: restore the uncut version.
  * debian/control, debian/rules: Use gcc-3.2 to build on hppa, because of
    toolchain bug #254549.

 -- Mike Hommey <mh@glandium.org>  Mon, 23 Aug 2004 19:45:54 +0900

mozilla-firefox (0.9.3-2.1) unstable; urgency=high

  * Non Maintainer Upload for RC Fixes.
  * Applied changes to toolkit/mozapps/extensions/src/nsExtensionManager.js.in
    and toolkit/mozapps/extensions/locale/extensions.properties to solve some
    issues with extensions management. (taken from CVS)
  * Applied other changes to
    toolkit/mozapps/extensions/src/nsExtensionManager.js.in,
    toolkit/mozapps/extensions/public/nsIExtensionManager.idl and
    mozilla/toolkit/xre/nsAppRunner.cpp to be able to use -register
    instead of -list-global-items for extensions/components/chrome
    registration through update-mozilla-firefox-chrome, thus not needing
    Xvfb anymore (-register option doesn't require a X server).
    (taken from CVS)
  * Applied some more changes to
    toolkit/mozapps/extensions/src/nsExtensionManager.js.in in order to
    avoir overlayinfo deletion during extensions registration process.
    (taken from CVS)
  * Final changes to toolkit/mozapps/extensions/src/nsExtensionManager.js.in
    to avoid registering out of date extensions so that firefox doesn't enter
    a loop at startup when no profile was found, and to only write in the
    installed-extensions-processed.txt file the list of actually installed
    extensions. Note that for packaged extensions installing their files
    directly into the chrome or components directories, that only means they
    won't appear in the Extensions Manager. They will still be available in
    the GUI.
  * All these fixes improve the Extensions Manager. Closes: #259046.
  * accessible/src/atk/nsAccessibleWrap.cpp,
    accessible/src/atk/nsAccessibleWrap.h: fixed 32-bit abuse of gobject
    (Steve Langasek). Closes: #259836.
  * debian/control: Removed dependency upon xvfb.
  * debian/update-mozilla-firefox-chrome:
    + Removed use of Xvfb.
    + Removed creation of a root default profile, but kept the fake home
      hack to avoid creation of a .mozilla directory in root's home.
    + Changed extensions handling so that the overall process is cleaner.
      Extensions packages will have to move extensions {uid} directories
      to /usr/lib/mozilla-firefox/extensions/, while the current location
      is still supported for compatibility purpose (but is strongly not
      recommended).
    + Removed use of regxpcom and regchrome, since what they both do is
      done by firefox-bin -register.
  * debian/rules: force GnomeVFS support to be disabled. (Josselin Mouette)
  * debian/README.Debian:
    + Added a note about potential problems with packaged "old" extensions.
    + Added a note about how to manually disable packaged extensions in user
      profile.
    + Removed some old notes that don't apply anymore.
  * debian/mozilla-firefox-dom-inspector.install, debian/rules: Move
    extensions files to /usr/lib/mozilla-firefox/extensions/ instead of
    /usr/lib/mozilla-firefox/defaults/profile/extensions/.
  * debian/mozilla-firefox.links: Move installed-extensions.txt symlink
    from /usr/lib/mozilla-firefox/defaults/profile/extensions/ to
    /usr/lib/mozilla-firefox/extensions/.
  * debian/mozilla-firefox.prerm: More cleanup on removal of package.

 -- Mike Hommey <mh@glandium.org>  Sun, 22 Aug 2004 21:43:47 +0900

mozilla-firefox (0.9.3-2) unstable; urgency=low

  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_mips.s.m4: Comment out
    NARGSAVE, like I did in 0.9.1-7, should fully fix #262571.
  * debian/mozilla-firefox.preinst: Remove brace expansion
    bashism. (Closes: #264200)
  * debian/control: Depend on debianutils (>= 1.16) since we use mktemp
    -d. (Closes: #263958)
  * debian/mozilla-firefox-runner: Make -contentLocale COUNTRY, not
    lang-COUNTRY. (Closes: #263940)

 -- Eric Dorland <eric@debian.org>  Sun,  8 Aug 2004 23:41:02 -0400

mozilla-firefox (0.9.3-1) unstable; urgency=low

  * New upstream release. (Closes: #263193)
  * debian/update-mozilla-firefox-chrome.8: Add manpage from Mark Suter
    for update-mozilla-firefox-chrome.8. (Closes: #263149)
  * debian/mozilla-firefox.manpages: Add update-mozilla-firefox-chrome.8.
  * debian/control: Add build-deps on gcc-3.4 for amd64. (Closes: #262679)

 -- Eric Dorland <eric@debian.org>  Wed,  4 Aug 2004 20:21:22 -0400

mozilla-firefox (0.9.1-7) unstable; urgency=low

  * debian/mozilla-firefox-runner:
    - Reintroduce check for command-line arguments (I broke this last 
      release). (Closes: #262692, #262462, #262537, #262588, #262727)
    - Allow overriding of -contentLocale and -UILocale. (Closes: 
      #240058)
  * xpcom/reflect/xptcall/src/md/unix/xptcinvoke_asm_mips.s: Comment out
    NARGSAVE reassignment, it is defined elsewhere. (Closes: #262571)
  * debian/rules: Force amd64 to build with gcc 3.4. (Closes: #262679)

 -- Eric Dorland <eric@debian.org>  Mon,  2 Aug 2004 10:16:46 -0400

mozilla-firefox (0.9.1-6) unstable; urgency=low

  * widget/src/gtk2/keysym2ucs.c: Patch from Eugeniy Meshcheryakov to
    allow mozilla firefox to enter a ghe with upturn. (Closes: #261543)
  * debian/mozilla-firefox-runner: 
    - Remove some mail and composer cruft. 
    - Add warning if DISPLAY is not set. (Closes: #261465)

 -- Eric Dorland <eric@debian.org>  Thu, 29 Jul 2004 22:49:59 -0400

mozilla-firefox (0.9.1-5) unstable; urgency=low

  * debian/control: Goodbye mozilla-firebird transition package.
  * debian/mozilla-firefox-runner: Add -a firefox flag when running
    firefox-bin. (Closes: #259237)
  * debian/mozilla-firefox.desktop: Add GenericName field.
  * debian/update-mozilla-firefox-chrome: Fix quoting problem with
    {*}. (Closes: #257243)
  * debian/rules: 
    - Re-enable postscript printing support, since the security 
      issues turned out to be bogus. (Closes: #257628)
    - Disable SVG support, it's still too broken to be usable. 
      (Closes: #259544)

 -- Eric Dorland <eric@debian.org>  Sun, 18 Jul 2004 20:09:14 -0400

mozilla-firefox (0.9.1-4) unstable; urgency=low

  * The "Let's try unstable" release. There are still issues, but there
    are issues with 0.8 as well, so no more point in waiting.
  * debian/update-mozilla-firefox-chrome:
    - Copy over empty Extensions.rdf file on update. (Closes: #257243)
    - Increase sleep to 15 seconds, hopefully this will work on most 
      people's machines. 
  * My apologies to Mike Hommey for mispelling his name in last release.

 -- Eric Dorland <eric@debian.org>  Sun, 11 Jul 2004 23:51:24 -0400

mozilla-firefox (0.9.1-3) experimental; urgency=low

  * Ok, I was wrong, we're still in experimental. I think we need to fix a
    few more issues before getting this in unstable, like #257258, and
    make sure the hacky extensions mechanism is more bullet-proof.
  * debian/rules: --disable-installer, since we don't use it.
  * debian/update-mozilla-firefox-chrome: 
    - Wait 8 seconds instead of 5 for the hack, might help some 
      people reporting problems.
    - Remove ${LIBDIR}/extensions/{*}. I may move that to 
      /var/lib/mozilla-firefox eventually, but let's leave it for now.
  * debian/mozilla-firefox.png.uu: Make a nicer png icon, based on the
    about box graphic.
  * debian/mozilla-firefox.preinst: Remove old config files in
    /etc/mozilla-firefox/pref. (Closes: #257711, 257557)
  * browser/app/profile: firefox.js: Revert change to app.version,
    apparently it breaks extensions. (Closes: #257941)

 -- Eric Dorland <eric@debian.org>  Wed,  7 Jul 2004 21:26:55 -0400

mozilla-firefox (0.9.1-2) experimental; urgency=low

  * The "Mike Homey, lord of the bugs" release. Thanks to Mike for being a
    huge help with bug triage. That's right, help with bugs and your name
    could have a prestigious place in the changelog.
  * I'd like my next release to be to unstable, so let me know about
    profile transition bugs, etc.
  * debian/control: Build-depend on libcairo1-dev. 
  * debian/rules: Enable svg support using cairo renderer. (Closes:
    #215990)
  * debian/mozilla-firefox-xremote-client: Add -a firefox switch to make
    the remote client find firefox only. Thanks Jonathan Black. (Closes:
    #256967)
  * debian/mozilla-firefox.desktop: Make comment Gnome HIG
    compliant. (Closes: #257592)
  * browser/app/profile/firefox.js: 
    - app.version = 0.9.1.
    - Disable app updates by default. We're debian, we handle updates.
  * debian/update-mozilla-firefox-chrome: 
    - Remove installed-extensions-processed.txt before regenerating. 
      (Closes: #257243)
    - Take some, but not all advice from Alexandru Fomin. Improve Xvfb 
      and extension registration hacks. 

 -- Eric Dorland <eric@debian.org>  Sun,  4 Jul 2004 16:58:17 -0400

mozilla-firefox (0.9.1-1) experimental; urgency=low

  * New upstream release.
  * config/autoconf.mk.in: Alright, /usr/lib/firefox-0.9 was a bad idea,
    use /usr/lib/mozilla-firefox. Change all the instances
    /usr/lib/firefox-0.9 back to /usr/lib/mozilla-firefox. I feel
    silly. (Closes: #256991)
  * debian/mozilla-firefox-runner: Actually check for the existence of the
    .mozilla/firefox directory before trying to clean it. 
  * debian/update-mozilla-firefox-runner: 
    - Call firefox-bin, not firefox you silly goose.  
    - Use mozilla-firefox tempfile, not mozilla-browser.
    - The horrible hackiness continues: For my previous hack to work, 
      I need to preseed a profile directory in the home directory I
      create. Now things should work. (Closes: #256812)

 -- Eric Dorland <eric@debian.org>  Thu,  1 Jul 2004 17:16:29 -0400

mozilla-firefox (0.9-1) experimental; urgency=low

  * New upstream release. There may be regressions from 0.8. (Closes:
    #254522)
  * widget/src/gtk/nsGtkMozRemoteHelper.cpp,
    widget/src/gtk2/nsGtkMozRemoteHelper.cpp,
    widget/src/xremoteclient/XRemoteClient.cpp: Fix previously applied to
    fix -remote behaviour undone. Mozilla now includes the program name in
    the properties to distinguish between various Mozilla apps.
  * xpcom/reflect/xptcall/src/md/unix/Makefile.in: remove extra endif.
  * dom/public/idl/core/nsIDOMNSDocument.idl: Reintroduce referrer
    attribute that got lost somehow.
  * content/events/src/nsEventStateManager.cpp: Fix a strange broken
    function call to GetContainer.
  
  * debian/rules: 
    - Follow upstream and --enable-single-profile and 
      --disable-profilesharing.
    - Replace /usr/lib/mozilla-firefox with /usr/lib/firefox-0.9.
    - --user-app-dir=.mozilla to jive with new location.
    - Remove dom-inspector extension dir from the regular package. 
  * debian/control: Depend on xvfb for insane hack below.
  * debian/mozilla-firefox.install:
    - Replace /usr/lib/mozilla-firefox with /usr/lib/firefox-0.9.
    - Remove ipc dir, mozipcd.
    - Add init.d, greprefs dirs.
  * debian/mozilla-firefox.dirs:
    - Add /var/lib/mozilla-firefox/extensions{,.d}
  * debian/mozilla-firefox-dom-inspector.dirs: Add
    /var/lib/mozilla-firefox/extensions.d.
  * debian/mozilla-firefox-dom-inspector.install:
    - Replace /usr/lib/mozilla-firefox with /usr/lib/firefox-0.9.
    - Install dom-inspector extension dir.
  * debian/mozilla-firefox.links:
    - Replace /usr/lib/mozilla-firefox with /usr/lib/firefox-0.9.
    - Link /usr/lib/mozilla-firefox to /usr/lib/firefox-0.9.
    - Link installed-extensions.txt to our place in 
      /var/lib/mozilla-firefox.
  * debian/mozilla-firefox-runner: 
    - Replace /usr/lib/mozilla-firefox with /usr/lib/firefox-0.9.
    - Fix xprintorg typo. (Closes: #255706)
    - Search .mozilla/firefox for XUL.mfasl files.
  * debian/mozilla-firefox-xremote-client: Replace
    /usr/lib/mozilla-firefox with /usr/lib/firefox-0.9.
  * debian/update-mozilla-firefox-chrome: 
    - Replace /usr/lib/mozilla-firefox with /usr/lib/firefox-0.9.
    - Capture return values from reg* commands on error, stolen 
      from mozilla source.
    - Remove returns from check_running.
    - Pull in snippets from /var/lib/mozilla-firefox/extensions.d 
      to generate installed-extensions.txt for new extensions mechanism.  
    - An insane hack, but necessary because of upstream: Launch a Xvfb 
      to run firefox to generate the necessary extension metadata. I've
      been told this will not be necessary in the next version. 

 -- Eric Dorland <eric@debian.org>  Mon, 28 Jun 2004 23:40:59 -0400

mozilla-firefox (0.8-12) unstable; urgency=low

  * The "Last Chance Before 0.9" release.
  * debian/mozilla-firefox-runner: Fix unescaped \n, thanks Olly
    Betts. (Closes: #252436)
  * debian/update-mozilla-firefox-chrome: Watch out for empty
    LD_LIBRARY_PATH. Thanks George Cristian Birzan. (Closes: #254142)
  * debian/README.Debian: Restructure and update a bit.
  * debian/presubj: Add bug information from README.Debian for reportbug.
  * debian/mozilla-firefox.install: Install the presubj. 

 -- Eric Dorland <eric@debian.org>  Mon, 14 Jun 2004 19:39:27 -0400

mozilla-firefox (0.8-11) unstable; urgency=low

  * Apply amd64 fix from #249211. 
  * debian/README.Debian: Shamelessly stole the java plugin installation
    instructions from the mozilla package. (Closes: #243513)
  * nsCommonWidget.cpp, nsCommonWidget.h, nsWindow.cpp: Apply patch (with
    some hand massaging) from upstream bugzilla bug #209342 to fix initial
    window placement. (Closes: #235209, 241519)
  * nsprpub/pr/src/misc/prnetdb.c: Apply patch from Miquel van Smoorenburg
    to prevent unless reverse DNS lookups. (Closes: #251978)
  * debian/mozilla-firefox-runner: Apply patch from Jasper Spaans to fix
    remote xprint printing. (Closes: #252072)

 -- Eric Dorland <eric@debian.org>  Tue,  1 Jun 2004 23:12:36 -0400

mozilla-firefox (0.8-10) unstable; urgency=low

  * debian/mozilla-firefox.install: Don't install uuencoded file. (Closes:
    #251441)
  * debian/mozilla-firefox-runner: unset AUDIODEV which can cause
    crashes. Thanks Christopher Armstrong. (Closes: #236231)
  * update-mozilla-firefox-chrome: Port security fix from #249613 to
    handle insecure tempfile creation.
  * debian/rules: Following the advice of #247585 I'm disabling postscript
    printing. Perhaps this will alleviate some of the other printing
    problems.

 -- Eric Dorland <eric@debian.org>  Sun, 30 May 2004 01:47:52 -0400

mozilla-firefox (0.8-9) unstable; urgency=low

  * debian/control: 
    - Suggest latex-xft-fonts for MathML fonts. Thanks Michael 
      JasonSmith. (Closes: #216925)
    - Build depend on libx11-dev & libxp-dev instead of xlibs-dev to 
      reflect new X packages.
  * widget/src/gtk2/nsWindow.cpp: Apply patch from Peter Colberg to ignore
    unused mouse buttons. (Closes: #244305)
  * debian/README.Debian: Document the fact that the loopback interface
    has to be up and unfiltered for things to work right.

 -- Eric Dorland <eric@debian.org>  Wed,  5 May 2004 23:30:42 -0400

mozilla-firefox (0.8-8) unstable; urgency=low

  * security/nss/lib/freebl/unix_rand.c: Remove code that called netstat
    to gain so entropy. It's pretty useless on a Linux system. Thanks
    Wichert. (Closes: #241200)
  * debian/README.Debian: Add note about changing the button order in the
    dialog boxes. (Closes: #240261)
  * debian/control: Add dummy package for mozilla-firebird to smooth
    upgrades. (Closes: #235577)

 -- Eric Dorland <eric@debian.org>  Sat,  3 Apr 2004 16:19:34 -0500

mozilla-firefox (0.8-7) unstable; urgency=low

  * debian/mozilla-firefox-runner: 
    - Cleanup XUL.mfasl whenever firefox is run with no 
      command-line. (Closes: #238717)
    - Add patch from Laurent Buffler to add config to allow 
      new tabs to be opened instead of new windows. (Closes: #239323)
  * debian/mozilla-firefoxrc: Put the new FIREFOX_OPEN_IN variable in
    there and document it's use.

 -- Eric Dorland <eric@debian.org>  Sat, 27 Mar 2004 17:21:51 -0500

mozilla-firefox (0.8-6) unstable; urgency=low

  * debian/control: Build-depend on g++-3.3 (>= 3.3.3-4) to work around
    broken 3.3.3-3 release. (Closes: #238318, #238241, #238441, #238523,
    #238534)
  * debian/rules: Install new small-firefox icon. 
  * debian/mozilla-firefox{.png, .xpm, -small.xpm}: Use the new DFSG-free
    icons, the old pretty ones are trademarked and not DSFG-free. I know,
    it's stupid. Complain to the Mozilla Foundation, not me. (Closes:
    #234869)

 -- Eric Dorland <eric@debian.org>  Sun, 21 Mar 2004 22:09:16 -0500

mozilla-firefox (0.8-5) unstable; urgency=low

  * Rebuild with g++-3.3 3.3.3-2 to work around broken g++. (Closes:
    #238318)

 -- Eric Dorland <eric@debian.org>  Wed, 17 Mar 2004 21:38:58 -0500

mozilla-firefox (0.8-4) unstable; urgency=low

  * debian/README.Debian: 
    - Tell people not to remove their ~/.firefox directory. Just move it
      out of the way. (Closes: #235594)
    - Add notes about the sound dsp. (Closes: #236678)
  * debian/mozilla-firefox-runner: 
    - Don't redirect stderr. (Closes: #236160)
    - Add get_locale code from Aurelien Jarno (Closes: #235521)
    - Fix dsp auto-detection code. (Closes: #236678)
  * debian/rules: Add default locale file.
  * debian/mozilla-firefox.dirs: Add locales dir. 

  * browser/app/profile/all.js,
    content/events/src/nsEventStateManager.cpp,
    modules/libpref/src/init/all.js, widget/public/nsGUIEvent.h,
    widget/src/gtk/nsWidget.cpp: Reapply extended mouse events patch from
    Derek Upham. (Closes: #235385, #230876)
  * browser/base/content/browser-sets.inc: Make ESC stop animations
    again. (Closes: #235474)

 -- Eric Dorland <eric@debian.org>  Tue, 16 Mar 2004 00:31:19 -0500

mozilla-firefox (0.8-3) unstable; urgency=low

  * debian/mozilla.firefox.menu: Change the case of
    mozilla-Firefox. (Closes: #234982, #234755)
  * debian/NEWS.Debian: Move to debian/mozilla-firefox.NEWS so that it
    actually gets installed. (Closes: #234700)
  * debian/update-mozilla-firefox-chrome: Setup dummy home directory to
    capture silly .firefox directory. (Closes: #234855)
  * debian/mozilla-firefox.png.uu, debian/mozilla-firefox.xpm: Use the
    new, pretty mozilla-firefox icons. (Closes: #234869)
  * debian/rules: Install the pretty icon in the right places. 

 -- Eric Dorland <eric@debian.org>  Thu, 26 Feb 2004 21:10:27 -0500

mozilla-firefox (0.8-2) unstable; urgency=low

  * The "what he taketh, he giveth back" release.
  * debian/rules:
    - Disable the wallet extension, this really closes: #222447.
    - Remove some more cruft left over from the patch system.
    - Reinstall the dom-inspector.
  * debian/control: Add the dom-inspector back, now that it is supported
    upstream.
  * debian/mozilla-firefox-dom-inspector.{install,dirs,postinst,postrm}:
    Bring these files back.
  * docshell/base/nsWebShell.cpp: Only do keyword lookup on when DNS
    entries don't exist. (Closes: #233916, #218033, #211524)

 -- Eric Dorland <eric@debian.org>  Mon, 23 Feb 2004 21:48:03 -0500

mozilla-firefox (0.8-1) unstable; urgency=low
  
  * The "Let's Change Our Name Every Other Day" release.
  * New upstream release, mozilla-firebird has been renamed to
    mozilla-firefox. Let's hope it lasts. (Closes: #231903, #222447)
  * debian/mozilla-firebird.*: Renamed to debian/mozilla-firefox.*.

  * debian/README.Debian: Update for firefox, remove blurb about the
    inspector.
  * debian/NEWS.Debian: Explain how to move your configs over. I may make
    this automatic if enough people complain, but I'm loathe to muck
    around in pople's home directories.

  * debian/control:
    - Rename the package.
    - Tweak description to list Firefox's previous aliases.
    - Remove conflicts on mozilla-firebird-dom-inspector.

  * debian/rules: 
    - s/firebird/firefox/g, s/MozillaFirebird/firebird/g.
    - Comment out some old inspector code. 
    - Remove unused patch subsystem.
    - Disable gtktest. We don't need no stinking tests.
    - Remove disable plaintext editor line, not sure why it's there.
    - Disable LDAP support. We don't use it.
    - Remove executable bit on *.so files.
    - Remove useless preference files.
    - Exclude the inspector files.
    - Don't remove installed-chrome, we don't install it anymore.
    - user-app-dir = .firefox. (Closes: #212301)
    - export MOZILLA_OFFICIAL for the build ID. (Closes: #231133)

  * debian/mozilla-firefox-runner: 
    - s/firebird/firefox/g.
    - Remove composer and editor functions.
    - Use .firefox directory.

  * debian/mozilla-firefox.install: 
    - s/firebird/firefox/g, s/MozillaFirebird/firefox/g.
    - Don't install timebombgen.
    - Install icons directory.
    - Don't install installed-chrome.txt, we just remove it anyway. 

  * debian/mozilla-firefox.desktop, debian/mozilla-firefox.dirs,
    debian/mozilla-firefox.manpages, debian/mozilla-firefox.links,
    debian/mozilla-firefox.menu, debian/mozilla-firefox.mime,
    debian/mozilla-firefoxrc, debian/mozilla-firefox.postinst,
    debian/mozilla-firefox.prerm, debian/update-mozilla-firefox-chrome,
    debian/mozilla-firefox.1, debian/mozilla-firefox-xremote-client:
    s/firebird/firefox/g, s/MozillaFirebird/firefox/g.

  * debian/mozilla-firefox.links: Link mozilla-firefox.1 to firefox.1.
  
  * debian/mozilla-firefox.preinst: Remove, at least with the rename I can
    erase some of my previous blunders.

  * debian/mozilla-firefox.{png.uu,xpm}: Use the package icon.

  * browser/app/nsBrowserApp.cpp: Change package name to Firefox, so now
    the ~/.firefox is used. (Closes: #196550)

  * browser/app/profile/all.js: Merge in autoscroll fixes.
  * browser/base/content/browser-sets.inc: Merge in upstream stop button
    fix.
  * modules/plugin/samples/default/unix/nullplugin.c: Merge in removal of
    commented code.
  * nsprpub/pr/include/md/_linux.cfg, nsprpub/pr/include/md/_linux.h,
    security/coreconf/Linux.mk: Merge in hppa build fixes from upstream.
  * config/autoconf.mk.in: Install into /usr/lib/mozilla-firefox now.
  * content/base/src/nsDocumentViewer.cpp: Remove redundant stop patch
    since it has been merged upstream.
  * content/events/src/nsEventStateManager.cpp,
    modules/libpref/src/init/all.js, widget/src/gtk/nsWidget.cpp: Revert
    back to upstream version. There was a patch here to add support for
    extended mouse buttons, but I'm removing it since I don't trust that
    it works in the new version correctly. Send me another patch if you
    want this functionality back.
  * toolkit/components/passwordmgr/base/nsPasswordManager.cpp: Revert this
    back to upstream, I'm not sure which patches I applied to this file,
    likely something to try and fix the double password prompt.
  * widget/src/xremoteclient/XRemoteClient.cpp,
    widget/src/xremoteclient/XRemoteClient.h: Revert to upstream version,
    I believe it does the right thing now, but the patch I used does not
    apppear to have been used. Restore the properties to _FIREFOX_*
    though.
  * widget/src/gtk/nsGtkMozRemoteHelper.cpp,
    widget/src/gtk2/nsGtkMozRemoteHelper.cpp: Change the _FIREBIRD_* to
    _FIREFOX_* here as well.
  * content/base/src/nsDocument.cpp: Comment out nsDocument::GetDomConfig,
    needed to get things to compile.

 -- Eric Dorland <eric@debian.org>  Sun, 15 Feb 2004 21:28:45 -0500

mozilla-firebird (0.7-7) unstable; urgency=low

  * debian/mozilla-firebird-runner: Open a new window when loading a
    regular file. (Closes: #228853)

 -- Eric Dorland <eric@debian.org>  Thu, 29 Jan 2004 22:12:30 -0500

mozilla-firebird (0.7-6) unstable; urgency=medium

  * The "Indian-giver-christmas" release.
  * Urgency medium since we're closing some critical bugs that need to get
    in before a freeze.
  * Completely remove mozilla-firebird-dom-browser. No one stepped up to
    help fix it's brokeness in 0.7 and I don't use it or particularly care
    about it. So it is no more. If someone steps up to take responsibility
    I might put it back, but otherwise it may RIP. (Closes: #222085)
  * debian/mozilla-firebird-runner: Remove XUL.mfasl uncoditionally
    now. There is a corner case where this file is corrupted on upgrade
    when firebird was running. This is a total hack, and not an elegant
    solution, but at least it fixes the problem. (Closes: #224779,
    #224323)
  * debian/control: Conflict against old mozilla-firebird-dom-inspector
    since it doesn't work anymore.

 -- Eric Dorland <eric@debian.org>  Thu, 25 Dec 2003 15:54:21 -0500

mozilla-firebird (0.7-5) unstable; urgency=low

  * browser/base/content/browser-sets.inc: Patch to make ESC stop actually
    work. (Closes: #223382)
  * debian/rules: Turn down optimizations on sparc. (Closes: #223760)

 -- Eric Dorland <eric@debian.org>  Sun, 14 Dec 2003 23:01:59 -0500

mozilla-firebird (0.7-4) unstable; urgency=low

  * The "All of Takuo's hard work really pays off" release.
  * toolkit/components/passwordmgr/base/nsPasswordManager.cpp: Patch from
    upstream bugzilla (#220214) to fix double password prompt
    problem. (Closes: #222696)
  * xpcom/reflect/xptcall/src/md/unix/xptcstubs_asm_mips.s.m4: Stolen
    patch from mozilla package to make mozilla-firebird build on
    mips. (Closes: #222743)
  * content/base/src/nsDocumentViewer.cpp: Port yet another patch to allow
    the ESC key to stop animated gifs. (Closes: #223382)

 -- Eric Dorland <eric@debian.org>  Mon,  8 Dec 2003 23:59:16 -0500

mozilla-firebird (0.7-3) unstable; urgency=low

  * debian/control: Add dependency on psmisc since we use fuser. Thanks
    Daniel Schröter.
  * widget/src/xremoteclient/XRemoteClient.{cpp,h}: Apply patch from
    bugzilla to fix -remote behaviour on modern WMs. Thanks Nikolai
    Prokoschenko. (Closes: #197632)
  * nsprpub/pr/src/misc/prdtoa.c: Apply fix from mozilla package (#215067)
    to fix building on arm. This is a partial fix to #222743.
  * debian/patches: Remove these. Put everything in CVS.

 -- Eric Dorland <eric@debian.org>  Fri,  5 Dec 2003 20:03:46 -0500

mozilla-firebird (0.7-2) unstable; urgency=low

  * Apply excellent patch from Alexander Sack <asac@jwsdot.com> to fix the
    issues with mozilla running and firebird not starting. (Closes:
    #216264)
  * browser/app/profile/all.js: Set the default of "general.autoScroll" to
    false because it annoyes me. (Closes: #221661)

 -- Eric Dorland <eric@debian.org>  Wed, 19 Nov 2003 20:59:55 -0500

mozilla-firebird (0.7-1) unstable; urgency=low

  * New upstream release. (Closes: #216019)
  * debian/patches/dom-inspector.diff: Remove, and apply directly into my
    CVS.
  * debian/patches/pref.diff: Removed, doesn't seem applicable anymore.
  * debian/rules: export MOZ_FIREBIRD=1.
  * debian/control: 
    - Change Chimera to Camino. (Closes: #220821)
    - Fix typos in descriptions. (Closes: #218202)
    - Add build-deps on m4. (Closes: #219681)

 -- Eric Dorland <eric@debian.org>  Wed, 12 Nov 2003 23:01:35 -0500

mozilla-firebird (0.6.1-8) unstable; urgency=low

  * Apply patch to make forward and back buttons work on mice. (Closes:
    #211606)
  * debian/rules: Use -O optimization on alpha, so it will build
    again. (Closes: #213603)
  
 -- Eric Dorland <eric@debian.org>  Fri,  3 Oct 2003 00:07:44 -0400

mozilla-firebird (0.6.1-7) unstable; urgency=low

  * Rebuild with the latest and greatest from unstable. This seems to fix
    the problems with bookmarks people were having, at least for me. No
    idea why. Please reopen if this doesn't fix it for you. (Closes:
    #209339, #211706, #211286, #211146, #212011) 

 -- Eric Dorland <eric@debian.org>  Mon, 22 Sep 2003 00:00:08 -0400

mozilla-firebird (0.6.1-6) unstable; urgency=low

  * Patch from Eric Wong <normalperson@yhbt.net> to make plugin requests
    less annoying. (Closes: #196609)
  * debian/rules: Stop building libart.
  * debian/mozilla-firebird.links: Fix path to bookmarks file. (Partial
    fix to #211286)

 -- Eric Dorland <eric@debian.org>  Wed, 17 Sep 2003 20:22:56 -0400

mozilla-firebird (0.6.1-5) unstable; urgency=low

  * The "sorry Chris Gray" release.
  * debian/rules: disable SVG. This was causing drag and drop to lock up
    X and possibly fixes #208630. (Closes: #209371)
  * debian/mozilla-firebird-runner: Remove XUL.mfasl if we have upgraded,
    since it can cause problems. (Closes: #200073, #202130, #207351)

 -- Eric Dorland <eric@debian.org>  Sat, 13 Sep 2003 20:15:37 -0400

mozilla-firebird (0.6.1-4) unstable; urgency=low

  * The "pleasing Chris Gray" release.
  * other-licenses/libart_gpl: Add this library for svg.
  * debian/rules: 
    - Enable svg.
    - Move bookmarks.html file into /etc. (Closes: #207398)
  * debian/mozilla-firebird.links: Add links back to files moved to /etc.
  * security/coreconf/Linux2.6.mk: Add this as a copy of Linux2.5.mk to
    get mozilla-firebird to build on 2.6. (Closes: #207821)

 -- Eric Dorland <eric@debian.org>  Sun, 31 Aug 2003 04:40:30 -0400

mozilla-firebird (0.6.1-3) unstable; urgency=low

  * debian/mozilla-firebird.prerm: Remove mozilla alternative on
    remove. (Closes: #205310)
  * debian/debsearch.{gif.uu,src}: Debian search plugin graciously
    contributed by Fergus McKenzie-Kay <Linux@NerdIT.com>.
  * debian/rules: 
    - uudecode and clean up debsearch.gif.uu.
    - Steal platform specific optimization code from mozilla 
      package. Thanks Brian Nelson. (Closes: #206309) 
  * debian/mozilla-firebird.install: Install the above files. 
  * debian/control: Update Standards-Version to 3.6.1.

 -- Eric Dorland <eric@debian.org>  Sun, 24 Aug 2003 19:09:11 -0400

mozilla-firebird (0.6.1-2) unstable; urgency=low

  * The "Stop Pestering Me Already!" release.
  * debian/control: Only recommend xprt-xprintorg, don't require
    it. (Closes: #204176)

 -- Eric Dorland <eric@debian.org>  Sun, 10 Aug 2003 20:00:11 -0400

mozilla-firebird (0.6.1-1) unstable; urgency=low

  * New upstream release. (Closes: #203518, #201203)
  * debian/control:
    - Standards-Version to 3.6.0.
    - Don't provide www-browser anymore. (Closes: #201035)
    - Depend on xprt-xprintorg so printing will work. (Closes: #202418)
  * debian/mozilla-firebird.preinst: Remove www-browser alternative.
  * debian/mozilla-firebird.postinst: Don't install www-browser alternative.
  * debian/mozilla-firebird.prerm: Don't remove www-browser alternative
    anymore.
  * debian/README.Debian: Added note about configuration breaking on
    upgrade. (Closes: #202130)
  * debian/patches/classic.diff: Removed. Not sure what it's point was.
  * debian/rules: Add --disable-pedantic to the configure options.

 -- Eric Dorland <eric@debian.org>  Sun,  3 Aug 2003 14:58:12 -0400

mozilla-firebird (0.6-8) unstable; urgency=low

  * debian/patches/alpha-build-fix.diff: Steal patch from mozilla to allow
    building on alpha. (Closes: #198638)
  * debian/patches/hppa-build-fix.diff: Steal patch from mozilla to allow
    building on hppa, clean it up so it applies cleanly. (Closes: #199068)
  * debian/mozilla-firebird.png.uu: Added uuencoded nice png icon.
  * debian/rules: Add code to decode and clean up the new icon file.
  * debian/mozilla-firebird.install: Install new icon.
  * debian/mozilla-firebird.desktop: Use the new icon.

 -- Eric Dorland <eric@debian.org>  Fri, 27 Jun 2003 23:21:56 -0400

mozilla-firebird (0.6-7) unstable; urgency=low

  * debian/mozilla-firebird.1: Stole the mozilla manpage for my own
    nefarious purposes. (Closes: #196638)
  * debian/mozilla-firebird.postrm: Add slave links to the
    mozilla-firebird manpage. (Closes: #197145)
  * debian/mozilla-firebird-xremote-client: Set up the environment
    properly so it returns correct information. (Closes: #197632)
  * debian/mozilla-firebird.xpm: Added icon from
    http://iconpacks.mozdev.org/phoenix/iconshots/flame48true.png to have
    a nice menu icon. (Closes: #197565)
  * Updated the README.Debian with some helpful bug reporting tips.
  * debian/rules: Replaced dh_installmanpages with dh_installman.

 -- Eric Dorland <eric@debian.org>  Sun, 22 Jun 2003 15:15:37 -0400

mozilla-firebird (0.6-6) unstable; urgency=low

  * debian/mozilla-firebird.postinst: Add priority 0 alternative on
    mozilla. (Closes: #196444)
  * debian/control: Add build-depends on libxrender-dev, libmng-dev,
    libpng12-dev, libjpeg62-dev.
  * debian/rules: 
    - Build with system jpeg, mng and png libs.
    - Exclude inspector files from mozilla-firebird. 
      (Closes: #196432, #196509)

 -- Eric Dorland <eric@debian.org>  Sat,  7 Jun 2003 15:19:23 -0400

mozilla-firebird (0.6-5) unstable; urgency=low

  * The "Mike Hommey is my homey" release.
  * Thanks to Mike Hommey <mh@glandium.org> for his excellent work on this
    version (it's 99% his), which I've shamelessly stolen.
  * Added a README.Debian file.
  * Added a separate mozilla-firebird-dom-inspector package.
  * debian/patches/dom-inspector.diff:
    - add DOM Inspector to Tools menu. (note: DOM Inspector is still
      not very well integrated with Firebird)
    - remove modern skin references.
  * debian/patches/xpinstall.diff: remove unneeded chrome registrations
    from xpinstall/packager/unix/browser.jst.
  * debian/patches/classic.diff: remove
    themes/classic/global/win/preview.gif from jar file and modify
    preview image reference in rdf file to Preview.png.
  * debian/patches/pref.diff: remove preview image constraints in
    browser/components/prefwindow/skin/pref.css file to avoid deformation
    of preview image in classic theme.
  * debian/mozilla-firebird.preinst: added #DEBHELPER#.
  * debian/mozilla-firebird.install:
    - Don't install the modern.jar and embed-sample.jar files.
    - Remove files related to dom-inspector.
  * debian/rules:
    - enabling xinerama support.
    - disabling build of chatzilla and venkman.
    - moved /var/lib/mozilla-firebird/chrome.d/99default to
      /var/lib/mozilla-firebird/chrome.d/00all
    - remove references to embed-sample.jar in
      /var/lib/mozilla-firebird/chrome.d/00all
    - Add some comments.
    - Change == to =, for more strict /bin/sh's.
  * debian/control: Build-Depend on libidl-dev (>= 0.8.0) because the
    configure script requires at least this version.
  * debian/copyright: Make this a real debian copyright file. 
  
 -- Eric Dorland <eric@debian.org>  Thu,  5 Jun 2003 01:00:32 -0400

mozilla-firebird (0.6-4) unstable; urgency=low

  * debian/rules: Change -O2 to -O for building on powerpc.
  * debian/mozilla-firebird.preinst: Delete
    /usr/lib/mozilla-firebird/defaults/pref on upgrade to facilitate
    transition to prefs in /etc. Thanks to all who reported this.

 -- Eric Dorland <eric@debian.org>  Tue, 27 May 2003 21:45:06 -0400

mozilla-firebird (0.6-3) unstable; urgency=low

  * First attempt at a debian upload. (Closes: #163270)
  * debian/rules:
    + Small fix to Mike Hommey's chrome patch.
    + Suggestion from Bernhard R. Link to install
      /usr/lib/mozilla-firebird/defaults/pref to 
      /etc/mozilla-firebird/pref
    + Add dh_installmime call.
  * debian/mozilla-firebird.mime: Install mime type handlers for firebird.
  * debian/mozilla-firebird.links: Link
    /usr/lib/mozilla-firebird/defaults/pref to /etc/mozilla-firebird/pref
  * debian/mozilla-firebird.install: Don't install the inspector.jar.

 -- Eric Dorland <eric@debian.org>  Mon, 26 May 2003 00:28:40 -0400

mozilla-firebird (0.6-2) unstable; urgency=low

  * debian/rules:
    + Add --with-user-appdir=.mozilla-firebird, since it still 
      defaults to .phoenix.
    + Don't use the ${prefix} variable, use /usr, since ${prefix} 
      doesn't seem to work.
    + Use --without-system-nspr.
  * debian/mozilla-firebird.install:
    + Be picky about what chrome files we install, since there's 
      quite a few we don't need, and a bunch of empty dirs.
  * Excellent patch from Mike Hommey <mh@glandium.org> to add a
    update-mozilla-firebird-chrome script.
  
 -- Eric Dorland <eric@debian.org>  Sat, 24 May 2003 13:00:44 -0400

mozilla-firebird (0.6-1) unstable; urgency=low

  * New upstream release.
  * Renamed to mozilla-firebird.
  * Changed phoenix to mozilla-firebird where appropriate.
  * debian/mozilla-firebird.links: Add link mozilla-firebird to
    MozillaFirebird.
  * debian/control:
    + Standars-Version to 3.5.10.0.
    + Build-depend on gtk2 libs now.
    + Build-depend on libidl-dev.
    + Add Provides x-www-browser.
  * debian/rules:
    + Enable building with the gtk2 libs.
    + Make mozilla-firebird-xremote-client executable in install target.
  * debian/mozilla-firebird.desktop: Added gnome menu entry.
  * debian/mozilla-firebird.{prerm,postinst}: Add alternatives to
    www-browser and x-www-browser.

 -- Eric Dorland <eric@debian.org>  Mon, 19 May 2003 20:43:39 -0400

phoenix (0.5-4) unstable; urgency=low

  * debian/control: Depend on fontconfig.
  * debian/rules: Add source-tarball-from-cvs to build a orig tarball from
    a checked out cvs tree. Now I can provide source package. And there
    was much rejoicing.

 -- Eric Dorland <eric@debian.org>  Fri, 17 Jan 2003 21:06:47 -0500

phoenix (0.5-3) unstable; urgency=low

  * debian/phoenix-xremote-client: Added to send remote commands to
    phoenix. Just a wrapper that calls phoenix-bin -remote.
  * debian/phoenix-runner: 
    + Use phoenix-xremote-client.
    + Replace MOZILLA_DSP with PHOENIX_DSP.
  * debian/phoenixrc: phoenix-runner uses this file to determine what dsp
    to start.
  * debian/phoenix.install: 
    + Install phoenix-xremote-client, and don't install
	  mozilla-xremote-client.
    + Install phoenixrc.

 -- Eric Dorland <eric@debian.org>  Mon, 23 Dec 2002 02:52:21 -0500

phoenix (0.5-2) unstable; urgency=low

  * debian/control: 
    + Add Provides: www-browser.
    + Build-depend on libxft2-dev, libnspr-dev.
  * debian/rules:
    + Use xft and the system nspr.
    + Install phoenix-runner.
  * debian/phoenix-runner: Stolen from the mozilla package to run phoenix.

 -- Eric Dorland <eric@debian.org>  Sat, 21 Dec 2002 02:03:11 -0500

phoenix (0.5-1) unstable; urgency=low

  * New upstream release.
  * debian/phoenix.install: Fix paths to phoenix libs.
  * debian/control: 
    + Standards-Version to 3.5.8
    + Improve build-deps.
  * debian/rules: 
    + Have configure options here, no more .mozconfig.
    + Steal some patch code from Colin.
  * debian/patches/mozappdir.diff: Change the mozappdir.
  
 -- Eric Dorland <eric@debian.org>  Mon,  9 Dec 2002 02:43:13 -0500

phoenix (0.4-3) unstable; urgency=low

  * debian/phoenix.menu: Add menu entry.
  * Rebuild to fix libstdc++ dependency.
  * .mozonfig: Disable more tests.

 -- Eric Dorland <eric@debian.org>  Wed, 20 Nov 2002 19:13:18 -0500

phoenix (0.4-2) unstable; urgency=low

  * debian/control:
    + Add build-depends.
    + Fix section and description.
  * .mozconfig:
    + Use system zlib.

 -- Eric Dorland <eric@debian.org>  Wed, 13 Nov 2002 19:03:52 -0500

phoenix (0.4-1) unstable; urgency=low

  * Initial release.
  
 -- Eric Dorland <eric@debian.org>  Mon, 11 Nov 2002 23:09:41 -0500