lp:ubuntu/hardy/firefox

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

69. By Alexander Sack on 2008-04-18

* New security/stability upstream release (v2.0.0.14)
  - see USN-602-1
* fix "shipped nss links don't point to latest so version"
  - update firefox-2.links

68. By Alexander Sack on 2008-03-25

* New security/stability upstream release (v2.0.0.13)
  - see USN-592-1
* drop patches applied upstream
  - delete debian/patches/bz399589_fix_missing_symbol_with_new_nss.patch
  - update debian/patches/series

67. By Alexander Sack on 2008-02-25

* FF Exception upload: LP: #193319
* make firefox 2 2nd class citizen, by renaming binary packages
  from firefox* to firefox-2*
* fix update-desktop database invocation to use proper path
  (/usr/bin/update-desktop-database)
  - update debian/firefox-2.postinst
* fix .desktop icon to refer to firefox.png again
  - update debian/firefox-2.desktop
* elminate superfluous firefox-2 -> firefox links
  - update debian/firefox-2-dev.links
  - update debian/firefox-2.links
* provide compatibility links for several .pc files: firefox-gtkmozembed.pc,
  firefox-js.pc, firefox-plugin.pc, firefox-xpcom.pc
  - update debian/firefox-2-dev.links

66. By Alexander Sack on 2008-02-11

* update patch to support NSS for firefox 3 beta 3
  - add debian/patches/bz399589_fix_missing_symbol_with_new_nss.patch
  - update debian/patches/series
* improve readability of control file by unfolding Build-Depends to
  multiple-lines
  - update debian/control

65. By Alexander Sack on 2008-02-11

[ Alexander Sack ]
* New stability upstream release (v2.0.0.12)
* MFSA 2008-01 aka CVE-2008-0412: Crashes with evidence of memory corruption
  v1.8.1.12 (Browser crashes)
* MFSA 2008-01 aka CVE-2008-0413: Crashes with evidence of memory corruption
  v1.8.1.12 (javascript crashes)
* MFSA 2008-02 aka CVE-2008-0414: Multiple file input focus stealing
  vulnerabilities: 1. Focus shifting bugs and 2. Selective keystroke
  blocking bugs
* MFSA 2008-03 aka CVE-2008-0415: Privilege escalation, XSS, Remote Code
  Execution (JavaScript privilege escalation bugs)
* MFSA 2008-04 aka CVE-2008-0416: Multiple XSS vulnerabilities from
  character encoding
* MFSA 2008-05 aka CVE-2008-0417: Stored password corruption
* MFSA 2008-06 aka CVE-2008-0418: Directory traversal via chrome: URI
* MFSA 2008-07 aka CVE-2008-0419: Web browsing history and forward
  navigation
  stealing
* MFSA 2008-08 aka CVE-2008-0420: Possible information disclosure in BMP
  decoder
* MFSA 2008-09 aka CVE-2008-0591: File action dialog tampering
* MFSA 2008-10 aka CVE-2008-0592: Mishandling of locally-saved plain text
  files
* MFSA 2008-11 aka CVE-2008-0593: URL token stealing via stylesheet redirect
* MFSA 2008-12 aka CVE-2008-0594: Web forgery overwrite with div overlay
* updated diverged patches
  - debian/patches/ubuntu-look-and-feel-patch.patch
  - debian/patches/configure-autoconf2-13-reconfigure.patch
  - debian/patches/series
* remove patches applied upstream
  - debian/patches/bz391028_att284556.patch

64. By Alexander Sack on 2007-11-28

New security/stability upstream release (v2.0.0.10):
* include follow up patch to fix 2.0.0.10 regression (bz391028):
  - add debian/patches/bz391028_att284556.patch
  - update debian/patches/series
* include patch for cairo Xlib build failure (bz344818):
  - add bz344818_att264996.patch
  - update debian/patches/series
  - update debian/patches/configure-autoconf2-13-reconfigure.patch

63. By Alexander Sack on 2007-10-28

debian/control: fix package description to not include "development
version disclaimer (LP: #150791).

62. By Alexander Sack on 2007-10-08

* Reupload source tarball without binaries (LP: #121734) - sanitized using
  debian/remove.binonly.sh
* debian/remove.binonly.sh: add script to strip original tarball from
  binary only cruft.
* debian/debsearch.src: debsearch plugin now searches for gutsy packages
  (LP: #150503).

61. By Alexander Sack on 2007-09-19

* patch shaping: rename patches and include there bugzilla id
  where available; document bzXXX-dont-reset-user-prefs-on-upgrade and
  force-no-pragma-visibility-for-gcc-4.2_4.3 patches.
* debian/patches/bz389801-theme-crash-with-GtkOptionMenu-indicator_size-and-indicator_spacing.patch:
  prefetch latest patch from bugzilla 389801 to fix top-crasher
  (LP: #129007).
* debian/firefox-gnome-support.install: properly install gnome support files
  previously missing in firefox-gnome-support package (LP: #131743).

60. By Alexander Sack on 2007-08-27

* debian/rules, debian/control: use don't build lpia with gcc-4.1/g++-4.1 anymore, but
  use gcc-4.2/g++-4.2 for all archs now.
* debian/patches/force-no-pragma-visibility-for-gcc-4.2_4.3, debian/patches/series:
  add patch to siable pragma visibility strategy to hide symbols. stick to
  -fvisibility=hidden.
* debian/patches/configure-autoconf2-13-reconfigure.patch: rerun autoconf2.13 to make
  new force-no-pragma-visibility-for-gcc-4.2_4.3 effective.
* remove unused patches from debian/patches directory:
  - debian/patches/bz364093-thebes-system-cairo-fix
  - debian/patches/ftbfs-with-branding-dir
  - debian/patches/no-have-stdint-h-ftbfs.patch
  - debian/patches/submakefiles-fix
  - debian/patches/test
  - debian/patches/trunk-fsh