lp:ubuntu/precise-security/firefox

Created by Ubuntu Package Importer on 2012-04-28 and last modified on 2012-08-29
Get this branch:
bzr branch lp:ubuntu/precise-security/firefox
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

155. By Chris Coulson on 2012-08-25

* New upstream stable release (FIREFOX_15_0_BUILD1)
  - see LP: #1041620 for USN information

* Update globalmenu-extension to 3.4
  + Drop the edit UI workarounds
  + Fixes for LP: #1035305 - Crash when switching apps back to Firefox
    with Firebug installed
    - Keep the menu we export in sync with the document tree all of the
      time, rather than only when the menus are on screen. The HUD likes to
      open submenus without opening any of its ancestors, which can result in
      us handling events on menu nodes that are no longer in a document
      if an ancestor responds to a bubbled-up event by removing its
      children
    - Ensure we always null check the result of nsIDocument::GetCurrentDoc
  + When tearing down a menu, make sure that we empty out our DbusmenuMenuitem
    in case the parent reuses that item for another menu. Fixes a memory leak
    and an issue where Firebug menu items are duplicated indefinitely each
    time a menu is opened
  + Fixes for LP: #1025011 - HUD search crashes Firefox when Firebug
    is installed
    - Provide our own binding for menupopup nodes which derives from the
      default binding and makes the "state" property work as if there
      were a frame
    - Make all menu nodes reference counted, and hold a strong ref when
      dispatching events, in case the event results in the removal of menu
      nodes
  + Fix LP: #813775 - Hitting an assertion in dbusmenu
  + Fix LP: #861565 - No buttons in the "Show All Bookmarks" dialog
  + Fix LP: #775305 - An empty menu appears when FFChrome is installed
  + Add a small delay when opening the menu with the keyboard, so that
    the additional items are added before the menu appears. Fixes an
    issue where keyboard focus isn't on the first item when opening the
    history menu with the keyboard
* Add Acholi to the locale blacklist
* Separate the package name from the application name in various places.
  This enables us to change the package name without having to modify the
  application or packaging (eg, to allow us to provide official branded
  versions of Firefox ESR using the package name "firefox-esr")
  - update debian/README.Debian.in
  - update debian/apport/source_firefox.py.in
  - update debian/build/get-orig-source.mk
  - update debian/control{,.in}
  - update debian/control.langpacks
  - update debian/control.langpacks.unavail
  - update debian/firefox-locale.preinst.in
  - update debian/firefox.install.in
  - update debian/firefox.links.in
  - update debian/firefox.lintian-overrides.in
  - update debian/firefox.postinst.in
  - update debian/firefox.postrm.in
  - update debian/firefox.preinst.in
  - update debian/firefox.sh.in
  - remove debian/patches/change-moz-app-name.patch
  - update debian/patches/series
  - update debian/rules
  - update debian/usr.bin.firefox.apparmor.*
* Move parts of debian/rules that can be shared with Thunderbird to a
  new, common file (mozbuild.mk)
  - update debian/rules
  - add debian/build/mozbuild.mk
  - add debian/build/mozvars.mk
  - update debian/build/testsuite.mk
* Make it possible to use the same create-tarball.py for Firefox and
  Thunderbird
  - update debian/build/create-tarball.py
  - update debian/build/get-orig-source.mk
  - add debian/config/tarball.conf
* Switch to source format 3.0
  - add debian/source/format
  - add debian/source/options to diff-ignore the .mozclient.mk file which
    is created during clean, and to pass "--no-preparation"
  - update debian/build/enable-dist-patches.pl
  - rename debian/patches/series => debian/patches/series.in so the source
    isn't built with patches applied
  - update debian/README.source
* Goodbye embedded tarball, and our use of tarball.mk!
  - update debian/build/create-tarball.py
  - update debian/build/extract-file.py
  - update debian/build/get-orig-source.mk
  - update debian/build/mozbuild.mk
* Run the upstream cleansrcdir target during clean
  - update debian/build/mozbuild.mk
* Refresh patches
  - update debian/patches/mozilla-kde.patch
* Support the "parallel" option in DEB_BUILD_OPTIONS
  - update debian/build/mozbuild.mk
  - update debian/config/mozconfig.in
* Drop some of the complex shell script for creating language packs
  - update debian/build/mozbuild.mk
  - update debian/build/get-xpi-id.py
* Drop searchplugin patches - these patches are an absolute pain to maintain,
  as they seem to break frequently and we have to touch each localized
  plugin. Instead, just keep our own copy of plugins we modify, and add
  these in to the language packs at the end of the build process
  - remove debian/patches/ubuntu-codes-google.patch
  - remove debian/patches/ubuntu-codes-amazon.patch
  - remove debian/patches/ubuntu-codes-baidu.patch
  - update debian/patches/series.in
  - update debian/build/mozbuild.mk
  - add debian/searchplugins/*
* Get rid of pointless python script
  - remove debian/build/extract-file.py
  - update debian/build/mozbuild.mk
* Add an automated check for finding search engines that match particular
  patterns and verifying that they are replaced with our own search
  engine if we think they should be
  - add debian/build/check-search-overrides.pl
  - update debian/build/mozbuild.mk
  - add debian/searchplugins/overrides.json
  - update debian/control{,.in}
* Drop reload-new-plugins.patch, as this shouldn't actually be needed
  - remove debian/patches/reload-new-plugins.patch
  - update debian/patches/series.in
* Merge get-orig-source.mk in to mozbuild.mk
  - update debian/build/mozbuild.mk
  - remove debian/build/get-orig-source.mk
* Handle comments in locales.blacklist
  - update debian/build/refresh-supported-locales.pl
  - update debian/config/locales.blacklist
* Fork the upstream text preprocessor and add support for additional
  comparison operators, which means we no longer have to add new
  defines for every distro version specific change we add
  - add debian/build/Expression.py
  - add debian/build/Preprocessor.py
  - update debian/apport/source_firefox.py.in
  - update debian/build/mozbuild.mk
  - update debian/config/mozconfig.in
  - update debian/firefox-dev.install.in
  - update debian/firefox-locale.preinst.in
  - update debian/firefox.desktop.in
  - update debian/firefox.dirs.in
  - update debian/firefox.install.in
  - update debian/firefox.links.in
  - update debian/firefox.postinst.in
  - update debian/firefox.postrm.in
  - update debian/firefox.preinst.in
  - update debian/firefox.prerm.in
  - update debian/rules
* Refresh shipped locales
* Drop powerpc patches, which are fixed upstream
  - remove debian/patches/fix-dtoa-build-on-ppc.patch and
  - remove debian/patches/fix-build-failure-without-yarr-jit.patch
  - update debian/patches/series.in
* Drop fix-crashreporter-ftbfs-with-gcc4.7.patch, which is fixed upstream

154. By Chris Coulson on 2012-07-13

* New upstream stable release (FIREFOX_14_0_1_BUILD1)
  - see LP: #1024562 for USN information

[ Chris Coulson <email address hidden> ]
* Update globalmenu-extension to 3.2.5
  - Fix LP: #1010580 - No choice of folder when adding a bookmark from
    the bookmark menu
  - Fix a crash in uGlobalMenu::RecycleList::~RecycleList()
* Refresh patches
  - update debian/patches/ubuntu-codes-google.patch
  - update debian/patches/allow-lockPref-everywhere.patch
  - update debian/patches/plugin-for-mimetype-pref.patch
  - update debian/patches/add-syspref-dir.patch
* Drop patches fixed upstream
  - remove debian/patches/revert-bmo621446-investigation.patch
* Add Keywords to the desktop file
  - update debian/firefox.desktop.in
* Update desktop file translations
  - update debian/firefox.sh.in
* Ensure that additional actions in the desktop file match the fd.o spec
  in precise and newer
  - update debian/firefox.desktop.in
  - update debian/rules
* Drop the application/vnd.mozilla.xul+xml mimetype from the desktop file.
  Firefox hasn't been able to view XUL files from non-chrome URI's since
  version 4.0
  - update debian/firefox.desktop.in
* Add application/x-xpinstall to the MimeType field of the desktop file
  - update debian/firefox.desktop.in
* Drop the ability to select between tree/system libraries using a single
  option in debian/rules. It adds additional complexity and was never used
  - update debian/config/mozconfig.in
  - update debian/control.in
  - update debian/firefox-dev.install.in
  - update debian/firefox-dev.links.in
  - update debian/pkgconfig/libxul.pc.in
  - update debian/rules
* Fix make-makefile test failure when the build directory contains
  perl regexp control characters
  - add debian/patches/make-makefile-test-fix.patch
  - update debian/patches/series
* Shuffle the order of google-breakpad/src/common/dwarf/Makefile.in to fix a
  variable substitution issue, which was causing some objects to be built with
  the wrong compiler flags, resulting in dump_syms crashing (LP: #1002590)
  - add debian/patches/fix-makefile-substitution-bug.patch
* Update StartupWMClass to the correct name
  - update debian/firefox.desktop.in
  - update debian/rules
* Add search plugin for DuckDuckGo
* Fix LP: #1000820 - firefox-dev conflicts with xulrunner-1.9-dev for
  people with the latter still installed
  - update debian/control{,.in}
* Add Fulah to locales.blacklist
* Fix LP: #1013186 - install our vendor preferences as application
  defaults rather than GRE defaults, so that they are loaded after
  the upstream defaults again. The upstream defaults were also moved
  as part of the webapp runtime work (which has it's own application
  defaults)
  - update debian/firefox.install.in
  - update debian/firefox.links.in
* Apport hook improvements:
  - Sort preferences alphabetically in the apport data
  - Treat preferences set in default addons as default prefs so that
    they don't show up in apport data, unless the preference files have
    been modified
  - Support random pref files dropped in to the Firefox install folder, and
    preferences from application bundles
  - Fix ordering issues when loading preferences
* Drop debian/patches/plugin-for-mimetype-pref.patch. The burden of
  carrying this is starting to outweigh the benefits of it

[ Ben Collins <email address hidden> ]
* Cherry pick patch from aurora to use YARR interpreter on ppc
  - update debian/patches/fix-build-failure-without-yarr-jit.patch
  - update debian/patches/series
* Fix ppc build due to new dtoa library
  - add debian/patches/fix-dtoa-build-on-ppc.patch
  - update debian/patches/series

153. By Micah Gersten on 2012-06-15

* New upstream stable release (FIREFOX_13_0_1_BUILD1)
  - see LP: #1013425 for USN information

152. By Chris Coulson on 2012-06-01

* New upstream stable release (FIREFOX_13_0_BUILD1)
  - see LP: #1007495 for USN information

[ Chris Coulson <email address hidden> ]
* Refresh build-depends:
  - Bump minimum GTK version to 2.14 as we build with GIO support
  - Add minimum requirement for glib (2.18)
  - Drop libidl-dev, this doesn't appear to be needed now
  - Bump minimum NSPR version to 4.9.0 for --enable-system-nspr builds
  - Bump minimum sqlite version to 3.7.10 for --enable-system-sqlite
    builds
  - Bump minimum NSS version to 3.13.2 for --enable-system-nss builds
* Refresh patches:
  - update debian/patches/ubuntu-ua-string-changes.patch
  - update debian/patches/ubuntu-codes-google.patch
  - update debian/patches/dont-include-hyphenation-patterns.patch
* Clean up the file exclude list and add comments for excluded files
  - update debian/build/create-tarball.py
* Make it easy to run Firefox in valgrind for builds that are compiled
  with explicit valgrind support
  - update debian/firefox.sh.in
* Bump debhelper compat to 7
  - update debian/apport/blacklist.in
  - update debian/apport/source_firefox.py.in
  - update debian/compat
  - update debian/config/mozconfig.in
  - update debian/control.in
  - update debian/firefox-dev.install.in
  - update debian/firefox-dev.links.in
  - update debian/firefox-globalmenu.dirs.in
  - update debian/firefox-gnome-support.install.in
  - update debian/firefox.dirs.in
  - update debian/firefox.install.in
  - update debian/firefox.links.in
  - update debian/firefox.postinst.in
  - update debian/firefox.preinst.in
  - update debian/firefox.sh.in
  - update debian/pkgconfig/libxul.pc.in
  - update debian/pkgconfig/mozilla-nspr.pc.in
  - update debian/pkgconfig/mozilla-plugin.pc.in
  - update debian/rules
  - update debian/usr.bin.firefox.apparmor.10.04
  - update debian/usr.bin.firefox.apparmor.10.10
  - update debian/usr.bin.firefox.apparmor.11.04
  - update debian/usr.bin.firefox.apparmor.12.04
  - update debian/usr.bin.firefox.apparmor.9.10
* Override 2 embedded-library lintian errors
  - update debian/firefox.lintian-overrides.in
* Drop debian/patches/distro-locale-searchplugins after landing of
  bmo: #515232
* Don't hardcode general.useragent.locale to en-US, now that it's used
  for searchplugin localization. This means we can drop this pref from
  ubufox
  - add debian/patches/dont-override-general-useragent-locale.patch
  - update debian/patches/series
* Drop patches fixed upstream
  - remove debian/patches/no-sps-profiler-on-unsupported-archs.patch
  - remove debian/patches/avoid-dbus-roundtrip-for-httpchannel.patch
  - update debian/patches/series
* Apport hook improvements:
  - Add support for reporting preference defaults that are set by extensions
  - When reporting preferences, record the source of each preference
  - Report plugin packages for plugins that are installed with the
    package manager
  - Add some addon manager related prefs to the whitelist
  - Display additional metadata in the extensions report
  - Take "default-to-compatible" in to account when determining whether
    the user is running incompatible addons
  - Attach submitted crash ID's to bug reports
  - Report if files in the profile folder have broken permissions
* Update compare-locales to 0.9.5
* Fix make-makefile test failure when the build directory contains
  perl regexp control characters
  - add debian/patches/make-makefile-test-fix.patch
  - update debian/patches/series
* Fix for NSS libs not being signed, breaking FIPS
  - update debian/rules

[ Jamie Strandboge <email address hidden> ]
* adjust apparmor profile to deny reads to @{PROC}/[0-9]*/net/dev. Patch
  thanks to James Troup (LP: #955066)
* adjust apparmor profile to deny reads to @{PROC}/[0-9]*/net/wireless.
  Patch thanks to James Troup (LP: #974141)

151. By Chris Coulson on 2012-04-23

* New upstream stable release (FIREFOX_12_0_BUILD1)
  - see LP: #987262 for USN information

* Update globalmenu-extension to 3.2.3
  - Fix regression introduced by the fix for LP: #915888
* Firefox recommends libcanberra0 now that bmo: #635918 has landed
  - update debian/control{,in}
* Refresh patches
  - update debian/patches/avoid-dbus-roundtrip-for-httpchannel.patch
  - update debian/patches/no-sps-profiler-on-unsupported-archs.patch
  - update debian/patches/ubuntu-codes-google.patch
* Refresh locales
  - refresh debian/config/locales.all
  - refresh debian/control
* Make the language packs Architecture: any. Whilst they are actually
  architecture independent, we do install them in to /usr/lib (as the
  extensions location is shared with architecture-specific extensions).
  This also avoids the problem of offering incompatible language pack
  upgrades to users on architectures where Firefox fails to build
  (I'm looking at you, powerpc)
  - update debian/control.langpacks
  - update debian/control.langpacks.unavail
  - update debian/rules
  - refresh debian/control
* Disable fix-build-failure-without-yarr-jit.patch, as it needs some work.
  This means that there is currently no powerpc support

150. By Chris Coulson on 2012-04-10

* Update globalmenu-extension to 3.2
  - Fix LP: #915888 - Handling of checkbox menuitems with a command
    node is completely broken
  - Make uGlobalMenu::RemoveMenuObjectAt work correctly when removed items
    are not contiguous
  - Don't try to recycle an item that wasn't a separator as an item that is
    a separator, as this breaks the menu (we already ensured that the reverse
    of this couldn't happen)

149. By Chris Coulson on 2012-04-02

* Update globalmenu-extension to 3.1
  - Fix a crash where a menu is destroyed whilst there is a pending event
    to empty its recycle list

148. By Chris Coulson on 2012-04-02

* Update globalmenu-extension to 3.0.1
  - Reduce our memory footprint a bit, which wasn't really a lot anyway
  - Avoid the use of the component manager for accessing commonly used
    services, where "commonly used" means "accessed when building every
    menu item". This should save some CPU cycles when building or
    refreshing menus
  - Try to recycle menuitems when they are removed from a menu by
    adding contiguous blocks of removed items to a "free list" which
    is emptied asynchronously, and reusing the items in this list when
    new items are added in place of the removed items. This means that
    refreshing the history menu contents when the menu is opened no
    longer alters the menu structure, but results in a shifting of
    properties between existing nodes instead. This has a few benefits:
    + With no layout changes, unity-panel-service doesn't request
      the entire menu structure, which significantly reduces dbus traffic
      and makes it much faster to refresh the menu contents
    + The size of the menu doesn't change when it is refreshed, which
      eliminates the flicker that used to occur when opening the history
      menu.
    + The HUD can refresh our menus now without triggering layout updates
      (assuming that menu layout really hasn't changed, eg, by adding
      a bookmark)
  - Remove all use of the global observer service for sending our own
    internal notifications around
  - Clean up the way we ensure that the correct edit commands are
    enabled by just installing our own popupshowing handler rather
    than using an additional notification to fix things up after the
    default handler runs
  - Get rid of a static initializer
  - Don't support older than Firefox 11
  - Fix some GError leaks
  - Hide the internal menu when creating a native menu, rather than
    waiting for confirmation that the native menu is registered
    successfully. We don't try to create a native menu if we don't
    find a menu service to register the menu with anyway
  - Keep menu contents updated whilst the menu is open, rather than
    just whilst it is opening

147. By Chris Coulson on 2012-03-13

* New upstream stable release (FIREFOX_11_0_BUILD1)

* Clean up search plugin installation now that we build our own
  language packs:
  - Drop the recursive symlink from /usr/lib/firefox-addons/searchplugins,
    which lintian kept complaining about
  - Don't effectively symlink distribution/searchplugins to searchplugins,
    as they have different layouts and this avoids the same data being
    iterated over twice
  - Revert to the upstream layout in distribution/searchplugins
  - Simplify distro-locale-searchplugins.patch, as we don't need to swap the
    loading order of common / locale-specific searchplugin paths now.
    $LIBDIR/distribution/searchplugins/common is no longer a symlink
    to $LIBDIR/searchplugins, so there is no need to have the ability for
    locale-specific plugins to override common ones. They already override
    those in $LIBDIR/searchplugins
    - add debian/firefox-locale.preinst.in, which will end up in all
      language packs to assist the symlink -> folder transition
    - update debian/firefox.dirs.in
    - update debian/firefox.install.in
    - update debian/firefox.links.in
    - update debian/firefox.preinst.in
    - update debian/patches/distro-locale-searchplugins.patch
    - update debian/rules
* Fix LP: #807733 - Firefox doesn't restart after upgrades where the version
  changes. Don't include the version number in the install path, as Firefox
  cannot re-exec itself. In doing this, we also move the distribution.ini
  back in to our installation directory, as that never made sense in
  /usr/lib/firefox-addons
  - update debian/firefox-dev.install.in
  - update debian/firefox-dev.links.in
  - update debian/firefox-locale.preinst.in
  - update debian/firefox.lintian-overrides.in
  - update debian/firefox.preinst.in
  - update debian/rules
* Expose distribution/extensions in /usr/lib/firefox-addons, to allow
  administrators to add extensions that they want to add to default user
  profiles, and that they want the addon manager to keep updated. We lost
  this functionality when upgrading from Firefox 3.6, due to the loss of
  /etc/firefox/profile
  - update debian/firefox.dirs.in
  - update debian/firefox.install.in
  - update debian/firefox.links.in
  - update debian/firefox.postinst.in

146. By Chris Coulson on 2012-03-09

New upstream release from the beta channel (FIREFOX_11_0b7_BUILD1)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/quantal/firefox
This branch contains Public information 
Everyone can see this information.

Subscribers