Change logs for mozjs52 source package in Bionic

  • mozjs52 (52.9.1-0ubuntu0.18.04.1) bionic-security; urgency=medium
    
      * SECURITY UPDATE: Multiple memory safety issues
        - CVE-2018-5188
    
      * Update to 52.9.1esr
      * Run dh_autoreconf
        - add debian/autogen.sh
        - update debian/rules
        - remove debian/patches/pre-generate-old-configure.patch
        - update debian/patches/series
      * Drop obsolete configure flags
        - update debian/rules
        - remove debian/patches/include-configure-script.patch
        - update debian/patches/series
    
     -- Chris Coulson <email address hidden>  Tue, 21 Aug 2018 18:41:30 +0100
  • mozjs52 (52.8.1-0ubuntu0.18.04.1) bionic-security; urgency=medium
    
      * SECURITY UPDATE: Multiple memory safety issues
        - CVE-2017-7810, CVE-2017-7826, CVE-2018-5089, CVE-2018-5125,
          CVE-2018-5150
    
      * Update to 52.8.1esr
      * Drop patches that are fixed upstream
        - remove debian/patches/remove-nspr-dependency.patch
        - remove debian/patches/tests-skip-on-all-64-bit-archs.patch
        - update debian/patches/series
      * Refresh patches
        - update debian/patches/include-configure-script.patch - the
          configure script is included in the tarball now. This patch should
          probably be renamed to something more appropriate
        - update debian/patches/pre-generate-old-configure.patch - a pre-generated
          old-configure script is included in the tarball now, although the one
          generated by js/src/make-source-package.sh includes the wrong aclocal.m4
          and doesn't work, so regenerate it again with the correct aclocal.m4
      * Move pre-generate-old-configure.patch to after
        Allow-to-override-ICU_DATA_FILE-from-the-environment.patch and drop
        Patch-pregenerated-old-configure-to-match-build-autoconf-.patch
        - update debian/patches/series
        - remove debian/patches/Patch-pregenerated-old-configure-to-match-build-autoconf-.patch
        - update debian/patches/pre-generate-old-configure.patch to refresh old-configure
      * Don't build-depend on libicu-dev - the bundled ICU is used and the
        distro ICU package ships the layout engine API since 60.2, which
        causes intl/icu_sources_data.py to fail due to source files excluded from
        the Mozilla source
    
     -- Chris Coulson <email address hidden>  Mon, 11 Jun 2018 18:00:08 +0100
  • mozjs52 (52.3.1-7fakesync1) bionic; urgency=medium
    
      * Fake sync due to mismatching orig tarball.
    
    mozjs52 (52.3.1-7) unstable; urgency=medium
    
      [ Adrian Bunk ]
      * Add tests-snans-be.patch:
        - Fix sort_snans.js test on big endian (Closes: #878285)
    
    mozjs52 (52.3.1-6) unstable; urgency=medium
    
      [ Adrian Bunk ]
      * Disable ion JIT on mips (Closes: #878519, #878284)
      * Rename Fix-crashes-in-AtomicOperations-none-on-s390x.patch to
        Fix-crashes-in-AtomicOperations-none.patch and modify it to
        always use AtomicOperations-sparc.h instead of AtomicOperations-none.h
      * Add tests-increase-timeout.patch:
        - Set timeout to 600 seconds instead of 300 for slower buildds
      * Stop ignoring test failures on mips
    
      [ Jeremy Bicha ]
      * Much thanks to Adrian Bunk for all of his help in fixing mozjs
        build problems!
    
      [ Simon McVittie ]
      * Explicitly select gcc/g++ even if clang is installed, overriding ICU's
        configure.ac (Closes: #878669)
    
    mozjs52 (52.3.1-5) unstable; urgency=medium
    
      * Team upload
    
      [ Simon McVittie ]
      * Regenerate patches
      * Export SHELL and PYTHON for all stages of the build process
        (Closes: #876354)
      * d/p/Allow-to-override-ICU_DATA_FILE-from-the-environment.patch:
        Add patch from firefox-esr to allow ICU_DATA_FILE to be forced in
        the environment. We need to use a big-endian version on BE
        architectures.
      * d/p/Patch-pregenerated-old-configure-to-match-build-autoconf-.patch:
        Apply the equivalent of that patch to the pregenerated old-configure
        script
      * d/p/Add-intl-icu_sources_data.py-from-firefox-esr.patch:
        Add patch importing intl/icu_sources_data.py from firefox-esr_52.4.0esr-2
        so we can regenerate the ICU_DATA_FILE
      * d/rules: Regenerate the ICU_DATA_FILE (with the correct endianness)
        so the interpreter doesn't fail to initialize on big-endian
        architectures (Closes: #873778)
      * d/p/icu_sources_data.py-Decouple-from-Mozilla-build-system.patch:
        Avoid needing the mozpack module to generate the ICU_DATA_FILE
      * d/p/Fix-crashes-in-AtomicOperations-none-on-s390x.patch:
        Add patch from firefox-esr to fix atomic operations crashes on s390x
      * d/p/icu_sources_data-Write-command-output-to-our-stderr.patch:
        Make sure output from icu_sources_data.py ends up in buildd logs
      * d/p/tests-For-tests-that-are-skipped-on-64-bit-mips64-is-also.patch:
        Count mips64 as a 64-bit architecture for the purposes of skipping
        tests
      * d/rules: Run a "hello, world" program before running the test suite.
        If mozjs fails to initialize on a platform, the diagnostics given
        are fairly useless; try something much simpler before we go to the
        effort of running the full test suite. Failure to run this program
        causes FTBFS, to make sure we won't ship completely useless builds.
      * d/test.sh: Wrap build-time tests, making test-suite failures
        non-fatal on architectures with known issues (downgrades severity
        of: #877428, #878284, #878285, #878286)
      * d/rules: Skip build-time tests if cross-compiling
      * d/rules: Run icu build with VERBOSE=1 to see compilation commands
    
      [ Jeremy Bicha ]
      * Add Don-t-include-xlocale.patch: Fix build with glibc >= 2.26
    
    mozjs52 (52.3.1-4) unstable; urgency=medium
    
      [ Jeremy Bicha ]
      * Drop obsolete Ubuntu-specific --enable-thumb2 rule
    
      [ Iain Lane ]
      * Fix --build= to --target=, as the former doesn't exist.
    
      [ Adrian Bunk ]
      * Remove obsolete --disable-methodjit flags
      * Sync compiler flags from firefox-esr:
        - Use -fno-schedule-insns also on armel.
        - Use "-fno-schedule-insns2
          -fno-lifetime-dse-fno-delete-null-pointer-checks" on all architectures.
    
    mozjs52 (52.3.1-3) unstable; urgency=medium
    
      * debian/rules: Fix dh_auto_test override logic
    
    mozjs52 (52.3.1-2) unstable; urgency=medium
    
      [ Iain Lane ]
      * debian/rules: Pass -fno-schedule-insns on armhf to prevent runtime
        failures. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1337263
    
      [ Jeremy Bicha ]
      * Make tests fatal except on ppc64el and kfreebsd.
    
    mozjs52 (52.3.1-1) unstable; urgency=medium
    
      [ Rico Tzschichholz]
      * New upstream release (Closes: #860396) (LP: #1662094)
      * Update version from mozjs24 to mozjs38
      * debian/control, debian/rules:
        - Build with autoconf2.13
      * Add patches:
        - copy-headers.patch:
          + Copy headers instead of symlinking
      * Drop patches:
        - aarch64-support.patch, applied in new version
        - fix-perl-5.22.patch, this perl script doesn't exist in new version
    
      [ Jeremy Bicha ]
      * Switch maintainer to Debian GNOME team
      * debian/control:
        - Build-Depend on libicu-dev, libreadline-dev and python-dev
        - Drop Build-Depends on libnspr4-dev
      * debian/rules: Copy these build flags from Fedora:
        --with-intl-api
        --with-system-icu
        --with-system-zlib
        --enable-readline
        --enable-xterm-updates
        --enable-shared-js
        --enable-gcgenerational
        --disable-optimize
        --enable-pie
      * debian/rules:
        - Build with --enable-tests but don't make tests fatal yet
        - Build --without-system-icu since we don't have icu 58 yet
        - Build with --enable-posix-nspr-emulation
        - Drop --enable-ctypes and --enable-system-ffi, needed for above
          nspr option
      * Have -dev package install the js binary, see Mozilla #1339931
      * Don't install .a file
      * Bump dh compat to 10 but disable autoreconf
      * Migrate to automatic -dbgsym packages
      * Drop debian/README.source because it only listed removed files
        Use Files-Excluded in debian/copyright instead
      * Update debian/copyright based on debian/copyright for Firefox
      * Update Standards-Version to 4.1.0
      * Refresh patches
      * Drop obsolete patches:
        - install-js-config-h.patch
        - manually-mmap-on-arm64-to-ensure-high-17-bits-are-clear.patch
      * Disable patches that don't apply cleanly:
        - hppa-support.patch
        - m68k-support.patch
        - Disable-js-JIT-on-x32.patch
      * Add patches from https://github.com/ptomato/mozjs :
        - tests-skip-on-all-64-bit-archs.patch
        - disable-mozglue.patch
        - remove-nspr-dependency.patch
    
      [ Jordi Mallach ]
      * Remove override to dh_strip as the package is new and there's no
        need to migrate from -dbg.
    
     -- Gianfranco Costamagna <email address hidden>  Fri, 27 Oct 2017 09:29:25 +0200
  • mozjs52 (52.3.1-0ubuntu3) artful; urgency=medium
    
      * Sync packaging from Debian:
        - debian/copyright updates
        - Make tests fatal except on ppc64el
        - Build with enable-posix-nspr-emulation
        - Drop obsolete --enable-thumb2 armhf flag
    
     -- Jeremy Bicha <email address hidden>  Thu, 31 Aug 2017 14:42:14 -0400