New Debian firefox-esr 140.4.0esr-1~deb12u1 fixes: This update addresses the following issues: 140.3.1esr-1~deb12u1 (Sat, 27 Sep 2025 09:57:32 +0900) * New upstream release. * media/libyuv/libyuv/libyuv.gyp: Disable SVE parts of libyuv when the SVE flags are not supported. Fixes FTBFS on arm64 on bookworm. * config/system-headers.mozbuild: Add a system header wrapper for sys/platform/ppc.h.: Fixes FTBFS on pc64el on bookworm. * debian/upstream.mk, debian/control: Stop handling testing/unstable as trixie, meaning embedded NSS is not built anymore. * debian/rules: - Avoid running dwz on platforms where we disable debug info. - Stop setting _LEAKTEST_FILES, it hasn't been used since version 32.0. - Disable rust LTO on s390x, hoping to fix FTBFS. 140.4.0esr-1~deb12u1 (Wed, 15 Oct 2025 08:55:29 +0900) * Fixes for mfsa2025-83, also known as: CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711, CVE-2025-11712, CVE-2025-11714, CVE-2025-11715. * debian/watch: Refreshed. Somehow it was not refreshed for ESR. * debian/dh: Properly handle multiple DEB_BUILD_OPTIONS.
--- mirror/ftp/pool/main/f/firefox-esr/firefox-esr_140.3.0esr-1~deb12u1.dsc +++ apt/ucs_5.2-0-errata5.2-3/source/firefox-esr_140.4.0esr-1~deb12u1.dsc @@ -1,3 +1,30 @@ +140.4.0esr-1~deb12u1 [Wed, 15 Oct 2025 08:55:29 +0900] Mike Hommey <glandium@debian.org>: + + * New upstream release. + * Fixes for mfsa2025-83, also known as: + CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711, + CVE-2025-11712, CVE-2025-11714, CVE-2025-11715. + + * debian/watch: Refreshed. Somehow it was not refreshed for ESR. + * debian/dh: Properly handle multiple DEB_BUILD_OPTIONS. + +140.3.1esr-1~deb12u1 [Sat, 27 Sep 2025 09:57:32 +0900] Mike Hommey <glandium@debian.org>: + + * New upstream release. + + * media/libyuv/libyuv/libyuv.gyp: Disable SVE parts of libyuv when the + SVE flags are not supported. Fixes FTBFS on arm64 on bookworm. + * config/system-headers.mozbuild: Add a system header wrapper for + sys/platform/ppc.h.: Fixes FTBFS on pc64el on bookworm. + + * debian/upstream.mk, debian/control: Stop handling testing/unstable + as trixie, meaning embedded NSS is not built anymore. + * debian/rules: + - Avoid running dwz on platforms where we disable debug info. + Closes: #1115490 + - Stop setting _LEAKTEST_FILES, it hasn't been used since version 32.0. + - Disable rust LTO on s390x, hoping to fix FTBFS. + 140.3.0esr-1~deb12u1 [Wed, 17 Sep 2025 08:35:15 +0900] Mike Hommey <glandium@debian.org>: * New upstream release. <http://piuparts.knut.univention.de/5.2-3/#2744698841158852027>
OK: bug OK: yaml OK: announce_errata OK: patch OK: piuparts [5.2-3] 48dece0653 Bug #58723: firefox-esr 140.4.0esr-1~deb12u1 doc/errata/staging/firefox-esr.yaml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.2x264>