09b85d1e80
MFSA 2017-16
* CVE-2017-5472 (bmo#1365602)
Use-after-free using destroyed node when regenerating trees
* CVE-2017-7749 (bmo#1355039)
Use-after-free during docshell reloading
* CVE-2017-7750 (bmo#1356558)
Use-after-free with track elements
* CVE-2017-7751 (bmo#1363396)
Use-after-free with content viewer listeners
* CVE-2017-7752 (bmo#1359547)
Use-after-free with IME input
* CVE-2017-7754 (bmo#1357090)
Out-of-bounds read in WebGL with ImageInfo object
* CVE-2017-7755 (bmo#1361326)
Privilege escalation through Firefox Installer with same
directory DLL files (Windows only)
* CVE-2017-7756 (bmo#1366595)
Use-after-free and use-after-scope logging XHR header errors
* CVE-2017-7757 (bmo#1356824)
Use-after-free in IndexedDB
* CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
CVE-2017-7777
Vulnerabilities in the Graphite 2 library
* CVE-2017-7758 (bmo#1368490)
Out-of-bounds read in Opus encoder
* CVE-2017-7760 (bmo#1348645)
File manipulation and privilege escalation via callback parameter
in Mozilla Windows Updater and Maintenance Service (Windows only)
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=594
70 lines
2.1 KiB
Bash
70 lines
2.1 KiB
Bash
#!/bin/bash
|
|
|
|
# TODO
|
|
# http://ftp.mozilla.org/pub/firefox/candidates/48.0-candidates/build2/linux-x86_64/en-US/firefox-48.0.json
|
|
# "moz_source_stamp": "c1de04f39fa956cfce83f6065b0e709369215ed5"
|
|
# http://ftp.mozilla.org/pub/firefox/candidates/48.0-candidates/build2/l10n_changesets.txt
|
|
|
|
CHANNEL="esr52"
|
|
BRANCH="releases/mozilla-$CHANNEL"
|
|
RELEASE_TAG="FIREFOX_52_2_0esr_RELEASE"
|
|
VERSION="52.2"
|
|
|
|
# mozilla
|
|
if [ -d mozilla ]; then
|
|
pushd mozilla
|
|
_repourl=$(hg paths)
|
|
case "$_repourl" in
|
|
*$BRANCH*)
|
|
echo "updating previous tree"
|
|
hg pull
|
|
popd
|
|
;;
|
|
* )
|
|
echo "removing obsolete tree"
|
|
popd
|
|
rm -rf mozilla
|
|
;;
|
|
esac
|
|
fi
|
|
if [ ! -d mozilla ]; then
|
|
echo "cloning new $BRANCH..."
|
|
hg clone http://hg.mozilla.org/$BRANCH mozilla
|
|
fi
|
|
pushd mozilla
|
|
hg update --check
|
|
[ "$RELEASE_TAG" == "default" ] || hg update -r $RELEASE_TAG
|
|
# get repo and source stamp
|
|
echo -n "REV=" > ../source-stamp.txt
|
|
hg -R . parent --template="{node|short}\n" >> ../source-stamp.txt
|
|
echo -n "REPO=" >> ../source-stamp.txt
|
|
hg showconfig paths.default 2>/dev/null | head -n1 | sed -e "s/^ssh:/http:/" >> ../source-stamp.txt
|
|
popd
|
|
echo "creating archive..."
|
|
tar cJf firefox-$VERSION-source.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=CVS mozilla
|
|
|
|
# l10n
|
|
echo "fetching locales..."
|
|
test ! -d l10n && mkdir l10n
|
|
for locale in $(awk '{ print $1; }' mozilla/browser/locales/shipped-locales); do
|
|
case $locale in
|
|
ja-JP-mac|en-US)
|
|
;;
|
|
*)
|
|
echo "reading changeset information for $locale"
|
|
_changeset=$(grep ^$locale l10n_changesets.txt | awk '{ print $2; }')
|
|
echo "fetching $locale changeset $_changeset ..."
|
|
hg clone http://hg.mozilla.org/releases/l10n/mozilla-release/$locale l10n/$locale
|
|
[ "$RELEASE_TAG" == "default" ] || hg -R l10n/$locale up -C -r $_changeset
|
|
;;
|
|
esac
|
|
done
|
|
echo "creating l10n archive..."
|
|
tar cJf l10n-$VERSION.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg l10n
|
|
|
|
# compare-locales
|
|
echo "creating compare-locales"
|
|
hg clone http://hg.mozilla.org/build/compare-locales
|
|
tar cJf compare-locales.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg compare-locales
|
|
|