f633f8cbba
MFSA 2019-26
* CVE-2019-11751 (bmo#1572838; Windows only)
Malicious code execution through command line parameters
* CVE-2019-11746 (bmo#1564449)
Use-after-free while manipulating video
* CVE-2019-11744 (bmo#1562033)
XSS by breaking out of title and textarea elements using innerHTML
* CVE-2019-11742 (bmo#1559715)
Same-origin policy violation with SVG filters and canvas to steal
cross-origin images
* CVE-2019-11736 (bmo#1551913, bmo#1552206; Windows only))
File manipulation and privilege escalation in Mozilla Maintenance Service
* CVE-2019-11753 (bmo#1574980; Windows only)
Privilege escalation with Mozilla Maintenance Service in custom
Firefox installation location
* CVE-2019-11752 (bmo#1501152)
Use-after-free while extracting a key value in IndexedDB
* CVE-2019-9812 (bmo#1538008, bmo#1538015)
Sandbox escape through Firefox Sync
* CVE-2019-11743 (bmo#1560495)
Cross-origin access to unload event attributes
* CVE-2019-11748 (bmo#1564588)
Persistence of WebRTC permissions in a third party context
* CVE-2019-11749 (bmo#1565374)
Camera information available without prompting using getUserMedia
* CVE-2019-11750 (bmo#1568397)
Type confusion in Spidermonkey
* CVE-2019-11738 (bmo#1452037)
Content security policy bypass through hash-based sources in directives
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=760
31 lines
1.1 KiB
Diff
31 lines
1.1 KiB
Diff
Author: Bernhard M. Wiedemann <bwiedemann suse de>
|
|
Date: 2019-07-22
|
|
|
|
Allow to override build date with SOURCE_DATE_EPOCH
|
|
in order to make builds reproducible.
|
|
See https://reproducible-builds.org/ for why this is good
|
|
and https://reproducible-builds.org/specs/source-date-epoch/
|
|
for the definition of this variable.
|
|
|
|
diff --git a/python/mozbuild/mozbuild/action/langpack_manifest.py b/python/mozbuild/mozbuild/action/langpack_manifest.py
|
|
index 6f72697..d4cca96 100644
|
|
--- a/python/mozbuild/mozbuild/action/langpack_manifest.py
|
|
+++ b/python/mozbuild/mozbuild/action/langpack_manifest.py
|
|
@@ -16,6 +16,7 @@ import os
|
|
import json
|
|
import io
|
|
import datetime
|
|
+import time
|
|
import requests
|
|
import mozversioncontrol
|
|
import mozpack.path as mozpath
|
|
@@ -100,7 +101,7 @@ def get_timestamp_for_locale(path):
|
|
dt = get_dt_from_hg(path)
|
|
|
|
if dt is None:
|
|
- dt = datetime.datetime.utcnow()
|
|
+ dt = datetime.datetime.utcfromtimestamp(int(os.environ.get('SOURCE_DATE_EPOCH', time.time())))
|
|
|
|
dt = dt.replace(microsecond=0)
|
|
return dt.strftime("%Y%m%d%H%M%S")
|