cd0e3ea9a0
MFSA 2018-13
* CVE-2018-5183 (bmo#1454692)
Backport critical security fixes in Skia
* CVE-2018-5184 (bmo#1411592, bsc#1093152)
Full plaintext recovery in S/MIME via chosen-ciphertext attack
* CVE-2018-5154 (bmo#1443092)
Use-after-free with SVG animations and clip paths
* CVE-2018-5155 (bmo#1448774)
Use-after-free with SVG animations and text paths
* CVE-2018-5159 (bmo#1441941)
Integer overflow and out-of-bounds write in Skia
* CVE-2018-5161 (bmo#1411720)
Hang via malformed headers
* CVE-2018-5162 (bmo#1457721, bsc#1093152)
Encrypted mail leaks plaintext through src attribute
* CVE-2018-5170 (bmo#1411732)
Filename spoofing for external attachments
* CVE-2018-5168 (bmo#1449548)
Lightweight themes can be installed without user interaction
* CVE-2018-5174 (bmo#1447080) (Windows only)
Windows Defender SmartScreen UI runs with less secure behavior
for downloaded files in Windows 10 April 2018 Update
* CVE-2018-5178 (bmo#1443891)
Buffer overflow during UTF-8 to Unicode string conversion
through legacy extension
* CVE-2018-5185 (bmo#1450345)
Leaking plaintext through HTML forms
* CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaThunderbird?expand=0&rev=406
51 lines
1.5 KiB
Bash
51 lines
1.5 KiB
Bash
#!/bin/bash
|
|
|
|
CHANNEL="esr52"
|
|
BRANCH="releases/comm-$CHANNEL"
|
|
RELEASE_TAG="THUNDERBIRD_52_8_0_RELEASE"
|
|
VERSION="52.8"
|
|
|
|
echo "cloning $BRANCH..."
|
|
hg clone http://hg.mozilla.org/$BRANCH thunderbird
|
|
pushd thunderbird
|
|
hg update -r $RELEASE_TAG
|
|
echo "running client.py..."
|
|
[ "$RELEASE_TAG" == "default" ] || _extra="--comm-rev=$RELEASE_TAG --mozilla-rev=$RELEASE_TAG"
|
|
# temporary!
|
|
_extra="--mozilla-repo=http://hg.mozilla.org/releases/mozilla-$CHANNEL $_extra"
|
|
python client.py checkout --skip-chatzilla --skip-venkman $_extra
|
|
popd
|
|
echo "creating archive..."
|
|
tar cJf thunderbird-$VERSION-source.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=CVS thunderbird
|
|
|
|
# l10n
|
|
# http://l10n.mozilla.org/dashboard/?tree=tb30x -> shipped-locales
|
|
echo "fetching locales..."
|
|
if [ -e shipped-locales ]; then
|
|
SHIPPED_LOCALES=shipped-locales
|
|
else
|
|
SHIPPED_LOCALES=thunderbird/mail/locales/shipped-locales
|
|
fi
|
|
test ! -d l10n && mkdir l10n
|
|
for locale in $(awk '{ print $1; }' $SHIPPED_LOCALES); do
|
|
case $locale in
|
|
ja-JP-mac|en-US)
|
|
;;
|
|
*)
|
|
echo "fetching $locale ..."
|
|
hg clone http://hg.mozilla.org/releases/l10n/mozilla-release/$locale l10n/$locale
|
|
hg -R l10n/$locale up -C -r $RELEASE_TAG
|
|
;;
|
|
esac
|
|
done
|
|
echo "creating l10n archive..."
|
|
tar cJf l10n-$VERSION.tar.xz \
|
|
--exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=browser \
|
|
--exclude=suite \
|
|
l10n
|
|
|
|
# compare-locales
|
|
hg clone http://hg.mozilla.org/build/compare-locales
|
|
tar cJf compare-locales.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg compare-locales
|
|
|