forked from pool/MozillaFirefox
fcfd6f2d1c
MFSA 2017-12
* CVE-2017-5443 (bmo#1342661)
Out-of-bounds write during BinHex decoding
* CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
Firefox ESR 52.1
* CVE-2017-5464 (bmo#1347075)
Memory corruption with accessibility and DOM manipulation
* CVE-2017-5465 (bmo#1347617)
Out-of-bounds read in ConvolvePixel
* CVE-2017-5466 (bmo#1353975)
Origin confusion when reloading isolated data:text/html URL
* CVE-2017-5467 (bmo#1347262)
Memory corruption when drawing Skia content
* CVE-2017-5460 (bmo#1343642)
Use-after-free in frame selection
* CVE-2017-5461 (bmo#1344380)
Out-of-bounds write in Base64 encoding in NSS
* CVE-2017-5448 (bmo#1346648)
Out-of-bounds write in ClearKeyDecryptor
* CVE-2017-5449 (bmo#1340127)
Crash during bidirectional unicode manipulation with animation
* CVE-2017-5446 (bmo#1343505)
Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
* CVE-2017-5447 (bmo#1343552)
Out-of-bounds read during glyph processing
* CVE-2017-5444 (bmo#1344461)
Buffer overflow while parsing application/http-index-format content
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=583
70 lines
2.1 KiB
Bash
70 lines
2.1 KiB
Bash
#!/bin/bash
|
|
|
|
# TODO
|
|
# http://ftp.mozilla.org/pub/firefox/candidates/48.0-candidates/build2/linux-x86_64/en-US/firefox-48.0.json
|
|
# "moz_source_stamp": "c1de04f39fa956cfce83f6065b0e709369215ed5"
|
|
# http://ftp.mozilla.org/pub/firefox/candidates/48.0-candidates/build2/l10n_changesets.txt
|
|
|
|
CHANNEL="esr52"
|
|
BRANCH="releases/mozilla-$CHANNEL"
|
|
RELEASE_TAG="3ea0e075203185d7f2d42f439455e97735bd1b20"
|
|
VERSION="52.1.0"
|
|
|
|
# mozilla
|
|
if [ -d mozilla ]; then
|
|
pushd mozilla
|
|
_repourl=$(hg paths)
|
|
case "$_repourl" in
|
|
*$BRANCH*)
|
|
echo "updating previous tree"
|
|
hg pull
|
|
popd
|
|
;;
|
|
* )
|
|
echo "removing obsolete tree"
|
|
popd
|
|
rm -rf mozilla
|
|
;;
|
|
esac
|
|
fi
|
|
if [ ! -d mozilla ]; then
|
|
echo "cloning new $BRANCH..."
|
|
hg clone http://hg.mozilla.org/$BRANCH mozilla
|
|
fi
|
|
pushd mozilla
|
|
hg update --check
|
|
[ "$RELEASE_TAG" == "default" ] || hg update -r $RELEASE_TAG
|
|
# get repo and source stamp
|
|
echo -n "REV=" > ../source-stamp.txt
|
|
hg -R . parent --template="{node|short}\n" >> ../source-stamp.txt
|
|
echo -n "REPO=" >> ../source-stamp.txt
|
|
hg showconfig paths.default 2>/dev/null | head -n1 | sed -e "s/^ssh:/http:/" >> ../source-stamp.txt
|
|
popd
|
|
echo "creating archive..."
|
|
tar cJf firefox-$VERSION-source.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg --exclude=CVS mozilla
|
|
|
|
# l10n
|
|
echo "fetching locales..."
|
|
test ! -d l10n && mkdir l10n
|
|
for locale in $(awk '{ print $1; }' mozilla/browser/locales/shipped-locales); do
|
|
case $locale in
|
|
ja-JP-mac|en-US)
|
|
;;
|
|
*)
|
|
echo "reading changeset information for $locale"
|
|
_changeset=$(grep ^$locale l10n_changesets.txt | awk '{ print $2; }')
|
|
echo "fetching $locale changeset $_changeset ..."
|
|
hg clone http://hg.mozilla.org/releases/l10n/mozilla-release/$locale l10n/$locale
|
|
[ "$RELEASE_TAG" == "default" ] || hg -R l10n/$locale up -C -r $_changeset
|
|
;;
|
|
esac
|
|
done
|
|
echo "creating l10n archive..."
|
|
tar cJf l10n-$VERSION.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg l10n
|
|
|
|
# compare-locales
|
|
echo "creating compare-locales"
|
|
hg clone http://hg.mozilla.org/build/compare-locales
|
|
tar cJf compare-locales.tar.xz --exclude=.hgtags --exclude=.hgignore --exclude=.hg compare-locales
|
|
|