firefox-59.0.1

[ken@…]

This was apparently announced on 16th March. It contains one security fix: CVE-2018-5146 An out of bounds memory write in libvorbis was reported through the Pwn2Own contest. (Also a similar flaw in libtremor which is used in android and arm platforms).

I'm not sure if this means we should just drop system vorbis from the 59.0 build, or whether we need 59.0.1.

Source is ​https://hg.mozilla.org/releases/mozilla-release/archive/3db9e3d52b17563efca181ccbb50deb8660c59ae.tar.bz2

Tinyurl gives me ​https://tinyurl.com/firefox-59-0-1

[ken@…]

I'm obviously behind the times - system vorbis and system theora are not mentioned in the build, and not linked by libxul.so which is the "master" library that pulls in lots of system and firefox libs. So, we do need this.

[ken@…]

Fixed, r19973.