Sync from SUSE:SLFO:Main MozillaFirefox revision 1a92cd3bc9ed2277a56217aa000db595

MozillaFirefox.changes

@@ -1,7 +1,36 @@
+-------------------------------------------------------------------
+Thu Jan  2 08:44:25 UTC 2025 - Martin Sirringhaus <martin.sirringhaus@suse.com>
+
+- Firefox Extended Support Release 128.6.0 ESR
+  * Fixed: Various security fixes.
+  MFSA 2025-02 (bsc#1234991)
+  * CVE-2025-0237 (bmo#1915257)
+    WebChannel APIs susceptible to confused deputy attack
+  * CVE-2025-0238 (bmo#1915535)
+    Use-after-free when breaking lines in text
+  * CVE-2025-0239 (bmo#1929156)
+    Alt-Svc ALPN validation failure when redirected
+  * CVE-2025-0240 (bmo#1929623)
+    Compartment mismatch when parsing JavaScript JSON module
+  * CVE-2025-0241 (bmo#1933023)
+    Memory corruption when using JavaScript Text Segmentation
+  * CVE-2025-0242 (bmo#1874523, bmo#1926454, bmo#1931873,
+    bmo#1932169)
+    Memory safety bugs fixed in Firefox 134, Thunderbird 134,
+    Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19,
+    and Thunderbird 128.6
+  * CVE-2025-0243 (bmo#1827142, bmo#1932783)
+    Memory safety bugs fixed in Firefox 134, Thunderbird 134,
+    Firefox ESR 128.6, and Thunderbird 128.6
+
+- Firefox Extended Support Release 128.5.2 ESR
+  * Fixed: Fixed a crash experienced by Windows users with Qihoo
+    360 Total Security Antivirus software installed (bmo#1934258)
+
 -------------------------------------------------------------------
 Mon Dec  2 11:14:39 UTC 2024 - Martin Sirringhaus <martin.sirringhaus@suse.com>
 
-- Firefox Extended Support Release 128.5.1 ESR
+- Firefox Extended Support Release 128.5.1 ESR (bsc#1234326)
   * Fixed: Fixed an issue that prevented some websites from
     loading when using SSL Inspection. (bmo#1933747)
 

MozillaFirefox.spec

@@ -29,8 +29,8 @@
 # major 69
 # mainver %%major.99
 %define major          128
-%define mainver        %major.5.1
-%define orig_version   128.5.1
+%define mainver        %major.6.0
+%define orig_version   128.6.0
 %define orig_suffix    esr
 %define update_channel release
 %define branding       1

firefox-128.5.1esr.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmdIvLkACgkQ4207E/PZ
-MnTntg//WWqNvoivQlg1oQTnYMfYp670oB3DkJvC0LnsGGLrPCqvlgQQxUBgFP2R
-fP7PIoZWUZR5yFBuX/81uYrIL2svM5BVIqEec5swXe32gmuK14R3jG0IIeh5d3hu
-oSVRL9/j+jQXe/sFIwqutCcr3WABhOPjEmCfjcDOO6SqKChe3XfTo7y0IEBq+pHI
-acuhw6RwfBZr8smMMWSPvolKJaGs/Nl2ZEAvgjPwfgTVwZt8+2lVg831kzxd/iXf
-1tsikXtslJsUVj7Yx1L8opnG51QBwIUxGGcoJUGFkY8ce9zM+z5OgEIwWqqFMjtA
-gfrvH0iy659q960Y/wF00EzH6vno3LFH4/CMQG04IURViyFqEGOgQi7lD2+Q4EMp
-CN08V5GOQ1n6CukSHx3CF8ujQavhdUrFlfB+pNsc6zJSsr/FTV2CD6HEgclh0bBc
-tMDCICV4A/eVQ8vG3fZIzV/vNv0qZsY+dvJ7RHE6qbTaL3VmrmF4iyrm+avPcZQG
-Aee3dKmD6uhzEKNNxvPkbvHVkwuffS9RX6Dc75vp3Sw2cgba8lW5URRk+NtpiWHQ
-pq7rRSPgCAtt+k0FtryGVeckGjvz/K11azGxOU0EoD/SM6hX0keoDrqalrxgDDtk
-FJmkIu6Po3W0EyexaFBYbFxxTg1MVCT+TbJdY0woxcBc2WttapQ=
-=MRPV
------END PGP SIGNATURE-----

firefox-128.6.0esr.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=GBwt
+-----END PGP SIGNATURE-----

tar_stamps

@@ -1,10 +1,10 @@
 PRODUCT="firefox"
 CHANNEL="release"
-VERSION="128.5.1"
+VERSION="128.6.0"
 VERSION_SUFFIX="esr"
-PREV_VERSION="128.5.0"
+PREV_VERSION="128.5.1"
 PREV_VERSION_SUFFIX="esr"
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-esr128"
-RELEASE_TAG="a6cdcd2ed9ec3e256f358010672bafd1674b0b8b"
-RELEASE_TIMESTAMP="20241128151741"
+RELEASE_TAG="4f008c71b12e001ae54b7fcd4787b266764c28bf"
+RELEASE_TIMESTAMP="20241218153108"