diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes
index be711c16..f9fe8987 100644
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Thu Jun 20 06:20:59 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Firefox 67.0.4
+  MFSA 2019-19 (boo#1138872)
+  * CVE-2019-11708 (bmo#1559858)
+    sandbox escape using Prompt:Open
+
 -------------------------------------------------------------------
 Tue Jun 18 18:36:15 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
 
diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec
index 34198f6c..4dcee0e7 100644
--- a/MozillaFirefox.spec
+++ b/MozillaFirefox.spec
@@ -19,12 +19,12 @@
 
 # changed with every update
 %define major          67
-%define mainver        %major.0.3
-%define orig_version   67.0.3
+%define mainver        %major.0.4
+%define orig_version   67.0.4
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
-%define releasedate    20190618025334
+%define releasedate    20190619235627
 %define source_prefix  firefox-%{orig_version}
 
 # always build with GCC as SUSE Security Team requires that
diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz
index f5aefdbc..abddcf30 100644
--- a/compare-locales.tar.xz
+++ b/compare-locales.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ff97a5215eb5d23bcd5935c6676d2e07d7ff91d03e4f1aa76b55dd7ec7812ae4
-size 28364
+oid sha256:c2d3ff21d8f2f8aa24da600f402d848e377e20c4f409092f9bf15fa41b69c0fc
+size 28400
diff --git a/create-tar.sh b/create-tar.sh
index 7645c0b6..e053e677 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -7,8 +7,8 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="99a829d2a2a7859b10508b6f05e99780c5e2dc68"
-VERSION="67.0.3"
+RELEASE_TAG="ea5154beddff08b919697e3bed6f38cfe3a3d82f"
+VERSION="67.0.4"
 VERSION_SUFFIX=""
 LOCALE_FILE="firefox-$VERSION/browser/locales/l10n-changesets.json"
 
diff --git a/firefox-67.0.3.source.tar.xz b/firefox-67.0.3.source.tar.xz
deleted file mode 100644
index 53a5dee9..00000000
--- a/firefox-67.0.3.source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b5f8c82910335c26f9a82d6ecd49a01800596026422c6fb6bd941fda900e5f2f
-size 285477708
diff --git a/firefox-67.0.3.source.tar.xz.asc b/firefox-67.0.3.source.tar.xz.asc
deleted file mode 100644
index 8e2d2bc1..00000000
--- a/firefox-67.0.3.source.tar.xz.asc
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.14 (GNU/Linux)
-
-iQIcBAABCAAGBQJdCHwwAAoJEPGmZo+7fVcudesP/iU585SSj7V8/Yzt255U9fr3
-ob7Tyi7MLo7AO+msBhgsATWowvcfItz9r/e2+RrhIoFqNRh7GwVsuOG9eGdxA9Mf
-OoqKW0F2hC+MJapXcoFMkCAGhD0sbyxLcPkQQMmNbIuSKNGKymmRNLMP94Td/ma3
-HY8XwxeHkBPE5MX2c37Vxk2057eVXH1J2X2z9VOSw93asWUKLnf2tRhlMUeoyFkJ
-uQvTTQMrpzUsgb21fSG0oTGK1AIppji3Wt2G2nstdPtq6rBoyy//bF94oEKPvQLy
-GF1hoGTbcrPpAiWZS/dpuEDWYe4hQaQWLvJj2biyFilX9JgzKG1lHMHgvelAvZv4
-UmhF2WkwFHxQys2bp1SB0sARLCX/eyV5rEbmxExs8RWidGwc69DuTOi+ARyYaMZ2
-O14DlRdSby+/7YvqLwCeo74krWLm+9VRMjo7PWvitbv10JRN5pX0+v4ov+cIEhso
-kxHz3eHmhV/0Ye3DW6ZXSofnRFhhF7FRmfpVU5c+gziylshqfxKhUULNrUrwXsZo
-bEkvIX8JsC5MA5+k3GwDk27DROtOsvqonLhboCLIs5DLu2pS9be8cWEkCzGLqic2
-ljvRA7ZxcmzDirilgE/qdP4ec+jV7ALTCfFbFh95KOYpInh3KTMtxGxqEKn3R5Br
-vQPZ1uS4NeOArZP05/Zo
-=t95w
------END PGP SIGNATURE-----
diff --git a/firefox-67.0.4.source.tar.xz b/firefox-67.0.4.source.tar.xz
new file mode 100644
index 00000000..1c4f3251
--- /dev/null
+++ b/firefox-67.0.4.source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b2fb2d3e64a6947ef4f8212b72649acf2aa2cd4c8f70548abb636dd581fd6dc5
+size 286036836
diff --git a/firefox-67.0.4.source.tar.xz.asc b/firefox-67.0.4.source.tar.xz.asc
new file mode 100644
index 00000000..8ade5e7f
--- /dev/null
+++ b/firefox-67.0.4.source.tar.xz.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.14 (GNU/Linux)
+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+=WJRz
+-----END PGP SIGNATURE-----
diff --git a/l10n-67.0.3.tar.xz b/l10n-67.0.3.tar.xz
deleted file mode 100644
index 38bad211..00000000
--- a/l10n-67.0.3.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:50fb9531b7b5f7d3a1cb5dd41ab7972d250a220ebb62c290d047c18c23485bb5
-size 50530000
diff --git a/l10n-67.0.4.tar.xz b/l10n-67.0.4.tar.xz
new file mode 100644
index 00000000..2ba63152
--- /dev/null
+++ b/l10n-67.0.4.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5f7213ba3f4be0ac7651cff00a49119239c5af975f464c1651e156f3b5248e8f
+size 50547548
diff --git a/source-stamp.txt b/source-stamp.txt
index 78198ae1..3c085b8e 100644
--- a/source-stamp.txt
+++ b/source-stamp.txt
@@ -1,2 +1,2 @@
-REV=99a829d2a2a7859b10508b6f05e99780c5e2dc68
+REV=ea5154beddff08b919697e3bed6f38cfe3a3d82f
 REPO=http://hg.mozilla.org/releases/mozilla-release