- update to Firefox 60.0.2

* requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia

OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox?expand=0&rev=671

MozillaFirefox.changes

@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Thu Jun  7 12:11:06 UTC 2018 - wr@rosenauer.org
+
+- update to Firefox 60.0.2
+  * requires NSS 3.36.4
+  MFSA 2018-14 (bsc#1096449)
+  * CVE-2018-6126 (bmo#1462682)
+    Heap buffer overflow rasterizing paths in SVG with Skia
+
+
 -------------------------------------------------------------------
 Wed Jun  6 18:57:52 UTC 2018 - guillaume.gardet@opensuse.org
 

MozillaFirefox.spec

@@ -19,10 +19,10 @@
 
 # changed with every update
 %define major 60
-%define mainver %major.0.1
+%define mainver %major.0.2
 %define update_channel release
 %define branding 1
-%define releasedate 20180516032328
+%define releasedate 20180605171542
 %define source_prefix firefox-%{mainver}
 
 # PIE, full relro (x86_64 for now)
@@ -73,7 +73,7 @@ BuildRequires:  libnotify-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.19
-BuildRequires:  mozilla-nss-devel >= 3.36.1
+BuildRequires:  mozilla-nss-devel >= 3.36.4
 BuildRequires:  python-devel
 BuildRequires:  python2-xml
 BuildRequires:  rust >= 1.24

create-tar.sh

@@ -7,8 +7,8 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_60_0_1_RELEASE"
-VERSION="60.0.1"
+RELEASE_TAG="FIREFOX_60_0_2_RELEASE"
+VERSION="60.0.2"
 
 # check required tools
 test -x /usr/bin/hg || ( echo "hg missing: execute zypper in mercurial"; exit 5 )

firefox-60.0.1.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c8e621c7dfccbef14cce41a6847b83bee15b5276cd0c35771c3874e464e6a662
-size 267804748

firefox-60.0.1.source.tar.xz.asc

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.14 (GNU/Linux)
-
-iQIcBAABCAAGBQJa+8WlAAoJELu+vbskxvNV+JAP/Awb2XYbSOgKOZapZ6+wa7W5
-RnnGiVL2OtaMm+2XJDcKrYYolw57OKb1vnpHrpgUkq1NQ3W8yknLnFMue0chY0Lk
-gfOeyUGKK/mDPxvq1+qbuwkYnVvkRQNvvy7J33jqWLWc0sai1zI5djjounqsHstD
-KL/alWqoBRux627m0QSGZ4+a5ex87aOKfYlMgCX0qI0j+h1Grx2P3BpN414At1jf
-N4kI5vjAQSvPu8Xw7bwtbBrpctf2Ufwv8B9kcnM7018KxV3j8LukpceHYjApMY5D
-ROCD09lYqnmhbv7hJN9wSYIG5EG0bCQ+bsw9TJdiCPwBSw0i0tAL6SkMUhLiuB8d
-gau9Ed9QkSFBsu+a0M5Y61cwFWSm/HI9Ya2wvc3rYGn2njtrOhUFBWm7PAsiKM8P
-bwZkB8+KTAu31dgeIC/uXRjOGuHkdK7+WU1HjbZhbGZIIn2zawJfdT3IJKk6hHIk
-gDkcYKL0amnSFaoUXcvlLZfnEWcv+uEhGbGztE7ztA9Vo1IfLzXQtduGdn0F1fp/
-sZ/Q1N1liZkVwK0GtV4+GUxIs5d0XCTZ4tNPeQ82+ePbQjo7HavJBE8gTrbj06Ui
-Q4gdxdhsyuKkF8iaDx0Ft92KhZKiLyGgP3vcb025wj8l58nBCNnn2j9UDyholuDL
-Xs2b4IADNmSPjxHqRgNh
-=m07A
------END PGP SIGNATURE-----

firefox-60.0.2.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:764566a06b71164e7fd20b2b0e6b08a71b4ccd4d6fd61867eb08011a551f6725
+size 271930220

firefox-60.0.2.source.tar.xz.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.14 (GNU/Linux)
+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+=FXyF
+-----END PGP SIGNATURE-----

source-stamp.txt

@@ -1,2 +1,2 @@
-REV=03d4f76300be
+REV=a0b222c551f5
 REPO=http://hg.mozilla.org/releases/mozilla-release