diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes index 395fb10..444a71f 100644 --- a/MozillaFirefox.changes +++ b/MozillaFirefox.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Thu Jun 7 12:11:06 UTC 2018 - wr@rosenauer.org + +- update to Firefox 60.0.2 + * requires NSS 3.36.4 + MFSA 2018-14 (bsc#1096449) + * CVE-2018-6126 (bmo#1462682) + Heap buffer overflow rasterizing paths in SVG with Skia + + ------------------------------------------------------------------- Wed Jun 6 18:57:52 UTC 2018 - guillaume.gardet@opensuse.org diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec index bdbd2b9..d3782c3 100644 --- a/MozillaFirefox.spec +++ b/MozillaFirefox.spec @@ -19,10 +19,10 @@ # changed with every update %define major 60 -%define mainver %major.0.1 +%define mainver %major.0.2 %define update_channel release %define branding 1 -%define releasedate 20180516032328 +%define releasedate 20180605171542 %define source_prefix firefox-%{mainver} # PIE, full relro (x86_64 for now) @@ -73,7 +73,7 @@ BuildRequires: libnotify-devel BuildRequires: libproxy-devel BuildRequires: makeinfo BuildRequires: mozilla-nspr-devel >= 4.19 -BuildRequires: mozilla-nss-devel >= 3.36.1 +BuildRequires: mozilla-nss-devel >= 3.36.4 BuildRequires: python-devel BuildRequires: python2-xml BuildRequires: rust >= 1.24 diff --git a/create-tar.sh b/create-tar.sh index e6c4481..18339aa 100644 --- a/create-tar.sh +++ b/create-tar.sh @@ -7,8 +7,8 @@ CHANNEL="release" BRANCH="releases/mozilla-$CHANNEL" -RELEASE_TAG="FIREFOX_60_0_1_RELEASE" -VERSION="60.0.1" +RELEASE_TAG="FIREFOX_60_0_2_RELEASE" +VERSION="60.0.2" # check required tools test -x /usr/bin/hg || ( echo "hg missing: execute zypper in mercurial"; exit 5 ) diff --git a/firefox-60.0.1.source.tar.xz b/firefox-60.0.1.source.tar.xz deleted file mode 100644 index da42adf..0000000 --- a/firefox-60.0.1.source.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c8e621c7dfccbef14cce41a6847b83bee15b5276cd0c35771c3874e464e6a662 -size 267804748 diff --git a/firefox-60.0.1.source.tar.xz.asc b/firefox-60.0.1.source.tar.xz.asc deleted file mode 100644 index 7f096f6..0000000 --- a/firefox-60.0.1.source.tar.xz.asc +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v2.0.14 (GNU/Linux) - -iQIcBAABCAAGBQJa+8WlAAoJELu+vbskxvNV+JAP/Awb2XYbSOgKOZapZ6+wa7W5 -RnnGiVL2OtaMm+2XJDcKrYYolw57OKb1vnpHrpgUkq1NQ3W8yknLnFMue0chY0Lk -gfOeyUGKK/mDPxvq1+qbuwkYnVvkRQNvvy7J33jqWLWc0sai1zI5djjounqsHstD -KL/alWqoBRux627m0QSGZ4+a5ex87aOKfYlMgCX0qI0j+h1Grx2P3BpN414At1jf -N4kI5vjAQSvPu8Xw7bwtbBrpctf2Ufwv8B9kcnM7018KxV3j8LukpceHYjApMY5D -ROCD09lYqnmhbv7hJN9wSYIG5EG0bCQ+bsw9TJdiCPwBSw0i0tAL6SkMUhLiuB8d -gau9Ed9QkSFBsu+a0M5Y61cwFWSm/HI9Ya2wvc3rYGn2njtrOhUFBWm7PAsiKM8P -bwZkB8+KTAu31dgeIC/uXRjOGuHkdK7+WU1HjbZhbGZIIn2zawJfdT3IJKk6hHIk -gDkcYKL0amnSFaoUXcvlLZfnEWcv+uEhGbGztE7ztA9Vo1IfLzXQtduGdn0F1fp/ -sZ/Q1N1liZkVwK0GtV4+GUxIs5d0XCTZ4tNPeQ82+ePbQjo7HavJBE8gTrbj06Ui -Q4gdxdhsyuKkF8iaDx0Ft92KhZKiLyGgP3vcb025wj8l58nBCNnn2j9UDyholuDL -Xs2b4IADNmSPjxHqRgNh -=m07A ------END PGP SIGNATURE----- diff --git a/firefox-60.0.2.source.tar.xz b/firefox-60.0.2.source.tar.xz new file mode 100644 index 0000000..513378e --- /dev/null +++ b/firefox-60.0.2.source.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:764566a06b71164e7fd20b2b0e6b08a71b4ccd4d6fd61867eb08011a551f6725 +size 271930220 diff --git a/firefox-60.0.2.source.tar.xz.asc b/firefox-60.0.2.source.tar.xz.asc new file mode 100644 index 0000000..bf6c9f8 --- /dev/null +++ b/firefox-60.0.2.source.tar.xz.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.14 (GNU/Linux) + +iQIcBAABCAAGBQJbFuptAAoJELu+vbskxvNV2LMP/iZWM65JBnCbUL2GFecRvf41 +l8izB7XhECYWJE9XOJt0/wOCyugBpcM+Fmf5a3vrwt57cpANLIxoeefEUOU6VNPD +a//aWs9m1GbCupO6Pxuhrwo+oUGUgMXDiEnfVhujriXWB5ZP/QlqvyqERJLYA5sk +gvMvm5ua2ZfN0ko3qxpJfs0d+k70TDBFkNKcqmhROMCn+VY7sItqUSRcAe9Bu33A +bVyahF9k4ko6HLV6JztqO8UHRh4bOnR3aYG++CqRrmTpzme/RbeLG37JW4oHPGPb +jJwBzU1gHl7VQyhqKkdLLEvtz4O711xU45yksgaWTAtO+2hN6gdQTVsD7OaRuuE+ +hDeWYhqiXZGqqAHz2Mh+9bwa2NaJXPLpGAbNaMzk7eC4eQ+fcnNULA58XYuI3gkN +8SVoE+7tCjvoTTOxW3jWmDwGnG/ObP8z5qtnOh81HZyKFxy9kzyL3DPOJKVhiSNo +HBPXZd1z/Io6MlK6d0NntIavJkO+0RJ8m1EZYpvqZql0NKk9XpnOveWCGW1nwuXv +oHddFavyuNw7u67WQrQdaSD3yCoCoB8Qc9IwcLiDy/Aznp9iLpbvZ569R3ehe9QK ++V7DEIy+wM/yBu/qHGM/sPQwmgTMnItgECBxZaF4ikrb/XjVYmbvjrA7D4834zyt +HfV/bjMvQdbV7v7QVKU8 +=FXyF +-----END PGP SIGNATURE----- diff --git a/l10n-60.0.1.tar.xz b/l10n-60.0.2.tar.xz similarity index 100% rename from l10n-60.0.1.tar.xz rename to l10n-60.0.2.tar.xz diff --git a/source-stamp.txt b/source-stamp.txt index 350db75..53a7d4a 100644 --- a/source-stamp.txt +++ b/source-stamp.txt @@ -1,2 +1,2 @@ -REV=03d4f76300be +REV=a0b222c551f5 REPO=http://hg.mozilla.org/releases/mozilla-release