diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes
index 57dd1e3..ba54fa2 100644
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@@ -1,3 +1,60 @@
+-------------------------------------------------------------------
+Thu Nov 9 15:01:30 UTC 2017 - wr@rosenauer.org
+
+- update to Firefox 57.0b14
+ * Firefox Quantum
+ * Photon UI
+ * Unified address and search bar
+ * AMD VP9 hardware video decoder support
+ * Added support for Date/Time input
+ * stricter security sandbox blocking filesystem reading and
+ writing on Linux systems
+ * middle mouse paste in the content area no longer navigates to
+ URLs by default on Unix systems
+ MFSA 2017-24
+ * CVE-2017-7828 (bmo#1406750. bmo#1412252)
+ Use-after-free of PressShell while restyling layout
+ * CVE-2017-7830 (bmo#1408990)
+ Cross-origin URL information leak through Resource Timing API
+ * CVE-2017-7831 (bmo#1392026)
+ Information disclosure of exposed properties on JavaScript proxy
+ objects
+ * CVE-2017-7832 (bmo#1408782)
+ Domain spoofing through use of dotless 'i' character followed
+ by accent markers
+ * CVE-2017-7833 (bmo#1370497)
+ Domain spoofing with Arabic and Indic vowel marker characters
+ * CVE-2017-7834 (bmo#1358009)
+ data: URLs opened in new tabs bypass CSP protections
+ * CVE-2017-7835 (bmo#1402363)
+ Mixed content blocking incorrectly applies with redirects
+ * CVE-2017-7836 (bmo#1401339)
+ Pingsender dynamically loads libcurl on Linux and OS X
+ * CVE-2017-7837 (bmo#1325923)
+ SVG loaded as can use meta tags to set cookies
+ * CVE-2017-7838 (bmo#1399540)
+ Failure of individual decoding of labels in international domain
+ names triggers punycode display of entire IDN
+ * CVE-2017-7839 (bmo#1402896)
+ Control characters before javascript: URLs defeats self-XSS
+ prevention mechanism
+ * CVE-2017-7840 (bmo#1366420)
+ Exported bookmarks do not strip script elements from user-supplied
+ tags
+ * CVE-2017-7842 (bmo#1397064)
+ Referrer Policy is not always respected for elements
+ * CVE-2017-7827
+ Memory safety bugs fixed in Firefox 57
+ * CVE-2017-7826
+ Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5
+- requires NSPR 4.17, NSS 3.33 and rustc 1.19
+- rebased patches
+- added mozilla-bindgen-systemlibs.patch to allow stylo build
+ with system libs (bmo#1341234)
+- removed mozilla-language.patch since the whole locale code
+ changed in Firefox and is relying on ICU now
+- removed obsolete mozilla-ucontext.patch
+
-------------------------------------------------------------------
Sat Oct 28 06:30:37 UTC 2017 - wr@rosenauer.org
diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec
index cb86d16..2aae3e1 100644
--- a/MozillaFirefox.spec
+++ b/MozillaFirefox.spec
@@ -18,11 +18,11 @@
# changed with every update
-%define major 56
-%define mainver %major.0.2
+%define major 57
+%define mainver %major.0
%define update_channel release
%define branding 1
-%define releasedate 20171024165158
+%define releasedate 20171109183137
# PIE, full relro (x86_64 for now)
%define build_hardened 1
@@ -72,10 +72,10 @@ BuildRequires: libiw-devel
BuildRequires: libnotify-devel
BuildRequires: libproxy-devel
BuildRequires: makeinfo
-BuildRequires: mozilla-nspr-devel >= 4.16
-BuildRequires: mozilla-nss-devel >= 3.32.1
+BuildRequires: mozilla-nspr-devel >= 4.17
+BuildRequires: mozilla-nss-devel >= 3.33
BuildRequires: python-devel
-BuildRequires: rust >= 1.15.1
+BuildRequires: rust >= 1.19
BuildRequires: rust-std
BuildRequires: startup-notification-devel
BuildRequires: unzip
@@ -95,6 +95,9 @@ BuildRequires: pkgconfig(libffi)
BuildRequires: pkgconfig(libpulse)
%if 0%{?suse_version} > 1320
BuildRequires: llvm-clang-devel >= 3.9.0
+%else
+# this covers the workaround to compile on Leap 42 in OBS
+BuildRequires: clang4-devel
%endif
# libavcodec is required for H.264 support but the
# openSUSE version is currently not able to play H.264
@@ -143,14 +146,13 @@ Source18: mozilla-api-key
Source19: google-api-key
# Gecko/Toolkit
Patch1: mozilla-nongnome-proxies.patch
-Patch3: mozilla-kde.patch
-Patch5: mozilla-language.patch
-Patch6: mozilla-ntlm-full-path.patch
-Patch7: mozilla-openaes-decl.patch
-Patch8: mozilla-no-stdcxx-check.patch
-Patch9: mozilla-reduce-files-per-UnifiedBindings.patch
-Patch10: mozilla-aarch64-startup-crash.patch
-Patch11: mozilla-ucontext.patch
+Patch2: mozilla-kde.patch
+Patch3: mozilla-ntlm-full-path.patch
+Patch4: mozilla-openaes-decl.patch
+Patch5: mozilla-no-stdcxx-check.patch
+Patch6: mozilla-reduce-files-per-UnifiedBindings.patch
+Patch7: mozilla-aarch64-startup-crash.patch
+Patch8: mozilla-bindgen-systemlibs.patch
# Firefox/browser
Patch101: firefox-kde.patch
Patch102: firefox-no-default-ualocale.patch
@@ -253,16 +255,15 @@ symbols meant for upload to Mozilla's crash collector database.
%endif
cd $RPM_BUILD_DIR/mozilla
%patch1 -p1
+%patch2 -p1
%patch3 -p1
+%patch4 -p1
%patch5 -p1
+%ifarch %ix86
%patch6 -p1
+%endif
%patch7 -p1
%patch8 -p1
-%ifarch %ix86
-%patch9 -p1
-%endif
-%patch10 -p1
-%patch11 -p1
# Firefox
%patch101 -p1
%patch102 -p1
@@ -357,9 +358,6 @@ ac_add_options --enable-startup-notification
ac_add_options --enable-update-channel=%{update_channel}
ac_add_options --with-mozilla-api-keyfile=%{SOURCE18}
ac_add_options --with-google-api-keyfile=%{SOURCE19}
-%if 0%{?suse_version} <= 1320
-ac_add_options --disable-stylo
-%endif
%if %branding
ac_add_options --enable-official-branding
%endif
diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz
index a6a1147..990f926 100644
--- a/compare-locales.tar.xz
+++ b/compare-locales.tar.xz
@@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
-oid sha256:e74ef907b2f1e30c66f69bc3246c18f826faf18ed360ed2640ac825a1f4e5dee
-size 28384
+oid sha256:28d155fac8c430f5305e095670073b6072af87e9063ce9a37344f397fa85e927
+size 28368
diff --git a/create-tar.sh b/create-tar.sh
index 469f2b8..88d52cd 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -7,8 +7,8 @@
CHANNEL="release"
BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_56_0_2_RELEASE" # 56.0.1 build2
-VERSION="56.0.2"
+RELEASE_TAG="8af8bd128bd014669ad89774f47668b0b8109337" # build 3
+VERSION="57.0"
# mozilla
if [ -d mozilla ]; then
diff --git a/firefox-56.0.2-source.tar.xz b/firefox-56.0.2-source.tar.xz
deleted file mode 100644
index 5362368..0000000
--- a/firefox-56.0.2-source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:35af0610782685d9e43fc53d7af53e91eb605993dd1be215f3145ec6f68521eb
-size 271922384
diff --git a/firefox-57.0-source.tar.xz b/firefox-57.0-source.tar.xz
new file mode 100644
index 0000000..abc9c8e
--- /dev/null
+++ b/firefox-57.0-source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d3dc10e75d32884e0a52f785210feb24ed6564375444d85c26f36544f405008f
+size 266361856
diff --git a/firefox-branded-icons.patch b/firefox-branded-icons.patch
index f4aa29c..8a47c13 100644
--- a/firefox-branded-icons.patch
+++ b/firefox-branded-icons.patch
@@ -1,11 +1,11 @@
# HG changeset patch
# Parent e0751ad74e835e80041a61ea00c2a63bf6fbe2de
-# Parent 6309c3625e39216f9cf5a7a35cbf6932adfabc1d
+# Parent 75308bbaaf73d672c88cb283591d4aefc7db9804
diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/branding-common.mozbuild
--- a/browser/branding/branding-common.mozbuild
+++ b/browser/branding/branding-common.mozbuild
-@@ -41,18 +41,24 @@ def FirefoxBranding():
+@@ -38,18 +38,24 @@ def FirefoxBranding():
'disk.icns',
'document.icns',
'dsstore',
@@ -33,7 +33,7 @@ diff --git a/browser/branding/branding-common.mozbuild b/browser/branding/brandi
diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in
--- a/browser/installer/package-manifest.in
+++ b/browser/installer/package-manifest.in
-@@ -599,18 +599,21 @@
+@@ -618,18 +618,21 @@
@RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/chrome.manifest
@RESPATH@/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}/install.rdf
@RESPATH@/chrome/toolkit@JAREXT@
diff --git a/firefox-kde.patch b/firefox-kde.patch
index 8a9d72e..a840dc4 100644
--- a/firefox-kde.patch
+++ b/firefox-kde.patch
@@ -1,11 +1,11 @@
# HG changeset patch
-# Parent 05209af7fdfec897f5f574c691184ba27049b0ff
+# Parent 9f19902f8bcde21fa63172a85818fb11714878d8
diff --git a/browser/base/content/browser-kde.xul b/browser/base/content/browser-kde.xul
new file mode 100644
--- /dev/null
+++ b/browser/base/content/browser-kde.xul
-@@ -0,0 +1,1320 @@
+@@ -0,0 +1,1252 @@
+#filter substitution
+
+# -*- Mode: HTML -*-
@@ -73,7 +73,9 @@ new file mode 100644
+# so that they can be shared by macBrowserOverlay.xul.
+#include global-scripts.inc
+
-+
++
+
+# All sets except for popupsets (commands, keys, stringbundles and broadcasters) *must* go into the
+# browser-sets.inc file for sharing with hiddenWindow.xul.
@@ -95,6 +97,9 @@ new file mode 100644
+
++
+
++ overflowpadding="15" />
+
++
+
+
@@ -272,26 +279,6 @@ new file mode 100644
+
+
+
-+
-+
-+
-+
-+
-+
-+
-+
-+
+