From a9c2afcf44ad353434fd022e61701cdd5ff2c23f Mon Sep 17 00:00:00 2001 From: wk333 <13474090681@163.com> Date: Wed, 5 Feb 2025 11:26:19 +0800 Subject: [PATCH] Update to 128.7.0 for fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013 CVE-2025-1014 CVE-2025-1016 CVE-2025-1017 --- firefox-128.6.0esr.source.tar.xz.asc | 16 ---------------- ...ce.tar.xz => firefox-128.7.0esr.source.tar.xz | 4 ++-- firefox-128.7.0esr.source.tar.xz.asc | 16 ++++++++++++++++ ...tar.xz => firefox-langpacks-128.7.0esr.tar.xz | 4 ++-- firefox.spec | 10 +++++++--- 5 files changed, 27 insertions(+), 23 deletions(-) delete mode 100644 firefox-128.6.0esr.source.tar.xz.asc rename firefox-128.6.0esr.source.tar.xz => firefox-128.7.0esr.source.tar.xz (32%) create mode 100644 firefox-128.7.0esr.source.tar.xz.asc rename firefox-langpacks-128.6.0esr.tar.xz => firefox-langpacks-128.7.0esr.tar.xz (32%) diff --git a/firefox-128.6.0esr.source.tar.xz.asc b/firefox-128.6.0esr.source.tar.xz.asc deleted file mode 100644 index 7e27a30..0000000 --- a/firefox-128.6.0esr.source.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmdi9D8ACgkQ4207E/PZ -MnRZcw/+J/br+8V7X7gqH/BxM+MZjcJRmD4+9ZMjEza5zSnT+9XR8G2W7HcwQwqA -9EPOXjhyGx0ff/KoUNMbvWtnqr6aFcIVBTCXD359CnywzBG3QmVSwAEDqsw2T+qS -NfO1qBhOiUw/jdb37B3XHJ6pPMXDYeRkLuVvHaFRARJx/bP1ZK+FIOhx9Ou0Py3J -7dijVR8oYSlz9jNRbwSu3qh7CZm1KiZ0FLVl3R95WokVHsZHBTY+i3eHaKrPPO0r -xjgK0CIHs/7wWR9iF9rG8+Lpaj9lJBE5IlYUNbB+hu1OIGp43pt+7+1puapOTfJh -W2n4oZ401cFrlM5PNY3GO2k5o9iPWsBCPd264cj4G3543iYbIVksYavN6TmxUVZz -eVBkORYhAKpMGXhOQSSq7UEP3jv7ZdJfI09dKZf1iLemghCrqvslAIjOmrkzdrWr -x/0oYIk+jY5mD9iPiojsOp/23uKNlfN5bY/CMRYNdfVcLt+AkMfbC7qE9H9GN6xe -Vu6krMMfLDhl6MkYVhLVJOOyxzhGqMF7j6wxDRJIi+hiOyxm0oBu2iwQsB8457PI -0VdiUSJwumOT4RPs1v4w0uxc8WaE0QkShfRnVXVFNbkVXQnxI3oUZy5HuoEp/3yK -SKaEvdM2OFoTOU5rgOsZc6CCe2EZJmYCMoZf509r7179FbD11uk= -=GBwt ------END PGP SIGNATURE----- diff --git a/firefox-128.6.0esr.source.tar.xz b/firefox-128.7.0esr.source.tar.xz similarity index 32% rename from firefox-128.6.0esr.source.tar.xz rename to firefox-128.7.0esr.source.tar.xz index 16f7eff..d1d3faf 100644 --- a/firefox-128.6.0esr.source.tar.xz +++ b/firefox-128.7.0esr.source.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:b7a39d3ce12d05021dd34a5e449cdd4bb53d3dc24f0ae9201eaaa85c71868508 -size 563259116 +oid sha256:e0a7bf4eddfa33cbc8797d68ecea8fb4e6404ca197d3b2242cbc8daed03794f7 +size 569300208 diff --git a/firefox-128.7.0esr.source.tar.xz.asc b/firefox-128.7.0esr.source.tar.xz.asc new file mode 100644 index 0000000..ec1bcac --- /dev/null +++ b/firefox-128.7.0esr.source.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmeX4MoACgkQ4207E/PZ +MnS/rhAAuazif0dLh/9TzPRjn/4MDTl0dl/i2d4RL5DUycr23GiBbvroTuUD2O1d +SIPykEroSiPC6bEvpNDbF9hpPj/OQo/o82/3DIcXCWcmIjS7Yr8nDEg7keMyMCuO +TsuHwmiq5zGf9btv7a7qzakDZsxEw553gCaQWZXDKxWGd6P1Z5jMeu9uXZM5DOtm +fLlevdGfNuqi4TncOlDU4OGOex5uBAN3e4XoDonUXl6dGpb4OGnkdbjLqmpuYin7 +b9ZAI58o5hU7kzeOfk53BEPT9zkDOzdaNQcVJP3TkTrhZsRz81i0TKBH44CDTfJY +aTdUzCBs37WEkK8lhQcSROqunYYYFgNCkfbdUAGmzxbGPdALOZC+i1B5qhAZAmBZ +NesJDQY3jO8Y+XGJTwr1D1csyBVtSn7gS9rtsBcbiRwAEVZuhicWw52Crk456Hj1 +NJEo7Re+rpHS0ZhYbMhUwkPJU6E3OE+Mh/Pxlt8nB4KE/FWOTc5J+y97cH3n9zIF +1qWkl7er5ATf/Qs15o+E0mVIcMn/LPelCHwA6cPJDwfR62DYi9QuZqiw6bsMZzQI +UMwykdEJ4Nn5NxGwdJqlKQXDJ3XWqTec7jB0aULp6RkG8qv5CX2KVElzjPcAYZzG +d3AI3crWlW9p5LZJIs93ZPjIbyGzw1HfzkZ0wUNB6t017j8CgQ8= +=RqRi +-----END PGP SIGNATURE----- diff --git a/firefox-langpacks-128.6.0esr.tar.xz b/firefox-langpacks-128.7.0esr.tar.xz similarity index 32% rename from firefox-langpacks-128.6.0esr.tar.xz rename to firefox-langpacks-128.7.0esr.tar.xz index dfddd61..734461a 100644 --- a/firefox-langpacks-128.6.0esr.tar.xz +++ b/firefox-langpacks-128.7.0esr.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:9c972827525e34c232a7cda18eddaec02a637ca9ff6914721990cf95acebdb01 -size 51709108 +oid sha256:15138b1df6c275aa23f2aafd7aa25463af5a7243f40d7d098c1e55a64c79dfcb +size 51707548 diff --git a/firefox.spec b/firefox.spec index 91dbe1f..dd77cd2 100644 --- a/firefox.spec +++ b/firefox.spec @@ -44,7 +44,7 @@ Summary: Mozilla Firefox Web browser Name: firefox -Version: 128.6.0 +Version: 128.7.0 Release: 1 URL: https://www.mozilla.org/firefox/ License: MPL-1.1 or GPL-2.0-or-later or LGPL-2.0-or-later @@ -357,8 +357,7 @@ to run Firefox explicitly on X11. #--------------------------------------------------------------------- %prep -# download source0 and gpg check -# wget -qO %{SOURCE0} https://user-repo.openeuler.openatom.cn/lfs-tar/firefox/firefox-%{version}esr.source.tar.xz +# gpg check gpg --import %{SOURCE6} gpg --verify %{SOURCE5} %{SOURCE0} @@ -925,6 +924,11 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || : %endif %changelog +* Wed Feb 05 2025 wangkai <13474090681@163.com> - 128.7.0-1 +- Update to 128.7.0 +- Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013 + CVE-2025-1014 CVE-2025-1016 CVE-2025-1017 + * Wed Jan 08 2025 wangkai <13474090681@163.com> - 128.6.0-1 - Update to 128.6.0 - Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241 -- Gitee