From 59d9a756524768d13d1472ab609e890e78715233 Mon Sep 17 00:00:00 2001
From: Funda Wang <fundawang@yeah.net>
Date: Wed, 12 Nov 2025 08:57:19 +0800
Subject: [PATCH] 140.5.0esr

(cherry picked from commit bd8538b80f77bff6a955fb1fa2595e819890b39c)
---
 ...tar.xz => firefox-140.5.0esr.source.tar.xz |  4 +--
 ....xz => firefox-langpacks-140.5.0esr.tar.xz |  4 +--
 firefox.spec                                  | 29 ++++++-------------
 3 files changed, 13 insertions(+), 24 deletions(-)
 rename firefox-140.4.0esr.source.tar.xz => firefox-140.5.0esr.source.tar.xz (32%)
 rename firefox-langpacks-140.4.0esr.tar.xz => firefox-langpacks-140.5.0esr.tar.xz (32%)

diff --git a/firefox-140.4.0esr.source.tar.xz b/firefox-140.5.0esr.source.tar.xz
similarity index 32%
rename from firefox-140.4.0esr.source.tar.xz
rename to firefox-140.5.0esr.source.tar.xz
index c12231b..1d4ebc3 100644
--- a/firefox-140.4.0esr.source.tar.xz
+++ b/firefox-140.5.0esr.source.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:49f20673171046bc7b64f4caa340c46e1e105b9107f0ef68b7a94f379bcea4f7
-size 639276460
+oid sha256:832b7ef3e5f7a2430e0ba0b9000dab6fdd8f65bccff8bcf7eeb9ed16e6d310e2
+size 636823136
diff --git a/firefox-langpacks-140.4.0esr.tar.xz b/firefox-langpacks-140.5.0esr.tar.xz
similarity index 32%
rename from firefox-langpacks-140.4.0esr.tar.xz
rename to firefox-langpacks-140.5.0esr.tar.xz
index 490fe79..f97a71b 100644
--- a/firefox-langpacks-140.4.0esr.tar.xz
+++ b/firefox-langpacks-140.5.0esr.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:50bd29d5cc5d58864ce1ed51b4821a71a06a4ee9e57c075b4375476a70e61f8c
-size 33475680
+oid sha256:60652603a33360e7efe26c0e8798d2d44d599d0361e4870699c8d33f5d41cec1
+size 33425648
diff --git a/firefox.spec b/firefox.spec
index ba6977f..703fd6f 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -40,8 +40,7 @@
 %global system_webp       1
 
 %if %{?system_nss}
-%global nspr_version      4.35
-%global nspr_version_max  4.36
+%global nspr_version      4.32
 %global nss_version       3.112
 %endif
 
@@ -58,8 +57,8 @@
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        140.4.0
-Release:        3
+Version:        140.5.0
+Release:        1
 URL:            https://www.mozilla.org/firefox/
 License:        MPL-1.1 or GPL-2.0-or-later or LGPL-2.0-or-later
 Source0:        https://ftp.mozilla.org/pub/firefox/releases/%{version}esr/source/firefox-%{version}esr.source.tar.xz
@@ -142,7 +141,6 @@ Patch801:       bmo-1559213-fix-system-av1-libs.patch
 # BUILD REQURES/REQUIRES
 %if %{?system_nss}
 BuildRequires:  pkgconfig(nspr) >= %{nspr_version}
-BuildRequires:  pkgconfig(nspr) < %{nspr_version_max}
 BuildRequires:  pkgconfig(nss) >= %{nss_version}
 BuildRequires:  nss-static >= %{nss_version}
 %endif
@@ -954,21 +952,6 @@ if [ $1 -eq 0 ]; then
   %{__rm} -rf %{mozappdir}/plugins
 fi
 
-%post
-update-desktop-database &> /dev/null || :
-touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
-
-%postun
-update-desktop-database &> /dev/null || :
-if [ $1 -eq 0 ] ; then
-    touch --no-create %{_datadir}/icons/hicolor &>/dev/null
-    gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
-    %{__rm} -rf %{langpackdir}
-fi
-
-%posttrans
-gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
-
 %files -f %{name}.lang
 %{_bindir}/firefox
 %{mozappdir}/firefox
@@ -1021,6 +1004,12 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %endif
 
 %changelog
+* Tue Nov 11 2025 Funda Wang <fundawang@yeah.net> - 140.5.0-1
+- update to 140.5.0
+  * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
+    CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
+    CVE-2025-13020
+
 * Wed Oct 22 2025 Funda Wang <fundawang@yeah.net> - 140.4.0-3
 - support building with system cbindgen
 - build with system ldflags
-- 
Gitee