--- a/MozillaFirefox/MozillaFirefox.spec	Thu Dec 13 16:31:34 2018 +0100
+++ b/MozillaFirefox/MozillaFirefox.spec	Sat Jan 26 22:42:57 2019 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package MozillaFirefox
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #               2006-2018 Wolfgang Rosenauer
 #
 # All modifications and additions to the file contributed by third parties
@@ -19,28 +19,19 @@
 
 # changed with every update
 %define major          64
-%define mainver        %major.0
-%define orig_version   64.0
+%define mainver        %major.0.2
+%define orig_version   64.0.2
 %define orig_suffix    %{nil}
 %define update_channel release
 %define branding       1
-%define releasedate    20181206201918
+%define releasedate    20190108160530
 %define source_prefix  firefox-%{orig_version}
 
-# use clang (upstream default since 64.0)
-%if 0%{?suse_version} > 1320
-%define clang_build 1
-%endif
-# Except on aarch64 due to bmo#1513605
-# and on %%arm due to large ld memory requirements
-%ifarch %arm aarch64
+# always build with GCC as SUSE Security Team requires that
 %define clang_build 0
-%endif
 
-# PIE, full relro (x86_64 for now)
-%ifnarch %arm aarch64
+# PIE, full relro
 %define build_hardened 1
-%endif
 
 # Firefox only supports i686
 %ifarch %ix86
@@ -316,21 +307,12 @@
 export CXX=g++
 %endif
 %endif
-export CFLAGS="%{optflags} -fno-strict-aliasing"
-# boo#986541: add -fno-delete-null-pointer-checks for gcc6
-%if 0%{?clang_build} == 0
-%if 0%{?suse_version} > 1320
-export CFLAGS="$CFLAGS -fno-delete-null-pointer-checks"
-%endif
-%endif
 %ifarch %arm %ix86
 # Limit RAM usage during link
 export LDFLAGS="${LDFLAGS} -Wl,--no-keep-memory -Wl,--reduce-memory-overheads"
 %endif
 %if 0%{?build_hardened}
-%ifarch x86_64
-export LDFLAGS="${LDFLAGS} -Wl,-z,relro,-z,now"
-%endif
+export LDFLAGS="${LDFLAGS} -fPIC -Wl,-z,relro,-z,now"
 %endif
 %ifarch ppc64 ppc64le
 %if 0%{?clang_build} == 0
@@ -354,18 +336,11 @@
 %if 0%{?suse_version} >= 1550
 ac_add_options --disable-gconf
 %endif
-%if 0%{?build_hardened}
-%if 0%{?clang_build} == 0
-ac_add_options --enable-pie
-%endif
-%endif
-# gcc7 (boo#104105)
-%if 0%{?suse_version} > 1320
-ac_add_options --enable-optimize="-g -O2"
-%endif
 # bmo#1441155 - Disable the generation of Rust debug symbols on Linux32
 %ifarch %ix86 %arm
 ac_add_options --disable-debug-symbols
+%else
+ac_add_options --enable-debug-symbols
 %endif
 %if 0%{?suse_version} > 1549
 %ifnarch aarch64 ppc64 ppc64le