diff -r a0c915e59e05 -r 33c6119b5cc5 MozillaFirefox/MozillaFirefox.changes
--- a/MozillaFirefox/MozillaFirefox.changes	Sat Jun 23 17:04:50 2018 +0200
+++ b/MozillaFirefox/MozillaFirefox.changes	Thu Aug 23 16:35:52 2018 +0200
@@ -1,4 +1,31 @@
 -------------------------------------------------------------------
+Thu Aug  9 14:22:00 UTC 2018 - wr@rosenauer.org
+
+- update to Firefox 61.0.2
+  * Improved website rendering with the Retained Display List feature
+    enabled (bmo#1474402)
+  * Fixed broken DevTools panels with certain extensions installed
+    (bmo#1474379)
+  * Fixed a crash for users with some accessibility tools enabled
+    (bmo#1474007)
+
+-------------------------------------------------------------------
+Mon Jul  9 07:22:09 UTC 2018 - astieger@suse.com
+
+- Mozilla Firefox 61.0.1:
+  * Fix missing content on the New Tab Page and the Home section of
+    the Preferences page (bmo#1471375)
+  * Fixed loss of bookmarks under rare circumstances when upgrading
+    from Firefox 60 (bmo#1472127)
+  * Improved playback of Twitch 1080p video streams (bmo#1469257)
+  * Web pages no longer lose focus when a browser popup window is
+    opened (bmo#1471415)
+  * Re-allowed downloading files from FTP sites via the "Save Link
+    As" option when linked from HTTP pages (bmo#1470295)
+  * Fixed extensions being unable to override the default homepage
+    in certain situations (bmo#1466846)
+
+-------------------------------------------------------------------
 Sat Jun 23 07:25:51 UTC 2018 - wr@rosenauer.org
 
 - update to Firefox 61.0
@@ -8,15 +35,57 @@
   * OpenSearch plugins offered by web pages can now be added from the
     page action menu for easier installation
   * Improved support for allowing WebExtensions to manage and hide tabs
+  MFSA 2018-15 (bsc#1098998)
+  * CVE-2018-12359 (bmo#1459162)
+    Buffer overflow using computed size of canvas element
+  * CVE-2018-12360 (bmo#1459693)
+    Use-after-free when using focus()
+  * CVE-2018-12361 (bmo#1463244)
+    Integer overflow in SwizzleData
+  * CVE-2018-12358 (bmo#1467852)
+    Same-origin bypass using service worker and redirection
+  * CVE-2018-12362 (bmo#1452375)
+    Integer overflow in SSSE3 scaler
+  * CVE-2018-5156 (bmo#1453127)
+    Media recorder segmentation fault when track type is changed during capture
+  * CVE-2018-12363 (bmo#1464784)
+    Use-after-free when appending DOM nodes
+  * CVE-2018-12364 (bmo#1436241)
+    CSRF attacks through 307 redirects and NPAPI plugins
+  * CVE-2018-12365 (bmo#1459206)
+    Compromised IPC child process can list local filenames
+  * CVE-2018-12371 (bmo#1465686) 
+    Integer overflow in Skia library during edge builder allocation
+  * CVE-2018-12366 (bmo#1464039)
+    Invalid data handling during QCMS transformations
+  * CVE-2018-12367 (bmo#1462891)
+    Timing attack mitigation of PerformanceNavigationTiming
+  * CVE-2018-12369 (bmo#1454909)
+    WebExtension security permission checks bypassed by embedded experiments
+  * CVE-2018-12370 (bmo#1456652)
+    SameSite cookie protections bypassed when exiting Reader View
+  * CVE-2018-5186 (bmo#1464872,bmo#1463329,bmo#1419373,bmo#1412882,
+    bmo#1413033,bmo#1444673,bmo#1454448,bmo#1453505,bmo#1438671)
+    Memory safety bugs fixed in Firefox 61
+  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
+    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
+    bmo#1463884)
+    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
+  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
+    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
+    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
+    bmo#1464079,bmo#1463494,bmo#1458048)
+    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
 - requires NSS 3.37.3
+- requires python >= 3.5 to build
 - removed obsolete patches
   mozilla-i586-DecoderDoctorLogger.patch
   mozilla-i586-domPrefs.patch
   mozilla-fix-skia-aarch64.patch
   mozilla-bmo1375074.patch
+  mozilla-enable-csd.patch
 - patch for new no-return warnings (mozilla-no-return.patch)
 - do not disable system installed locales (mozilla-bmo1464766.patch)
-- disabled outdated mozilla-enable-csd.patch temporarily
 
 -------------------------------------------------------------------
 Fri Jun  8 10:52:13 UTC 2018 - bjorn.lie@gmail.com