!280 [sync] PR-276: Update to 128.10.0

From: @openeuler-sync-bot 
Reviewed-by: @wk333 
Signed-off-by: @wk333

firefox-128.10.0esr.source.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2ed83e26e41a8b3e2c7c0d13448a84dbb9b7ed65ed46bc162d629b0c6b071caf
+size 556644356

firefox-128.10.0esr.source.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=bEc8
+-----END PGP SIGNATURE-----

firefox-128.5.0esr.source.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0bd18968314afdcc341edd2a9178e305c9d454560a42193154a0f994047fecb8
-size 567200548

firefox-128.5.0esr.source.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmc7bwEACgkQ4207E/PZ
-MnSnSRAAoJoCc37b6j20QNwp4/lVFuhvE6CSvDzj9BuQBB43XRaPuwSUz9Oyhanv
-I+NK3LB9rf5QOlNSG2W3Pn32mPsjqvZO3rn7Sp6QYolv9KW3QjxL3twxlQmu9k+Q
-JsOfWxKV1Q/hYs80LBe/qVFOdzc7g8lyBy2FCkPeeeg9INLZLEXjAFHIJEHOc8HA
-73NlOT2HUKY9lKXMJQ1flUFfdyiOYusOqNYuVP23elwp01BWYUGVsyYtcO5aiR1w
-4eWMkpZKvScduQyDsyi1TCw+eHbDhCP1N5lTOG6Kb4j9BKozcWDMpL3273XyGNzQ
-iW+8QXngf/GzoL0gvdaCJtW85mzg8I9ydloUl7qKBx6TDPQGttyoMIMs0pnUXGTE
-D8P+zkaoOQDPpygpMETzU/AY4Dw/xothkN0Xi0B9knP8htTJifmBywVZJi5HuOb5
-AjNiIzqM0zcv+fA5FvhvYWkqTsJFxgJ1LCiJwj5Lejo7M0BPdoE3W8P+V2kEH5vu
-AT6iP6BQuD42lng6bpDDXZiZcuSxKn/qYJH3YiWEhYq3qoQLTpdBOMIuiADv1PoD
-elnVLZacKCuznR19iANu/t1ZKbfqHVag7M/GtnjyOAMQByER/m56jZlYLlBHv2Cu
-9KgWIRkf2Dob0pUFnXHRRecrHMjModDNl6LZFhiQ3q5jNY5sHKg=
-=yuDr
------END PGP SIGNATURE-----

firefox-langpacks-128.10.0esr.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d040964a6c0a7ff2c88a2666c8d1204ce4bbe73af8a3753a2da37a37c22900f7
+size 53427648

firefox-langpacks-128.5.0esr.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:862460caf1ac87cec30a0fb2d6a36fb4a66e3c43aa83633f9e0d0bc64ff1ef2c
-size 51621256

firefox.spec

@@ -44,7 +44,7 @@
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        128.5.0
+Version:        128.10.0
 Release:        1
 URL:            https://www.mozilla.org/firefox/
 License:        MPL-1.1 or GPL-2.0-or-later or LGPL-2.0-or-later
@@ -357,8 +357,7 @@ to run Firefox explicitly on X11.
 #---------------------------------------------------------------------
 
 %prep
-# download source0 and gpg check
+# gpg check
-# wget -qO %{SOURCE0} https://user-repo.openeuler.openatom.cn/lfs-tar/firefox/firefox-%{version}esr.source.tar.xz
 gpg --import %{SOURCE6}
 gpg --verify %{SOURCE5} %{SOURCE0}
 
@@ -925,6 +924,29 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %endif
 
 %changelog
+* Wed Apr 30 2025 wangkai <13474090681@163.com> - 128.10.0-1
+- Update to 128.10.0
+- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093
+
+* Wed Apr 02 2025 wangkai <13474090681@163.com> - 128.9.0-1
+- Update to 128.9.0
+- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030
+
+* Wed Mar 05 2025 wangkai <13474090681@163.com> - 128.8.0-1
+- Update to 128.8.0
+- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
+  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938
+
+* Wed Feb 05 2025 wangkai <13474090681@163.com> - 128.7.0-1
+- Update to 128.7.0
+- Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013
+  CVE-2025-1014 CVE-2025-1016 CVE-2025-1017
+
+* Wed Jan 08 2025 wangkai <13474090681@163.com> - 128.6.0-1
+- Update to 128.6.0
+- Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241
+  CVE-2025-0242 CVE-2025-0243
+
 * Tue Dec 03 2024 wangkai <13474090681@163.com> - 128.5.0-1
 - Update to 128.5.0
 - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696

mozilla.keyring

@@ -2,19 +2,20 @@ This file contains the public PGP key that is used to sign builds and
 artifacts of Mozilla projects (such as Firefox and Thunderbird).
 
 Please realize that this file itself or the public key servers may be
-compromised.  You are encouraged to validate the authenticity of these keys in
+compromised.  You are encouraged to validate the authenticity of these
-an out-of-band manner.
+keys in an out-of-band manner.
 
-Mozilla users: pgp < KEY
+gpg --show-keys < KEY
 
 pub   rsa4096 2015-07-17 [SC]
       14F26682D0916CDD81E37B6D61B7B526D98F0353
-uid           [  full  ] Mozilla Software Releases <release@mozilla.com>
+uid                      Mozilla Software Releases <release@mozilla.com>
+sub   rsa4096 2021-05-17 [S] [expired: 2023-05-17]
 sub   rsa4096 2015-07-17 [S] [expired: 2017-07-16]
 sub   rsa4096 2017-06-22 [S] [expired: 2019-06-22]
 sub   rsa4096 2019-05-30 [S] [expired: 2021-05-29]
-sub   rsa4096 2021-05-17 [S] [expired: 2023-05-17]
 sub   rsa4096 2023-05-05 [S] [expires: 2025-05-04]
+sub   rsa4096 2025-03-13 [S] [expires: 2027-03-13]
 
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 
@@ -400,6 +401,41 @@ W81ABx4ASBktXAf1IweRbbxqW8OgMhG6xHTeiEjjav7SmlD0XVOxjhI+qBoNPovW
 lChqONxablBkuh0Jd6kdNiaSEM9cd60kK3GT/dBMyv0yVhhLci6HQZ+Mf4cbn0Kt
 ayzuQLOcdRCN3FF/JNQH3v6LA1MdRfmJlgC4UdiepBb1uCgtVIPizRuXWDjyjzeP
 ZRN/AqaUbEoNBHhIz0nKhQGDbst4ugIzJWIX+6UokwPC3jvJqQQttccjAy6kXBmx
-fxyRMB5BEeLY0+qVPyvOxpXEGnlSHYmdIS4=
+fxyRMB5BEeLY0+qVPyvOxpXEGnlSHYmdIS65Ag0EZ9KQfQEQAOVIyh0sZPPFLWxo
-=ZEQW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+=4Dnl
 -----END PGP PUBLIC KEY BLOCK-----