gnu: librewolf: Update to 152.0.4-1 [security-fixes].

Contains fixes for:
CVE-2026-14241: Memory safety bugs fixed in Firefox 152.0.4

* gnu/packages/librewolf.scm (librewolf): Update to 152.0.4-1.
* gnu/packages/patches/librewolf-neuter-locale-download.patch: Adjust to apply
cleanly.

Change-Id: I80a5b8be81fc178cac1bd7a102cd48ba7b8c72d7

2 files changed, 8 insertions, 7 deletions

diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm
index 36574a272f1..f7e357022a2 100644
--- a/gnu/packages/librewolf.scm
+++ b/gnu/packages/librewolf.scm
@@ -245,17 +245,17 @@
 ;; It's used for cache validation and therefore can lead to strange bugs.
 ;; ex: date '+%Y%m%d%H%M%S'
 ;; or: (format-time-string "%Y%m%d%H%M%S")
-(define %librewolf-build-id "20260623152004")
+(define %librewolf-build-id "20260630184620")
 
 (define-public librewolf
   (package
     (name "librewolf")
-    (version "152.0.2-1")
+    (version "152.0.4-1")
     (source
      (make-librewolf-source
       #:version version
-      #:firefox-hash "0fsxg857d8lpypzgn3np1r1mqi751x8l60pn1zpmxiwywxag9wvr"
-      #:librewolf-hash "0zw1nyp4mhx3ircspamywyghdb9wyfzj9k4z643xlvadxcfg808a"
+      #:firefox-hash "1fqna8xych2pslv9w73dsiv6bm02i7a8az9h4wx3b9fd08i9i2gx"
+      #:librewolf-hash "01llbmc5nh1pfa4fyvpkzg27f18yrv8ny8c6yc9fqscqkjazgcmi"
       #:l10n firefox-l10n))
     (build-system gnu-build-system)
     (arguments
diff --git a/gnu/packages/patches/librewolf-neuter-locale-download.patch b/gnu/packages/patches/librewolf-neuter-locale-download.patch
index da300542f52..2f6c86638cb 100644
--- a/gnu/packages/patches/librewolf-neuter-locale-download.patch
+++ b/gnu/packages/patches/librewolf-neuter-locale-download.patch
@@ -2,16 +2,17 @@ diff --git a/scripts/librewolf-patches.py b/scripts/librewolf-patches.py
 index 48dc6bc..01a6c58 100755
 --- a/scripts/librewolf-patches.py
 +++ b/scripts/librewolf-patches.py
-@@ -147,12 +147,6 @@ def librewolf_patches():
+@@ -150,12 +150,6 @@
          with open(file, "w") as f:
              f.write("{}-{}".format(version,release))
  
 -    print("-> Downloading locales from https://github.com/mozilla-l10n/firefox-l10n")
 -    with TemporaryDirectory() as tmpdir:
--        exec(f"wget -qO {tmpdir}/l10n.zip 'https://codeload.github.com/mozilla-l10n/firefox-l10n/zip/refs/heads/main'")
+-        exec(f"curl -so {tmpdir}/l10n.zip 'https://codeload.github.com/mozilla-l10n/firefox-l10n/zip/refs/heads/main'")
 -        exec(f"unzip -qo {tmpdir}/l10n.zip -d {tmpdir}/l10n")
 -        exec(f"mv {tmpdir}/l10n/firefox-l10n-main lw/l10n")
 -
      print("-> Patching appstrings.properties")
      # Why is "Firefox" hardcoded there???
-     exec("find . -path '*/appstrings.properties' -exec sed -i s/Firefox/LibreWolf/ {} \;")
+     exec("find . -path '*/appstrings.properties' -exec sed -i s/Firefox/LibreWolf/ {} \\;")
+