summaryrefslogtreecommitdiff
path: root/gnu/packages/librewolf.scm
diff options
context:
space:
mode:
authorIan Eure <ian@retrospec.tv>2026-06-16 15:12:50 -0700
committerIan Eure <ian@retrospec.tv>2026-06-19 21:45:00 -0700
commitecd4ab5994c4cfd02414f0b2e86125fdc25fd877 (patch)
tree35c726ad628cbe48f56eb4df359206553b84fa50 /gnu/packages/librewolf.scm
parentc3a4982ca9a161b39af76fad1b5bdaf6050635e7 (diff)
gnu: librewolf: Update to 152.0.1-1 [security-fixes].
Contains fixes for: CVE-2026-12289: Privilege escalation in the Graphics: WebRender component CVE-2026-12290: Memory safety bug fixed in Firefox 152 CVE-2026-12291: Use-after-free in the Networking: HTTP component CVE-2026-12292: Incorrect boundary conditions in the Web Audio component CVE-2026-12293: Use-after-free in the Graphics: WebGPU component CVE-2026-12294: Sandbox escape in the DOM: Workers component CVE-2026-12295: Sandbox escape in the DOM: Navigation component CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing component CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking component CVE-2026-12298: Memory safety bug fixed in Firefox 152 CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component CVE-2026-12300: Memory safety bug fixed in Firefox 152 CVE-2026-12301: Memory safety bug fixed in Firefox 152 CVE-2026-12302: Mitigation bypass in the DOM: Security component CVE-2026-12303: Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies component CVE-2026-12305: Memory safety bug fixed in Firefox 152 CVE-2026-12306: Memory safety bug fixed in Firefox 152 CVE-2026-12307: Memory safety bug fixed in Firefox 152 CVE-2026-12308: Memory safety bug fixed in Firefox 152 CVE-2026-12309: Memory safety bug fixed in Firefox 152 CVE-2026-12310: Memory safety bug fixed in Firefox 152 CVE-2026-12311: Information disclosure, sandbox escape in the Security: Process Sandboxing component CVE-2026-12312: Memory safety bug fixed in Firefox 152 CVE-2026-12313: Information disclosure, sandbox escape in the Security: Process Sandboxing component CVE-2026-12314: Memory safety bug fixed in Firefox 152 CVE-2026-12315: Mitigation bypass in the DOM: Security component CVE-2026-12316: Mitigation bypass in the DOM: Security component CVE-2026-12317: Memory safety bug fixed in Firefox 152 CVE-2026-12318: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-12319: Denial-of-service in the Audio/Video: Playback component CVE-2026-12320: Information disclosure in the Password Manager component CVE-2026-12321: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-12322: Clickjacking issue in the Widget: Gtk component CVE-2026-12323: Spoofing issue in the DOM: Core & HTML component CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component CVE-2026-12326: Memory safety bugs fixed in Firefox 152 and Thunderbird 152 CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 gnu: librewolf: Update to 152.0.1-1. * gnu/packages/librewolf.scm (librewolf): Update to 152.0.1-1. Change-Id: Ifd4692c316ad7cdaae5466169906ecb1340365dd
Diffstat (limited to 'gnu/packages/librewolf.scm')
-rw-r--r--gnu/packages/librewolf.scm12
1 files changed, 6 insertions, 6 deletions
diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm
index 06fd6a04d8d..76aac779b49 100644
--- a/gnu/packages/librewolf.scm
+++ b/gnu/packages/librewolf.scm
@@ -125,14 +125,14 @@
125 ;; ex: 125 ;; ex:
126 ;; tar xf /gnu/store/...-firefox-123.4.source.tar.xz -O \ 126 ;; tar xf /gnu/store/...-firefox-123.4.source.tar.xz -O \
127 ;; firefox-123.4/browser/locales/l10n-changesets.json | grep revision 127 ;; firefox-123.4/browser/locales/l10n-changesets.json | grep revision
128 (let ((commit "5cdc7448c1e193ee833b11f5e4f7b3c1ddb2f366")) 128 (let ((commit "9929bc50607f8c2aac9db5329a596997eee1cabb"))
129 (origin 129 (origin
130 (method git-fetch) 130 (method git-fetch)
131 (uri (git-reference 131 (uri (git-reference
132 (url "https://github.com/mozilla-l10n/firefox-l10n.git") 132 (url "https://github.com/mozilla-l10n/firefox-l10n.git")
133 (commit commit))) 133 (commit commit)))
134 (file-name (git-file-name "firefox-l10n" commit)) 134 (file-name (git-file-name "firefox-l10n" commit))
135 (sha256 (base32 "03yd5l73ik8bw7sb8qc4qz0hsmaaj3dkljsdilj4vb7chj9xrvdr"))))) 135 (sha256 (base32 "1ka78jhbhgvxby29q7ni5lim5c4977qdixd50cylnvb4807cli6l")))))
136 136
137(define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) 137(define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n)
138 (let* ((ff-src (firefox-source-origin 138 (let* ((ff-src (firefox-source-origin
@@ -244,17 +244,17 @@
244;; It's used for cache validation and therefore can lead to strange bugs. 244;; It's used for cache validation and therefore can lead to strange bugs.
245;; ex: date '+%Y%m%d%H%M%S' 245;; ex: date '+%Y%m%d%H%M%S'
246;; or: (format-time-string "%Y%m%d%H%M%S") 246;; or: (format-time-string "%Y%m%d%H%M%S")
247(define %librewolf-build-id "20260610212809") 247(define %librewolf-build-id "20260618150409")
248 248
249(define-public librewolf 249(define-public librewolf
250 (package 250 (package
251 (name "librewolf") 251 (name "librewolf")
252 (version "151.0.4-1") 252 (version "152.0.1-1")
253 (source 253 (source
254 (make-librewolf-source 254 (make-librewolf-source
255 #:version version 255 #:version version
256 #:firefox-hash "19w31s2gl02synr3ss9vc07s5mji78jlsc9lq39kb6rvrj8iknpz" 256 #:firefox-hash "0ppi08ajg00mb0qdlfffnw15mvkfx8xi79ys62ijbpzh0jykgw5z"
257 #:librewolf-hash "195nylf5jc7l98b60ls025z4rjs1njnp38929vvbhcavz89xx4az" 257 #:librewolf-hash "06c55xdl7ngi6p6s3wj1rmrsf02f2s6a1ys3qqghkbjijfayxnzq"
258 #:l10n firefox-l10n)) 258 #:l10n firefox-l10n))
259 (build-system gnu-build-system) 259 (build-system gnu-build-system)
260 (arguments 260 (arguments