diff options
| author | Ian Eure <ian@retrospec.tv> | 2026-06-16 15:12:50 -0700 |
|---|---|---|
| committer | Ian Eure <ian@retrospec.tv> | 2026-06-19 21:45:00 -0700 |
| commit | ecd4ab5994c4cfd02414f0b2e86125fdc25fd877 (patch) | |
| tree | 35c726ad628cbe48f56eb4df359206553b84fa50 /gnu/packages/librewolf.scm | |
| parent | c3a4982ca9a161b39af76fad1b5bdaf6050635e7 (diff) | |
gnu: librewolf: Update to 152.0.1-1 [security-fixes].
Contains fixes for:
CVE-2026-12289: Privilege escalation in the Graphics: WebRender
component
CVE-2026-12290: Memory safety bug fixed in Firefox 152
CVE-2026-12291: Use-after-free in the Networking: HTTP component
CVE-2026-12292: Incorrect boundary conditions in the Web Audio
component
CVE-2026-12293: Use-after-free in the Graphics: WebGPU component
CVE-2026-12294: Sandbox escape in the DOM: Workers component
CVE-2026-12295: Sandbox escape in the DOM: Navigation component
CVE-2026-12296: Sandbox escape in the Security: Process Sandboxing
component
CVE-2026-12297: Sandbox escape due to incorrect boundary conditions in
the Networking component
CVE-2026-12298: Memory safety bug fixed in Firefox 152
CVE-2026-12299: JIT miscompilation in the DOM: Core & HTML component
CVE-2026-12300: Memory safety bug fixed in Firefox 152
CVE-2026-12301: Memory safety bug fixed in Firefox 152
CVE-2026-12302: Mitigation bypass in the DOM: Security component
CVE-2026-12303: Information disclosure due to incorrect boundary
conditions in the Graphics: WebGPU component
CVE-2026-12304: Same-origin policy bypass in the Networking: Cookies
component
CVE-2026-12305: Memory safety bug fixed in Firefox 152
CVE-2026-12306: Memory safety bug fixed in Firefox 152
CVE-2026-12307: Memory safety bug fixed in Firefox 152
CVE-2026-12308: Memory safety bug fixed in Firefox 152
CVE-2026-12309: Memory safety bug fixed in Firefox 152
CVE-2026-12310: Memory safety bug fixed in Firefox 152
CVE-2026-12311: Information disclosure, sandbox escape in the
Security: Process Sandboxing component
CVE-2026-12312: Memory safety bug fixed in Firefox 152
CVE-2026-12313: Information disclosure, sandbox escape in the
Security: Process Sandboxing component
CVE-2026-12314: Memory safety bug fixed in Firefox 152
CVE-2026-12315: Mitigation bypass in the DOM: Security component
CVE-2026-12316: Mitigation bypass in the DOM: Security component
CVE-2026-12317: Memory safety bug fixed in Firefox 152
CVE-2026-12318: Incorrect boundary conditions in the Libraries
component in NSS
CVE-2026-12319: Denial-of-service in the Audio/Video: Playback
component
CVE-2026-12320: Information disclosure in the Password Manager
component
CVE-2026-12321: JIT miscompilation in the JavaScript: WebAssembly
component
CVE-2026-12322: Clickjacking issue in the Widget: Gtk component
CVE-2026-12323: Spoofing issue in the DOM: Core & HTML component
CVE-2026-12324: Incorrect boundary conditions in the Graphics:
CanvasWebGL component
CVE-2026-12325: Denial-of-service in the Graphics: ImageLib component
CVE-2026-12326: Memory safety bugs fixed in Firefox 152 and
Thunderbird 152
CVE-2026-12327: Memory safety bugs fixed in Firefox ESR 140.12,
Thunderbird ESR 140.12, Firefox 152 and Thunderbird
152
CVE-2026-12328: Memory safety bugs fixed in Firefox ESR 115.37,
Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox
152 and Thunderbird 152
gnu: librewolf: Update to 152.0.1-1.
* gnu/packages/librewolf.scm (librewolf): Update to 152.0.1-1.
Change-Id: Ifd4692c316ad7cdaae5466169906ecb1340365dd
Diffstat (limited to 'gnu/packages/librewolf.scm')
| -rw-r--r-- | gnu/packages/librewolf.scm | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 06fd6a04d8d..76aac779b49 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm | |||
| @@ -125,14 +125,14 @@ | |||
| 125 | ;; ex: | 125 | ;; ex: |
| 126 | ;; tar xf /gnu/store/...-firefox-123.4.source.tar.xz -O \ | 126 | ;; tar xf /gnu/store/...-firefox-123.4.source.tar.xz -O \ |
| 127 | ;; firefox-123.4/browser/locales/l10n-changesets.json | grep revision | 127 | ;; firefox-123.4/browser/locales/l10n-changesets.json | grep revision |
| 128 | (let ((commit "5cdc7448c1e193ee833b11f5e4f7b3c1ddb2f366")) | 128 | (let ((commit "9929bc50607f8c2aac9db5329a596997eee1cabb")) |
| 129 | (origin | 129 | (origin |
| 130 | (method git-fetch) | 130 | (method git-fetch) |
| 131 | (uri (git-reference | 131 | (uri (git-reference |
| 132 | (url "https://github.com/mozilla-l10n/firefox-l10n.git") | 132 | (url "https://github.com/mozilla-l10n/firefox-l10n.git") |
| 133 | (commit commit))) | 133 | (commit commit))) |
| 134 | (file-name (git-file-name "firefox-l10n" commit)) | 134 | (file-name (git-file-name "firefox-l10n" commit)) |
| 135 | (sha256 (base32 "03yd5l73ik8bw7sb8qc4qz0hsmaaj3dkljsdilj4vb7chj9xrvdr"))))) | 135 | (sha256 (base32 "1ka78jhbhgvxby29q7ni5lim5c4977qdixd50cylnvb4807cli6l"))))) |
| 136 | 136 | ||
| 137 | (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) | 137 | (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) |
| 138 | (let* ((ff-src (firefox-source-origin | 138 | (let* ((ff-src (firefox-source-origin |
| @@ -244,17 +244,17 @@ | |||
| 244 | ;; It's used for cache validation and therefore can lead to strange bugs. | 244 | ;; It's used for cache validation and therefore can lead to strange bugs. |
| 245 | ;; ex: date '+%Y%m%d%H%M%S' | 245 | ;; ex: date '+%Y%m%d%H%M%S' |
| 246 | ;; or: (format-time-string "%Y%m%d%H%M%S") | 246 | ;; or: (format-time-string "%Y%m%d%H%M%S") |
| 247 | (define %librewolf-build-id "20260610212809") | 247 | (define %librewolf-build-id "20260618150409") |
| 248 | 248 | ||
| 249 | (define-public librewolf | 249 | (define-public librewolf |
| 250 | (package | 250 | (package |
| 251 | (name "librewolf") | 251 | (name "librewolf") |
| 252 | (version "151.0.4-1") | 252 | (version "152.0.1-1") |
| 253 | (source | 253 | (source |
| 254 | (make-librewolf-source | 254 | (make-librewolf-source |
| 255 | #:version version | 255 | #:version version |
| 256 | #:firefox-hash "19w31s2gl02synr3ss9vc07s5mji78jlsc9lq39kb6rvrj8iknpz" | 256 | #:firefox-hash "0ppi08ajg00mb0qdlfffnw15mvkfx8xi79ys62ijbpzh0jykgw5z" |
| 257 | #:librewolf-hash "195nylf5jc7l98b60ls025z4rjs1njnp38929vvbhcavz89xx4az" | 257 | #:librewolf-hash "06c55xdl7ngi6p6s3wj1rmrsf02f2s6a1ys3qqghkbjijfayxnzq" |
| 258 | #:l10n firefox-l10n)) | 258 | #:l10n firefox-l10n)) |
| 259 | (build-system gnu-build-system) | 259 | (build-system gnu-build-system) |
| 260 | (arguments | 260 | (arguments |
