summaryrefslogtreecommitdiff
path: root/gnu
diff options
context:
space:
mode:
authorIan Eure <ian@retrospec.tv>2025-02-10 17:55:34 -0800
committerIan Eure <ian@retrospec.tv>2025-02-14 16:02:57 -0800
commita38d71b2e55711f547d468b0df641fc4488074d0 (patch)
treef9eb2516aa1f24f816ac0e0fe9865247c8cc9b71 /gnu
parent93551174af7a96d61f22f013ad1b9935106bf040 (diff)
gnu: librewolf: Update to 135.0-1 [security fixes].
New upstream version. Contains fixes for: CVE-2025-1009: Use-after-free in XSLT CVE-2025-1010: Use-after-free in Custom Highlight CVE-2025-1018: Fullscreen notification is not displayed when fullscreen is re-requested CVE-2025-1011: A bug in WebAssembly code generation could result in a crash CVE-2025-1012: Use-after-free during concurrent delazification CVE-2025-1019: Fullscreen notification not properly displayed CVE-2025-1013: Potential opening of private browsing tabs in normal browsing windows CVE-2025-1014: Certificate length was not properly checked CVE-2025-1016: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 CVE-2025-1017: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 CVE-2025-1020: Memory safety bugs fixed in Firefox 135 and Thunderbird 135 * gnu/packages/librewolf.scm (librewolf): Update to 135.0-1. Change-Id: I7054fc9df31d59bb0d42e02b1f359cf3e6c1a43d
Diffstat (limited to 'gnu')
-rw-r--r--gnu/packages/librewolf.scm11
1 files changed, 6 insertions, 5 deletions
diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm
index 59c7e3a4a3a..e5e91fb91e8 100644
--- a/gnu/packages/librewolf.scm
+++ b/gnu/packages/librewolf.scm
@@ -200,22 +200,23 @@
200;;; but since in Guix only the latest packaged Rust is officially supported, 200;;; but since in Guix only the latest packaged Rust is officially supported,
201;;; it is a tradeoff worth making. 201;;; it is a tradeoff worth making.
202;;; 0: https://firefox-source-docs.mozilla.org/writing-rust-code/update-policy.html 202;;; 0: https://firefox-source-docs.mozilla.org/writing-rust-code/update-policy.html
203(define rust-librewolf rust-1.81) 203;; 135.0 wants 1.83, but it's not available in Guix yet.
204(define rust-librewolf rust-1.82)
204 205
205;; Update this id with every update to its release date. 206;; Update this id with every update to its release date.
206;; It's used for cache validation and therefore can lead to strange bugs. 207;; It's used for cache validation and therefore can lead to strange bugs.
207;; ex: date '+%Y%m%d%H%M%S' 208;; ex: date '+%Y%m%d%H%M%S'
208(define %librewolf-build-id "20250121184331") 209(define %librewolf-build-id "20250209210057")
209 210
210(define-public librewolf 211(define-public librewolf
211 (package 212 (package
212 (name "librewolf") 213 (name "librewolf")
213 (version "134.0.2-1") 214 (version "135.0-1")
214 (source 215 (source
215 (make-librewolf-source 216 (make-librewolf-source
216 #:version version 217 #:version version
217 #:firefox-hash "09yxacfcklgjqbqvcac32llwmlb16d9jhfp2mif9qs7s2gzvfvkc" 218 #:firefox-hash "0q5r2q6q56kyzl5pknrir9bzlhmzbvv9hi5gi4852izgcali4zl2"
218 #:librewolf-hash "1qa3crgazfvmsqx8dm0k78yk9cb11w1lf74x6x8ixjq5ifsdh1ws" 219 #:librewolf-hash "0fg4vji5xb17pgvq7jnfz4dq08gi0rl998xhj37hfm5zxs19y8jk"
219 #:l10n firefox-l10n)) 220 #:l10n firefox-l10n))
220 (build-system gnu-build-system) 221 (build-system gnu-build-system)
221 (arguments 222 (arguments