diff options
| author | Ian Eure <ian@retrospec.tv> | 2025-02-10 17:55:34 -0800 |
|---|---|---|
| committer | Ian Eure <ian@retrospec.tv> | 2025-02-14 16:02:57 -0800 |
| commit | a38d71b2e55711f547d468b0df641fc4488074d0 (patch) | |
| tree | f9eb2516aa1f24f816ac0e0fe9865247c8cc9b71 /gnu | |
| parent | 93551174af7a96d61f22f013ad1b9935106bf040 (diff) | |
gnu: librewolf: Update to 135.0-1 [security fixes].
New upstream version. Contains fixes for:
CVE-2025-1009: Use-after-free in XSLT
CVE-2025-1010: Use-after-free in Custom Highlight
CVE-2025-1018: Fullscreen notification is not displayed when
fullscreen is re-requested
CVE-2025-1011: A bug in WebAssembly code generation could result in a
crash
CVE-2025-1012: Use-after-free during concurrent delazification
CVE-2025-1019: Fullscreen notification not properly displayed
CVE-2025-1013: Potential opening of private browsing tabs in normal
browsing windows
CVE-2025-1014: Certificate length was not properly checked
CVE-2025-1016: Memory safety bugs fixed in Firefox 135, Thunderbird
135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird
115.20, and Thunderbird 128.7
CVE-2025-1017: Memory safety bugs fixed in Firefox 135, Thunderbird
135, Firefox ESR 128.7, and Thunderbird 128.7
CVE-2025-1020: Memory safety bugs fixed in Firefox 135 and Thunderbird
135
* gnu/packages/librewolf.scm (librewolf): Update to 135.0-1.
Change-Id: I7054fc9df31d59bb0d42e02b1f359cf3e6c1a43d
Diffstat (limited to 'gnu')
| -rw-r--r-- | gnu/packages/librewolf.scm | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 59c7e3a4a3a..e5e91fb91e8 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm | |||
| @@ -200,22 +200,23 @@ | |||
| 200 | ;;; but since in Guix only the latest packaged Rust is officially supported, | 200 | ;;; but since in Guix only the latest packaged Rust is officially supported, |
| 201 | ;;; it is a tradeoff worth making. | 201 | ;;; it is a tradeoff worth making. |
| 202 | ;;; 0: https://firefox-source-docs.mozilla.org/writing-rust-code/update-policy.html | 202 | ;;; 0: https://firefox-source-docs.mozilla.org/writing-rust-code/update-policy.html |
| 203 | (define rust-librewolf rust-1.81) | 203 | ;; 135.0 wants 1.83, but it's not available in Guix yet. |
| 204 | (define rust-librewolf rust-1.82) | ||
| 204 | 205 | ||
| 205 | ;; Update this id with every update to its release date. | 206 | ;; Update this id with every update to its release date. |
| 206 | ;; It's used for cache validation and therefore can lead to strange bugs. | 207 | ;; It's used for cache validation and therefore can lead to strange bugs. |
| 207 | ;; ex: date '+%Y%m%d%H%M%S' | 208 | ;; ex: date '+%Y%m%d%H%M%S' |
| 208 | (define %librewolf-build-id "20250121184331") | 209 | (define %librewolf-build-id "20250209210057") |
| 209 | 210 | ||
| 210 | (define-public librewolf | 211 | (define-public librewolf |
| 211 | (package | 212 | (package |
| 212 | (name "librewolf") | 213 | (name "librewolf") |
| 213 | (version "134.0.2-1") | 214 | (version "135.0-1") |
| 214 | (source | 215 | (source |
| 215 | (make-librewolf-source | 216 | (make-librewolf-source |
| 216 | #:version version | 217 | #:version version |
| 217 | #:firefox-hash "09yxacfcklgjqbqvcac32llwmlb16d9jhfp2mif9qs7s2gzvfvkc" | 218 | #:firefox-hash "0q5r2q6q56kyzl5pknrir9bzlhmzbvv9hi5gi4852izgcali4zl2" |
| 218 | #:librewolf-hash "1qa3crgazfvmsqx8dm0k78yk9cb11w1lf74x6x8ixjq5ifsdh1ws" | 219 | #:librewolf-hash "0fg4vji5xb17pgvq7jnfz4dq08gi0rl998xhj37hfm5zxs19y8jk" |
| 219 | #:l10n firefox-l10n)) | 220 | #:l10n firefox-l10n)) |
| 220 | (build-system gnu-build-system) | 221 | (build-system gnu-build-system) |
| 221 | (arguments | 222 | (arguments |
