nongnu: firefox-esr: Update to 153.0esr [security fixes].

Fixes CVE-2026-15718, CVE-2026-15719, CVE-2026-16349, CVE-2026-16350,
CVE-2026-16351, CVE-2026-16352, CVE-2026-16353, CVE-2026-16354,
CVE-2026-16355, CVE-2026-16356, CVE-2026-16357, CVE-2026-16358,
CVE-2026-16359, CVE-2026-16360, CVE-2026-16361, CVE-2026-16362,
CVE-2026-16363, CVE-2026-16368, CVE-2026-16369, CVE-2026-16371,
CVE-2026-16374, CVE-2026-16375, CVE-2026-16377, CVE-2026-16379,
CVE-2026-16381, CVE-2026-16383, CVE-2026-16387, CVE-2026-16390,
CVE-2026-16391, CVE-2026-16396, CVE-2026-16405, CVE-2026-16412.

* nongnu/packages/mozilla.scm (firefox-esr): Update to 153.0esr.
[source]<patches>: Remove -esr, -ge-138 from patch names.  Sort.
[inputs]: Use icu4c-78, clang-19, rust-cbindgen-0.29.4.
(rust-cbindgen-0.29.4): New variable.
(firefox)[source]<patches>: Remove -ge-138 from patch name.
[inputs]: Drop icu4c replacement.
* nongnu/packages/patches/firefox-ge-138-compare-paths.patch: Rename from
this...
* nongnu/packages/patches/firefox-compare-paths.patch: ... to this.
* nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch,
nongnu/packages/patches/firefox-esr-use-system-wide-dir.patch: Delete files.
* nongnu/packages/wasm.scm (wasm32-wasi-clang-runtime): Inherit from
clang-runtime-19.
[native-inputs]: Use clang-19.
[inputs]: Use llvm-19.
(wasm32-wasi-clang) [base]: Use llvm-19.  Drop #:patches.
(wasm32-wasi-libcxx) [version]: Use llvm-19.
[arguments]<#:configure-flags>: Add -DLIBCXXABI_USE_LLVM_UNWINDER=OFF.

Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>

1 files changed, 0 insertions, 36 deletions

diff --git a/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch b/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch
deleted file mode 100644
index 4bdaa7d..0000000
--- a/nongnu/packages/patches/firefox-esr-add-store-to-rdd-allowlist.patch
+++ /dev/null
@@ -1,36 +0,0 @@
-diff --git a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
-index 4eff5e6..42171eb 100644
---- a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
-+++ b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
-@@ -476,6 +476,7 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() {
-   // Various places where fonts reside
-   policy->AddTree(rdonly, "/usr/X11R6/lib/X11/fonts");
-   policy->AddTree(rdonly, "/nix/store");
-+  policy->AddTree(rdonly, "/gnu/store");
-   // https://gitlab.com/freedesktop-sdk/freedesktop-sdk/-/blob/e434e680d22260f277f4a30ec4660ed32b591d16/files/fontconfig-flatpak.conf
-   policy->AddTree(rdonly, "/run/host/fonts");
-   policy->AddTree(rdonly, "/run/host/user-fonts");
-@@ -485,6 +486,7 @@ void SandboxBrokerPolicyFactory::InitContentPolicy() {
-   // Bug 1848615
-   policy->AddPath(rdonly, "/usr");
-   policy->AddPath(rdonly, "/nix");
-+  policy->AddPath(rdonly, "/gnu");
- 
-   AddLdconfigPaths(policy);
-   AddLdLibraryEnvPaths(policy);
-@@ -934,6 +936,7 @@ SandboxBrokerPolicyFactory::GetRDDPolicy(int aPid) {
-   policy->AddTree(rdonly, "/usr/lib64");
-   policy->AddTree(rdonly, "/run/opengl-driver/lib");
-   policy->AddTree(rdonly, "/nix/store");
-+  policy->AddTree(rdonly, "/gnu/store");
- 
-   // Bug 1647957: memory reporting.
-   AddMemoryReporting(policy.get(), aPid);
-@@ -1079,6 +1082,7 @@ SandboxBrokerPolicyFactory::GetUtilityProcessPolicy(int aPid) {
-   // Required to make sure ffmpeg loads properly, this is already existing on
-   // Content and RDD
-   policy->AddTree(rdonly, "/nix/store");
-+  policy->AddTree(rdonly, "/gnu/store");
- 
-   // glibc will try to stat64("/") while populating nsswitch database
-   // https://sourceware.org/git/?p=glibc.git;a=blob;f=nss/nss_database.c;h=cf0306adc47f12d9bc761ab1b013629f4482b7e6;hb=9826b03b747b841f5fc6de2054bf1ef3f5c4bdf3#l396