From c7d5be188434e5573269709cdb73a8b5d21a8d2c Mon Sep 17 00:00:00 2001 From: Tomas Volf <~@wolfsden.cz> Date: Tue, 19 May 2026 20:57:34 +0200 Subject: nongnu: firefox-esr: Update to 140.11.0esr [security fixes]. Fixes CVE-2026-8090, CVE-2026-8092, CVE-2026-8094, CVE-2026-8388, CVE-2026-8391, CVE-2026-8401, CVE-2026-8946, CVE-2026-8947, CVE-2026-8949, CVE-2026-8950, CVE-2026-8953, CVE-2026-8954, CVE-2026-8955, CVE-2026-8956, CVE-2026-8957, CVE-2026-8958, CVE-2026-8959, CVE-2026-8961, CVE-2026-8962, CVE-2026-8968, CVE-2026-8970, CVE-2026-8974, CVE-2026-8975. * nongnu/packages/mozilla.scm (firefox-esr): Update to 140.11.0esr. Signed-off-by: Jonathan Brielmaier --- nongnu/packages/mozilla.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/nongnu/packages/mozilla.scm b/nongnu/packages/mozilla.scm index 68a7420..a854cf2 100644 --- a/nongnu/packages/mozilla.scm +++ b/nongnu/packages/mozilla.scm @@ -88,19 +88,19 @@ ;; Update this id with every firefox update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. -(define %firefox-esr-build-id "20260428112555") +(define %firefox-esr-build-id "20260518115835") (define-public firefox-esr (package (name "firefox-esr") - (version "140.10.1esr") + (version "140.11.0esr") (source (origin (method url-fetch) (uri (string-append "https://archive.mozilla.org/pub/firefox/releases/" version "/source/firefox-" version ".source.tar.xz")) (sha256 - (base32 "1fx52y52c3dmgr5gm64x40r2n6zq5ckqiqsd6vlhsly5wb1w0xaf")) + (base32 "0a70qpx0grqyqxzdyaxdb2xcc5932dai05bsh0jdlvrm2whls0qv")) (patches (nongnu-patches "firefox-restore-desktop-files.patch" -- cgit v1.2.3