From 34da76d609e0558f2faf94347fb4c148f57c8dbd Mon Sep 17 00:00:00 2001 From: Tomas Volf <~@wolfsden.cz> Date: Tue, 21 Jul 2026 21:47:57 +0200 Subject: nongnu: firefox: Update to 153.0.4 [security fixes]. Fixes CVE-2026-16349, CVE-2026-16350, CVE-2026-16351, CVE-2026-16352, CVE-2026-16353, CVE-2026-16354, CVE-2026-16355, CVE-2026-16356, CVE-2026-16357, CVE-2026-16358, CVE-2026-16359, CVE-2026-16360, CVE-2026-16362, CVE-2026-16363, CVE-2026-16364, CVE-2026-16365, CVE-2026-16366, CVE-2026-16367, CVE-2026-16368, CVE-2026-16369, CVE-2026-16370, CVE-2026-16371, CVE-2026-16372, CVE-2026-16373, CVE-2026-16374, CVE-2026-16375, CVE-2026-16376, CVE-2026-16377, CVE-2026-16378, CVE-2026-16379, CVE-2026-16380, CVE-2026-16381, CVE-2026-16382, CVE-2026-16383, CVE-2026-16384, CVE-2026-16385, CVE-2026-16386, CVE-2026-16387, CVE-2026-16388, CVE-2026-16389, CVE-2026-16390, CVE-2026-16391, CVE-2026-16392, CVE-2026-16393, CVE-2026-16394, CVE-2026-16395, CVE-2026-16396, CVE-2026-16397, CVE-2026-16398, CVE-2026-16399, CVE-2026-16400, CVE-2026-16401, CVE-2026-16402, CVE-2026-16403, CVE-2026-16404, CVE-2026-16405, CVE-2026-16406, CVE-2026-16407, CVE-2026-16408, CVE-2026-16409, CVE-2026-16410, CVE-2026-16411, CVE-2026-16412, CVE-2026-18809. * nongnu/packages/mozilla.scm (firefox): Update to 153.0.4. [source]: Sort. [native-inputs]: Do not replace rust-cbindgen. Signed-off-by: Jonathan Brielmaier --- nongnu/packages/mozilla.scm | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) (limited to 'nongnu') diff --git a/nongnu/packages/mozilla.scm b/nongnu/packages/mozilla.scm index 4f97cec..e359d53 100644 --- a/nongnu/packages/mozilla.scm +++ b/nongnu/packages/mozilla.scm @@ -526,26 +526,26 @@ Release (ESR) version.") ;; Update this id with every firefox update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. -(define %firefox-build-id "20260714035250") +(define %firefox-build-id "20260720102324") (define-public firefox (package (inherit firefox-esr) (name "firefox") - (version "152.0.6") + (version "153.0.4") (source (origin (method url-fetch) (uri (string-append "https://archive.mozilla.org/pub/firefox/releases/" version "/source/firefox-" version ".source.tar.xz")) (sha256 - (base32 "03hgcrhdc56qiy1f5b8ps2z7vc5fqk9xznp642mfvm0rim7hq8pa")) + (base32 "0j4a0ak5658n6iwgx4jc0agqlf1dc403p6qkrw23pfv69j987app")) (patches (nongnu-patches - "firefox-restore-desktop-files.patch" + "firefox-add-store-to-rdd-allowlist.patch" "firefox-compare-paths.patch" - "firefox-use-system-wide-dir.patch" - "firefox-add-store-to-rdd-allowlist.patch")) + "firefox-restore-desktop-files.patch" + "firefox-use-system-wide-dir.patch")) ;; XXX: 75 Mo (800+ Mo uncompressed) of unused tests. ;; Removing it makes it possible to compile on some systems. (modules '((guix build utils))) @@ -560,8 +560,7 @@ Release (ESR) version.") (native-inputs (modify-inputs native-inputs (replace "rust" rust-firefox) - (replace "rust:cargo" `(,rust-firefox "cargo")) - (replace "rust-cbindgen" rust-cbindgen-0.29))) + (replace "rust:cargo" `(,rust-firefox "cargo")))) (description "Full-featured browser client built from Firefox source tree, without the official icon and the name \"firefox\"."))) -- cgit v1.2.3