gnu: librewolf: Update to 137.0.2-1. [security fixes]

CVE-2025-3608: Race condition in nsHttpTransaction could lead to
               memory corruption

* gnu/packages/librewolf.scm (librewolf): Update to 137.0.2-1.

Change-Id: I39023c324058bc369331eb165d34cf388029459f
This commit is contained in:
Ian Eure 2025-04-17 20:54:33 -07:00
parent 064f881047
commit 4fd529dce9
No known key found for this signature in database
GPG key ID: 8499AC88F1A71CF2

View file

@ -206,17 +206,17 @@
;; Update this id with every update to its release date. ;; Update this id with every update to its release date.
;; It's used for cache validation and therefore can lead to strange bugs. ;; It's used for cache validation and therefore can lead to strange bugs.
;; ex: date '+%Y%m%d%H%M%S' ;; ex: date '+%Y%m%d%H%M%S'
(define %librewolf-build-id "20250405165830") (define %librewolf-build-id "20250416062358")
(define-public librewolf (define-public librewolf
(package (package
(name "librewolf") (name "librewolf")
(version "137.0.1-1") (version "137.0.2-1")
(source (source
(make-librewolf-source (make-librewolf-source
#:version version #:version version
#:firefox-hash "1r0b5vfhqkw5vgf7bb0ylcw4vlg9mpfj96n8whfppj8r5rhah788" #:firefox-hash "01yd5cq6qgww6w2kq1bchy9j81blim15kdz7bvx8n512m2x3mz06"
#:librewolf-hash "0yry4k44wifi9h25h49krm05jbrs6bg9pa4vszv8af8dv5qm2bz0" #:librewolf-hash "0vy1xvjwgc4vd9q3laakx6lrsy4ghpdr98vm9lmx86amg9gak5ix"
#:l10n firefox-l10n)) #:l10n firefox-l10n))
(build-system gnu-build-system) (build-system gnu-build-system)
(arguments (arguments
@ -299,7 +299,7 @@
(libavcodec (string-append ffmpeg (libavcodec (string-append ffmpeg
"/lib/libavcodec.so"))) "/lib/libavcodec.so")))
;; Arrange to load libavcodec.so by its absolute file name. ;; Arrange to load libavcodec.so by its absolute file name.
(substitute* (substitute*
"dom/media/platforms/ffmpeg/FFmpegRuntimeLinker.cpp" "dom/media/platforms/ffmpeg/FFmpegRuntimeLinker.cpp"
(("libavcodec\\.so") (("libavcodec\\.so")
libavcodec))))) libavcodec)))))
@ -429,7 +429,7 @@
(string-append all ", icu-uc >= 76.1"))) (string-append all ", icu-uc >= 76.1")))
(if (string=? old-content (if (string=? old-content
(pk (call-with-input-file file get-string-all))) (pk (call-with-input-file file get-string-all)))
(error (error
"substitute did nothing, phase requires an update"))))) "substitute did nothing, phase requires an update")))))
(replace 'configure (replace 'configure
(lambda* (#:key inputs outputs configure-flags (lambda* (#:key inputs outputs configure-flags