amaharaneko/guix-mirrors
1
1
Fork 0
mirror of https://codeberg.org/guix/guix.git synced 2025-10-02 02:15:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

gnu: icecat: Update to 115.23.0-guix1 [security fixes].

Browse source 
Includes fixes for CVE-2025-2817, CVE-2025-4082, CVE-2025-4083,
and CVE-2025-4084.

* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
This commit is contained in:
Mark H Weaver 2025-04-28 17:05:22 -04:00
parent 1b1230e534
commit bd92701ff8
No known key found for this signature in database
GPG key ID: 7CEF29847562C516
1 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
gnu/packages/gnuzilla.scm
View file

@ -548,9 +548,9 @@ variable defined below. It requires guile-json to be installed."
;; XXXX: Workaround 'snippet' limitations. ;; XXXX: Workaround 'snippet' limitations.
(define computed-origin-method (@@ (guix packages) computed-origin-method)) (define computed-origin-method (@@ (guix packages) computed-origin-method))
(define %icecat-base-version "115.22.0") (define %icecat-base-version "115.23.0")
(define %icecat-version (string-append %icecat-base-version "-guix1")) (define %icecat-version (string-append %icecat-base-version "-guix1"))
(define %icecat-build-id "20250401000000") ;must be of the form YYYYMMDDhhmmss (define %icecat-build-id "20250429000000") ;must be of the form YYYYMMDDhhmmss
;; 'icecat-source' is a "computed" origin that generates an IceCat tarball ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball
;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat' ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat'
@ -570,12 +570,12 @@ variable defined below. It requires guile-json to be installed."
"firefox-" upstream-firefox-version ".source.tar.xz")) "firefox-" upstream-firefox-version ".source.tar.xz"))
(sha256 (sha256
(base32 (base32
"1cq561ypsnr0qsxd29jj325i1w6rh7yv3b9avy1j3d8xmc3nayzm")))) "1xqzv6m9yk7lmld1dkg4p4kh04j7szsz6b1i17n5j9grglz8in2m"))))
;; The upstream-icecat-base-version may be older than the ;; The upstream-icecat-base-version may be older than the
;; %icecat-base-version. ;; %icecat-base-version.
(upstream-icecat-base-version "115.22.0") (upstream-icecat-base-version "115.23.0")
(gnuzilla-commit "541e7be30f8ccd36598ce46d815384eaccfe8c11") (gnuzilla-commit "e6eb57eaa1b8b262a7027f1c3a6f7bcf9a0dae00")
(gnuzilla-source (gnuzilla-source
(origin (origin
(method git-fetch) (method git-fetch)
@ -587,7 +587,7 @@ variable defined below. It requires guile-json to be installed."
(string-take gnuzilla-commit 8))) (string-take gnuzilla-commit 8)))
(sha256 (sha256
(base32 (base32
"08d8xv7hyn6s33kxpccbyxy0j3h4qk6bas6pmbn2pdn1281j8yw5")))) "1fyh0bbrv6r7n4kv5d0an2aiaav1j4dgnbvhvxsv2r60cjwssfbs"))))
;; 'search-patch' returns either a valid file name or #f, so wrap it ;; 'search-patch' returns either a valid file name or #f, so wrap it
;; in 'assume-valid-file-name' to avoid 'local-file' warnings. ;; in 'assume-valid-file-name' to avoid 'local-file' warnings.