nongnu: firefox: Update to 138.0.4 [security fixes].

Fixes CVE-2025-4920, CVE-2025-4921.

* nongnu/packages/mozilla.scm (firefox): Update to 138.0.4.

Signed-off-by: Hilton Chain <hako@ultrarare.space>
This commit is contained in:
Tomas Volf 2025-05-18 00:29:37 +02:00 committed by Hilton Chain
parent f08390f988
commit 366eb8a5b3
No known key found for this signature in database
GPG key ID: ACC66D09CA528292

View file

@ -524,13 +524,13 @@ Release (ESR) version.")
;; Update this id with every firefox update to its release date. ;; Update this id with every firefox update to its release date.
;; It's used for cache validation and therefore can lead to strange bugs. ;; It's used for cache validation and therefore can lead to strange bugs.
(define %firefox-build-id "20250512230011") (define %firefox-build-id "20250517192316")
(define-public firefox (define-public firefox
(package (package
(inherit firefox-esr) (inherit firefox-esr)
(name "firefox") (name "firefox")
(version "138.0.3") (version "138.0.4")
(source (source
(origin (origin
(method url-fetch) (method url-fetch)
@ -546,7 +546,7 @@ Release (ESR) version.")
"firefox-ge-138-compare-paths.patch" "firefox-ge-138-compare-paths.patch"
"firefox-use-system-wide-dir.patch"))) "firefox-use-system-wide-dir.patch")))
(sha256 (sha256
(base32 "1r0kam26cz5rz39n6zcc2hrbav6dxlfrsa0qhhfjlnv33ns3lzx2")))) (base32 "0mjh2if31ibx68a66cvxh5sa20xb78gdn9wdw0wv745dinq0vlrz"))))
(arguments (arguments
(substitute-keyword-arguments (package-arguments firefox-esr) (substitute-keyword-arguments (package-arguments firefox-esr)
((#:phases phases) ((#:phases phases)