mirror of
https://gitlab.com/nonguix/nonguix.git
synced 2025-10-02 02:14:59 +00:00
b9d3169772
Fixes CVE-2025-2817, CVE-2025-4082, CVE-2025-4083, CVE-2025-4085, CVE-2025-4086, CVE-2025-4087, CVE-2025-4088, CVE-2025-4089, CVE-2025-4090, CVE-2025-4091, CVE-2025-4092. * nongnu/packages/patches/firefox-ge-138-compare-paths.patch: New file. * nongnu/packages/mozilla.scm (firefox): Update to 138.0. [source]: Use the new patch. [native-inputs]: Replace rust-cbindgen with rust-cbindgen-0.28. Signed-off-by: Hilton Chain <hako@ultrarare.space>
21 lines
1 KiB
Diff
21 lines
1 KiB
Diff
diff --git a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs
|
|
index 1b01851e2fff..7f3b8c200c2f 100644
|
|
--- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs
|
|
+++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs
|
|
@@ -3753,6 +3753,7 @@ export const XPIDatabaseReconcile = {
|
|
if (
|
|
newAddon ||
|
|
oldAddon.updateDate != xpiState.mtime ||
|
|
+ oldAddon.path != xpiState.path ||
|
|
(aUpdateCompatibility && this.isAppBundledLocation(installLocation)) ||
|
|
// update addon metadata if the addon in bundled into
|
|
// the omni jar and version or the resource URI pointing
|
|
@@ -3767,8 +3768,6 @@ export const XPIDatabaseReconcile = {
|
|
xpiState,
|
|
newAddon
|
|
);
|
|
- } else if (oldAddon.path != xpiState.path) {
|
|
- newAddon = this.updatePath(installLocation, oldAddon, xpiState);
|
|
} else if (aUpdateCompatibility || aSchemaChange) {
|
|
newAddon = this.updateCompatibility(
|
|
installLocation,
|