diff options
| author | Mark H Weaver <mhw@netris.org> | 2024-11-25 20:30:20 -0500 |
|---|---|---|
| committer | Mark H Weaver <mhw@netris.org> | 2024-11-26 13:13:50 -0500 |
| commit | 335f07eb47f7f900a6f11576ea6156c70b562208 (patch) | |
| tree | 478ab0dac8bb398dab1bbc12ab50958bb901213a | |
| parent | f8979b4bcc8772d02640f6f665b4195380d57df9 (diff) | |
| download | guix-335f07eb47f7f900a6f11576ea6156c70b562208.tar.gz guix-335f07eb47f7f900a6f11576ea6156c70b562208.zip | |
gnu: icecat: Update to 115.18.0-guix1 [security fixes].
Includes fixes for CVE-2024-11691 and CVE-2024-11694.
* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
(icecat-minimal)[native-inputs]: Use version 17 of llvm and clang.
| -rw-r--r-- | gnu/packages/gnuzilla.scm | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index 8a6c558c50..0ffc6f95c4 100644 --- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -533,9 +533,9 @@ variable defined below. It requires guile-json to be installed." ;; XXXX: Workaround 'snippet' limitations. (define computed-origin-method (@@ (guix packages) computed-origin-method)) -(define %icecat-base-version "115.17.0") +(define %icecat-base-version "115.18.0") (define %icecat-version (string-append %icecat-base-version "-guix1")) -(define %icecat-build-id "20241029000000") ;must be of the form YYYYMMDDhhmmss +(define %icecat-build-id "20241126000000") ;must be of the form YYYYMMDDhhmmss ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat' @@ -555,12 +555,12 @@ variable defined below. It requires guile-json to be installed." "firefox-" upstream-firefox-version ".source.tar.xz")) (sha256 (base32 - "1hqnswi799wwkl8q2z7hxgjz3r8bmy3dv1hy81sywhx70ahq9wc0")))) + "0k1lbkaf0qq6r96lxafg4jmkc3rbckj9akkgrkzipaiwfi7ify9a")))) ;; The upstream-icecat-base-version may be older than the ;; %icecat-base-version. - (upstream-icecat-base-version "115.17.0") - (gnuzilla-commit "a0b1a124e8e063a35389e1f20653047f37ca069b") + (upstream-icecat-base-version "115.18.0") + (gnuzilla-commit "21732b4ee88ac55f266cc1e83f2c98514eba9ae9") (gnuzilla-source (origin (method git-fetch) @@ -572,7 +572,7 @@ variable defined below. It requires guile-json to be installed." (string-take gnuzilla-commit 8))) (sha256 (base32 - "1c4ckxp93nqy9cyxikgyljp5phgdngrzk4z6qh51si30yqmzv8kj")))) + "0qqwa0gpv0v61mf7rkrv2sn2z2jrfaa4akgdmf5blfsa9yv8xz79")))) ;; 'search-patch' returns either a valid file name or #f, so wrap it ;; in 'assume-valid-file-name' to avoid 'local-file' warnings. @@ -776,8 +776,8 @@ variable defined below. It requires guile-json to be installed." rust `(,rust "cargo") rust-cbindgen - llvm-15 - clang-15 + llvm-17 + clang-17 perl node-lts python-wrapper |