diff options
| author | Mark H Weaver <mhw@netris.org> | 2025-04-28 17:05:22 -0400 |
|---|---|---|
| committer | Mark H Weaver <mhw@netris.org> | 2025-04-29 13:26:10 -0400 |
| commit | bd92701ff8c7d91e426612fa4c62de72313cc84c (patch) | |
| tree | 125c5a87fe1ad0aef34202d4e125a6f69af650c4 | |
| parent | 1b1230e5340c860c19356ed20b48fc15268e9b30 (diff) | |
| download | guix-bd92701ff8c7d91e426612fa4c62de72313cc84c.tar.gz guix-bd92701ff8c7d91e426612fa4c62de72313cc84c.zip | |
gnu: icecat: Update to 115.23.0-guix1 [security fixes].
Includes fixes for CVE-2025-2817, CVE-2025-4082, CVE-2025-4083,
and CVE-2025-4084.
* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
| -rw-r--r-- | gnu/packages/gnuzilla.scm | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index 8ee6d6dfaf..4e38e94ff1 100644 --- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -548,9 +548,9 @@ variable defined below. It requires guile-json to be installed." ;; XXXX: Workaround 'snippet' limitations. (define computed-origin-method (@@ (guix packages) computed-origin-method)) -(define %icecat-base-version "115.22.0") +(define %icecat-base-version "115.23.0") (define %icecat-version (string-append %icecat-base-version "-guix1")) -(define %icecat-build-id "20250401000000") ;must be of the form YYYYMMDDhhmmss +(define %icecat-build-id "20250429000000") ;must be of the form YYYYMMDDhhmmss ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat' @@ -570,12 +570,12 @@ variable defined below. It requires guile-json to be installed." "firefox-" upstream-firefox-version ".source.tar.xz")) (sha256 (base32 - "1cq561ypsnr0qsxd29jj325i1w6rh7yv3b9avy1j3d8xmc3nayzm")))) + "1xqzv6m9yk7lmld1dkg4p4kh04j7szsz6b1i17n5j9grglz8in2m")))) ;; The upstream-icecat-base-version may be older than the ;; %icecat-base-version. - (upstream-icecat-base-version "115.22.0") - (gnuzilla-commit "541e7be30f8ccd36598ce46d815384eaccfe8c11") + (upstream-icecat-base-version "115.23.0") + (gnuzilla-commit "e6eb57eaa1b8b262a7027f1c3a6f7bcf9a0dae00") (gnuzilla-source (origin (method git-fetch) @@ -587,7 +587,7 @@ variable defined below. It requires guile-json to be installed." (string-take gnuzilla-commit 8))) (sha256 (base32 - "08d8xv7hyn6s33kxpccbyxy0j3h4qk6bas6pmbn2pdn1281j8yw5")))) + "1fyh0bbrv6r7n4kv5d0an2aiaav1j4dgnbvhvxsv2r60cjwssfbs")))) ;; 'search-patch' returns either a valid file name or #f, so wrap it ;; in 'assume-valid-file-name' to avoid 'local-file' warnings. |