diff options
author | Ian Eure <ian@retrospec.tv> | 2024-10-10 21:42:18 -0700 |
---|---|---|
committer | Hilton Chain <hako@ultrarare.space> | 2024-10-11 18:32:05 +0800 |
commit | a73a0a65542ce50249d9507777778ffd0eb659f7 (patch) | |
tree | 9a0cc693b006d2fa63099dd59ed2689847bed550 /gnu/packages | |
parent | cdb262e993a2ffdf49f7995cc12fa523d4578c05 (diff) | |
download | guix-a73a0a65542ce50249d9507777778ffd0eb659f7.tar.gz guix-a73a0a65542ce50249d9507777778ffd0eb659f7.zip |
gnu: librewolf: Update to 131.0.2-1 [security fixes].
Updates the package and changes how the .desktop file is generated. The
.desktop file the package had been using was removed upstream.
Fixes:
CVE-2024-9391: Prevent users from exiting full-screen mode in Firefox Focus
for Android
CVE-2024-9392: Compromised content process can bypass site isolation
CVE-2024-9393: Cross-origin access to PDF contents through multipart responses
CVE-2024-9394: Cross-origin access to JSON contents through multipart
responses
CVE-2024-9395: Specially crafted filename could be used to obscure download
type
CVE-2024-9396: Potential memory corruption may occur when cloning certain
objects
CVE-2024-9397: Potential directory upload bypass via clickjacking
CVE-2024-9398: External protocol handlers could be enumerated via popups
CVE-2024-9399: Specially crafted WebTransport requests could lead to denial of
service
CVE-2024-9400: Potential memory corruption during JIT compilation
CVE-2024-9401: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16,
Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3
CVE-2024-9402: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3,
Thunderbird 131, and Thunderbird 128.3
CVE-2024-9403: Memory safety bugs fixed in Firefox 131 and Thunderbird 131
CVE-2024-9680: Use-after-free in Animation timeline
* gnu/packages/librewolf.scm (%librewolf-build-id): Update.
(librewolf): Update to 131.0.2-1.
[arguments]<#:phases>: Adjust 'install-desktop-entry for new .desktop file.
Change-Id: I03f8a405c454a5bc3c8a1fc9f94d0ec9b41e92ec
Modified-by: Hilton Chain <hako@ultrarare.space>
Signed-off-by: Hilton Chain <hako@ultrarare.space>
Diffstat (limited to 'gnu/packages')
-rw-r--r-- | gnu/packages/librewolf.scm | 35 |
1 files changed, 13 insertions, 22 deletions
diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 31de7a7171..d696a3058f 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -212,18 +212,18 @@ ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20241005085731") +(define %librewolf-build-id "20241010143544") (define-public librewolf (package (name "librewolf") - (version "130.0.1-1") + (version "131.0.2-1") (source (origin (inherit (make-librewolf-source #:version version - #:firefox-hash "0w4z3fq5zhm63a0wmhvmqrj263bvy962dir25q3z0x5hx6hjawh2" - #:librewolf-hash "0f80pihn375bdjhjmmg2v1w96wpn76zb60ycy39wafwh1dnzybrd")))) + #:firefox-hash "05knnwfxqd3mb6a5y2yh73sn4g648dxnz9kpkmpj9madr55863h4" + #:librewolf-hash "1knx485kdjv8d0rn5ai1x1jp0403dvxz9m7lpim1y2d2ilyi26x7")))) (build-system gnu-build-system) (arguments (list @@ -619,31 +619,22 @@ (add-after 'wrap-program 'install-desktop-entry (lambda* (#:key outputs #:allow-other-keys) (let* ((desktop-file - "taskcluster/docker/firefox-snap/firefox.desktop") + "toolkit/mozapps/installer/linux/rpm/mozilla.desktop") (applications (string-append #$output "/share/applications"))) (substitute* desktop-file - (("^Exec=firefox") + (("^Exec=@MOZ_APP_NAME@") (string-append "Exec=" - #$output "/bin/librewolf")) - ;; "Firefox" -> "LibreWolf" everywhere - (("Firefox") + #$output "/bin/librewolf %u")) + (("@MOZ_APP_DISPLAYNAME@") "LibreWolf") - ;; Remove non-Latin translations. - (("^Name\\[(ar|bn)\\].*$") - "") - (("^Icon=.*") + (("@MOZ_APP_REMOTINGNAME@") + "LibreWolf") + (("^Icon=@MOZ_APP_NAME@") (string-append "Icon=" #$output - "/share/icons/hicolor/128x128/apps/librewolf.png -")) - ;; These commands were changed. - (("-NewWindow") - "-new-window") - (("-NewPrivateWindow") - "-new-private-window") - (("StartupNotify=true") - "StartupNotify=true\nStartupWMClass=LibreWolf")) + "/share/icons/hicolor/128x128/apps/librewolf.png"))) + (copy-file desktop-file "librewolf.desktop") (install-file "librewolf.desktop" applications)))) (add-after 'install-desktop-entry 'install-icons |