diff options
| author | Mark H Weaver <mhw@netris.org> | 2025-05-26 13:51:17 -0400 |
|---|---|---|
| committer | Mark H Weaver <mhw@netris.org> | 2025-05-27 10:55:35 -0400 |
| commit | b868ae741e989d56dbaf8dd481c66a1c00e45e25 (patch) | |
| tree | cac76c488799472d347f4acb95d74953ff0663ac | |
| parent | c7d570ae7fe97a797e9f0b074090ccde50349086 (diff) | |
gnu: icecat: Update to 115.24.0-guix1 [security fixes].
Includes fixes for CVE-2025-5262, CVE-2025-5263, CVE-2025-5264, and
CVE-2025-5265.
* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
| -rw-r--r-- | gnu/packages/gnuzilla.scm | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index 6be5d3fe1d..c0b536ef05 100644 --- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -548,9 +548,9 @@ variable defined below. It requires guile-json to be installed." ;; XXXX: Workaround 'snippet' limitations. (define computed-origin-method (@@ (guix packages) computed-origin-method)) -(define %icecat-base-version "115.23.1") +(define %icecat-base-version "115.24.0") (define %icecat-version (string-append %icecat-base-version "-guix1")) -(define %icecat-build-id "20250519000000") ;must be of the form YYYYMMDDhhmmss +(define %icecat-build-id "20250527000000") ;must be of the form YYYYMMDDhhmmss ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat' @@ -570,12 +570,12 @@ variable defined below. It requires guile-json to be installed." "firefox-" upstream-firefox-version ".source.tar.xz")) (sha256 (base32 - "1q9fhfklg83fsd4pni2vwlkwlx2rp7zv4jv2rkxb3bngxbm2z59v")))) + "00229s39xidjzf7afpkyai9jz6ffqqcghn2wniraxyqa2rc5mfc1")))) ;; The upstream-icecat-base-version may be older than the ;; %icecat-base-version. - (upstream-icecat-base-version "115.23.1") - (gnuzilla-commit "f14d1533205b50f5804bb26b454ccdb38cc95c60") + (upstream-icecat-base-version "115.24.0") + (gnuzilla-commit "b1da0f01591182b43e179451ce2484d0fee88dd8") (gnuzilla-source (origin (method git-fetch) @@ -587,7 +587,7 @@ variable defined below. It requires guile-json to be installed." (string-take gnuzilla-commit 8))) (sha256 (base32 - "11as69sdivhg4a8s6mv9clk1l3wad1y7wdsvra9hivhnh112h0ph")))) + "1nrswd5g75wq8z997dilh2mxd0ssjrp1kp7v7l6x2gqmfiwa8r7h")))) ;; 'search-patch' returns either a valid file name or #f, so wrap it ;; in 'assume-valid-file-name' to avoid 'local-file' warnings. |