From unknown Sun Jun 22 22:41:23 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#66069 <66069@debbugs.gnu.org> To: bug#66069 <66069@debbugs.gnu.org> Subject: Status: Update Icecat to FF 102.15.1 to fix mfsa2023-40 Reply-To: bug#66069 <66069@debbugs.gnu.org> Date: Mon, 23 Jun 2025 05:41:23 +0000 retitle 66069 Update Icecat to FF 102.15.1 to fix mfsa2023-40 reassign 66069 guix-patches submitter 66069 "Dr. Arne Babenhauserheide" severity 66069 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Mon Sep 18 07:00:41 2023 Received: (at submit) by debbugs.gnu.org; 18 Sep 2023 11:00:41 +0000 Received: from localhost ([127.0.0.1]:52193 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qiBzd-0008Io-9H for submit@debbugs.gnu.org; Mon, 18 Sep 2023 07:00:41 -0400 Received: from lists.gnu.org ([2001:470:142::17]:43038) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qiBzY-0008IV-IY for submit@debbugs.gnu.org; Mon, 18 Sep 2023 07:00:39 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qiBzI-0001AO-Ub for guix-patches@gnu.org; Mon, 18 Sep 2023 07:00:20 -0400 Received: from mout.web.de ([212.227.15.4]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qiBzG-0001Ta-8A for guix-patches@gnu.org; Mon, 18 Sep 2023 07:00:20 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=s29768273; t=1695034814; x=1695639614; i=arne_bab@web.de; bh=vl3AX+pugG69irLXpzaBj1Mc8f/F7aFgvYGfid6ZFBM=; h=X-UI-Sender-Class:From:To:Subject:Date; b=JWHUowesj6whtSZ42Ui/xpjldp5DoAQYLfaKUtWWNZsMinh4MGCmiXRiJo+C3LEmllPlQQJ7AbJ CksRqeMSaIt3evBfp20CsmF7rrbT5yON/LJHhJ1DHApSCf+bQW1RCSP2a3wdOosPgK73pO2e+bVWq txbWjGCHIIklOlaUdlgjbG0nOU/kdaCzFnKDr4fjh73JyL/yOXVDPdOfq59kGMNpXUt6LS7nsMKeR 0JWz6WIrjYyajtrsMh9YwTCO9shvzl7fg2oFizg+bfcMxkh2RYllyoTqvdeipXMofbRPp2g7E+jPF 8Qk1xNnL2V/SszP2NoHu4kF8gNW+/bfdV/dg== X-UI-Sender-Class: 814a7b36-bfc1-4dae-8640-3722d8ec6cd6 Received: from fluss ([80.136.25.224]) by smtp.web.de (mrweb006 [213.165.67.108]) with ESMTPSA (Nemesis) id 1Melaj-1rIteF0nqf-00aWXz; Mon, 18 Sep 2023 13:00:14 +0200 User-agent: mu4e 1.10.5; emacs 29.0.92 From: "Dr. Arne Babenhauserheide" To: guix-patches@gnu.org Subject: Update Icecat to FF 102.15.1 to fix mfsa2023-40 Date: Mon, 18 Sep 2023 12:58:26 +0200 Message-ID: <877conrbk2.fsf@web.de> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="==-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Provags-ID: V03:K1:iekzZ7G/riLYhyFj4mV2NTywHoFbI1hagu2mCRXPij2jiszYwRb Wqo+KXn27MX9iOhDnEbzm8c0MBVnBXwPDqCDApQUpQS4bzXIKfHKtZ+G4joasKNoD35m//I OU8G8PdbRQ4fm5/xnsIeQYiiUTHc6lVp3kDsfncm7ZP3wHfIec0BcnljfJfMOMUfb4v+//w LqDb0tjBW8FTLmFP03B2Q== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:xaLQoHANOQw=;M77dE7qqhB33tFpCwitVYWRnTEL xkvPaAUGIEILRJEWP9cWh+2HIGAVUbyqmeHe4t4iPFyPGQHHfFZwmBPyw+U3irLTf9h65k0Lv bGYm7L2itqwD2JlhDw1lgMZbaOPZS4phT+HU73HGyHuDtVGiRihecHr6fR4iPvk7FP+qEvVib xn1iQ8w8hVsMLHqIVh99wJiwMINOU6/Q7yL6JbzTgmww4JVOtuclHR2721cri+/EiHpR+1aG8 7BE74aso0xLtofTAYb1D68rwUMTQ+6ttar1wxfLJ5QgP6Cjg/3ZkN8THVAEvRfybKKHCPNSFf eGLKgPJZBdACyr0khXXm6NP4VqrO6pZYuPCGuKIb7SUuNOCxrIELkuQi2EJL7940tlBU2t8SX SPTmvMLYGM3cTmON48TKEXPcDTn9lTYcWJ3c9llO6ZmS7hI3jwy43i5e94remHGFsD/FaqUT3 6mch5rE0mgGoO3XjpXgcCsWc9KfLfYAya8nFx6W7GQ8z5rAhe733cg73Ne/0fy5yyzgYL+Bx0 ABqkGicTlUOrNjwCdwynEGgcw2orBwCwCRr1nbqftEDGP0iuJUu5B0Nqk6Dbr7FXU8oLn8MFT OTRwAqbmiKp2e1ztQYoaHmgFFgUyEArl6itprnb+JDhsyl9ztdSA3XYuhghOoGeqWwJJxPUzJ ohMOwkjAkKODKcJk1NYesdVwagp5IQYLWeFU03PRdbYuhIIIcldH/VLz6Dq7ngvH8onkqvbRg lCSus/v0Vyp2PPjWvODm6OUUH+ArVu/0U7kMkrj7+Op99F4LVhXNMBvP+z/E5tykV/HkDp4O3 wr1hNzNKSLO5D35/I/slW6hWh84GzXO194hyCB+zZtDLL2CBbW93MpkPwLEyOjHG1yweO6aEb 35iSpvJhwMGtSbEeehBSYcN5IfHy1Qypi2NkYvJGtCg+uIqzUGICEis9vZyCmtoW/7MldR39Z TRyN3Sb5zUWyqo0nzas3gdHcBUE= Received-SPF: pass client-ip=212.227.15.4; envelope-from=arne_bab@web.de; helo=mout.web.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) --==-=-= Content-Type: multipart/mixed; boundary="=-=-=" --=-=-= Content-Type: text/plain Hi, the attached patch updates the base version of icecat to 102.15.1 to get the fix of the critical webp vulnerability in Firefox (and every other browser out there). --=-=-= Content-Type: text/x-patch Content-Disposition: inline; filename=0001-Update-icecat-to-FF-102.15.1-to-fix-mfsa2023-40.patch Content-Transfer-Encoding: quoted-printable From=2021a46f22b9b0d49e5d556e296716fc3b6db6b2e0 Mon Sep 17 00:00:00 2001 Message-ID: <21a46f22b9b0d49e5d556e296716fc3b6db6b2e0.1695034689.git.arne_b= ab@web.de> From: Arne Babenhauserheide Date: Mon, 18 Sep 2023 12:56:18 +0200 Subject: [PATCH] Update icecat to FF 102.15.1 to fix mfsa2023-40 * gnu/packages/gnuzilla.scm (%icecat-base-version): update to 102.15.1 to f= ix https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/ * gnu/packages/gnuzilla.scm (icecat-source): update upstream hash to 102.15= .1 =2D-- gnu/packages/gnuzilla.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index 6e2f9729cf..e700931d28 100644 =2D-- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -518,7 +518,7 @@ (define all-mozilla-locales ;; XXXX: Workaround 'snippet' limitations. (define computed-origin-method (@@ (guix packages) computed-origin-method)) =20 =2D(define %icecat-base-version "102.15.0") +(define %icecat-base-version "102.15.1") (define %icecat-version (string-append %icecat-base-version "-guix0-previe= w1")) (define %icecat-build-id "20230829000000") ;must be of the form YYYYMMDDhh= mmss =20 @@ -540,7 +540,7 @@ (define icecat-source "firefox-" upstream-firefox-version ".source.tar.xz")) (sha256 (base32 =2D "1bs6hxfsb77cbi238wvizq2iw4mlgz29m0sd027sz8zm1025kyl1")))) + "04q1fjninm9lw721xgv0c2fknicc24s8iaimkabwcfwmcnvly689")))) =20 ;; The upstream-icecat-base-version may be older than the ;; %icecat-base-version. base-commit: e2a7c227dea5b361e2ebdbba24b923d1922a79d0 prerequisite-patch-id: e26acb8280f31db9b663b6fc444a2229fc5b588e prerequisite-patch-id: db5cc62f7d04f3ed3014ae984fe732f3b6db8d17 prerequisite-patch-id: 3a0bf9ef6f27f1d92537c5e9ee5c38c7d6ced99e prerequisite-patch-id: 088a72da8c11e5d1c7087b4a5e8bb9c4a3b9b2af prerequisite-patch-id: 1b4787e17ec6ab62978615e1d3804a1024c5e1a0 prerequisite-patch-id: f814d9756faa5d91a68b81654606c66b4cf389e5 prerequisite-patch-id: f2dbed3e6da49472bd141c9fa40de2d2208130fb prerequisite-patch-id: 2dbf557994da4a264566b67294f7f3f8e2931f5f prerequisite-patch-id: 912a76fac540b98d5683ba1886a7d62f0963cd9f prerequisite-patch-id: f6a9bfd16b8952c73b7a6d97be70013a290815d7 prerequisite-patch-id: e50c1aaa1d401bba32a49d2e1fb1661746543d09 prerequisite-patch-id: 1f63cb516bc5c9772ae808371528006fca20dcad prerequisite-patch-id: 1ac04f0120fb6c4f106d05bee88103debb815b41 prerequisite-patch-id: eeff242fb5e41c8c83b3daadd0965e58eb6670ba prerequisite-patch-id: 3812c9ac1252d9d20e8485462be155156f302a54 prerequisite-patch-id: 9d3dd155c91ab334999c03fefab04f361ea4d8b5 prerequisite-patch-id: f5b09b934b65fe45bdfd1273baa3bb949ed52cca prerequisite-patch-id: 61a9b3943bdbe5cb6a4aa978888ceb64088f9a14 prerequisite-patch-id: 3f9d50361fb537607c33d09115366aec05160688 prerequisite-patch-id: 765c77b7c31f24491149665a066d2906f8da8d33 prerequisite-patch-id: 2b92c37e3aa74152a7aa226e1fbd5f2735037dc0 prerequisite-patch-id: 2a3123ab0786108f26e25c45fc4c545b99b6dd27 prerequisite-patch-id: 891a2458a90ea90113c576df5029514f5143366e prerequisite-patch-id: 1a08957a2fd3e3637ed7f3cf3f44c9f8194d6668 prerequisite-patch-id: d382210c915c0a809cb709cba45a4542d60c4d20 prerequisite-patch-id: d424ad2c4c4bf14becb025c67757f48d4a6ae6b5 prerequisite-patch-id: 07e1c90231819e0b963645b041522e53891fd344 prerequisite-patch-id: 124009dec6dad63add19bf258f71bdb127078ecb prerequisite-patch-id: 0afa33c8e0e2aca07da2782e04d259d3f8c498c5 prerequisite-patch-id: 205bb6c05a145eb9137e8623687418089351e73e prerequisite-patch-id: 7138f72403701b9749a0a587f1807030d730c00d prerequisite-patch-id: 39bd665160a5e62aaa4ea94ad2e3ca30f31e2127 prerequisite-patch-id: d5d0cdab2914d5d4b80f7e9e541c8f76b6e313d6 prerequisite-patch-id: 9b22cdb1bd10f6f0231168f7223d5b700830ad48 prerequisite-patch-id: cd1ddd3e6d24b1488271cfbdc28dc6619552306e prerequisite-patch-id: 8b5cef14cf4c6b27783c8f5ed9b8802bf11b15c5 =2D-=20 2.41.0 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Best wishes, Arne =2D-=20 Unpolitisch sein hei=C3=9Ft politisch sein, ohne es zu merken. draketo.de --=-=-=-- --==-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE801qEjXQSQPNItXAE++NRSQDw+sFAmUILb0QHGFybmVfYmFi QHdlYi5kZQAKCRAT741FJAPD68SeEADCwJe26/pEnuScyuWJwzafzLRV3uEmndRK hmg1D+IbReAzV8D3yA+3mOvYtPL1gC/tiUvStgi0K8Y+DkIzSXCd6vVf+QFuO+wm smT0yzfoO2OXEVAKQ5RfkHmkLpxB51rLyWqSb51unuBtHs1XR8SzOIuZfQ1pPAXR 9kY0URaXttY5hdmTWW2ovLzXehElMQIrTVczYjJMLkNPXbLkLb77cGIe5nMnOzuX PoQW6vJREcmEPM+n0P77yNsKuDsVgXJylk8SjqPCfyXGv6oO2Wg04IMvrlwAoJYS OkDaeIjrYJDa6h7B3X247CO8gQZiimJFzD46Y18I6jOFSf/FqMmYHVRV/dhmcFP2 Lues7BXqdaapbOf972Ye+lFJjaLXm+aH7duxj/d+n0NfsgdG4NYfuMuGRINBPLeK NzdrEjWfpr6jX56/+8pLkTMActHFw0F0Hi010r8YhihhAnmbLLgogRCqvwiyUs0H rqm++4mnZNp7k1FKK99Ql1X1TnsLKHnpoxvlJIWawTXq/gl5/n//mxg+TjG1f7Wi JVCbdE18fPiq/pQ16LeqGqK5Zd2He9amAqYNBnFo5x8H/XVFsqowd8b0cAEYoDr+ yJu/kSGqol4WS38UL8y8n9mlPKoOgIZvZ6vmcx2X2XiTcUM+j3xsCvrlpSJA1uuw m5JKcVkNF4jEBAEBCAAuFiEE3Si95tmHXKvOSosd3M8NswvBBUgFAmUILb0QHGFy bmVfYmFiQHdlYi5kZQAKCRDczw2zC8EFSHtJA/9Lji+MZ9P/Yw3Zk20rL1UJiNRp ezlTDyM0oWerJNIl1D0bKuQAlgS5z6MaP5FsZAU6z/nSigG+scE6ZOU68N5j48ua 7OMyJMEybPuLuC4It/5GPqg94dxUDNRvNbnfawpBin+plolxqYGdUTu9ho0I7NkL 0c2LnoKMon8ue3dcDg== =UP8Y -----END PGP SIGNATURE----- --==-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Mon Sep 18 10:29:07 2023 Received: (at 66069-done) by debbugs.gnu.org; 18 Sep 2023 14:29:07 +0000 Received: from localhost ([127.0.0.1]:53973 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qiFFL-0006bK-1Z for submit@debbugs.gnu.org; Mon, 18 Sep 2023 10:29:07 -0400 Received: from tobias.gr ([80.241.217.52]:48490) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qiFFH-0006b7-UG for 66069-done@debbugs.gnu.org; Mon, 18 Sep 2023 10:29:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=4eyr+G4Ni5SbQ V1gP3Dl/3h6TYbtI8OFpw7DsAHEgmA=; h=subject:to:from:date; d=tobias.gr; b=gUZk+cwMcJLb6khPZcu8Rtof09tEJOdQ0NlaXK6KBHj93hxUONbnEyWqccR5xxfkw5MP YR4mZS9tqgxUvquToBmSjPymzxBRgheAVKRPUgcr7b6DEz1EBKyfNQRV+GIPzXe6qiT5mT iNDHJz1zKjK17uFSnSRG2Xl7xX76e+QFBz3hfer3Pn4/4L091Um86jx++uBQN33H2XemeG fi1z2p8mqaZP+RUxNOoKI3qWVMs1JR0huyLEnX0Kr0tCqpSYuBSUybi3ADbvZhbVJr2DaF E+Gp3UPfW27zreqm/kNpUcJV4vzuZsITndRa529FGzXpcnO0LhT0Xul61T5qGYkQ== Received: by submission.tobias.gr (OpenSMTPD) with ESMTP id b430d25a for <66069-done@debbugs.gnu.org>; Mon, 18 Sep 2023 14:28:52 +0000 (UTC) MIME-Version: 1.0 Date: Mon, 18 Sep 2023 16:28:52 +0200 From: Tobias Geerinckx-Rice To: 66069-done@debbugs.gnu.org Subject: Re: Update Icecat to FF 102.15.1 to fix mfsa2023-40 Message-ID: <893375851d4f878347304511d552ada4@tobias.gr> Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 66069-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Arne, Pushed to master as 3d9ebc7b2ed24312fd6a0916c203f7b86d57753d, with the commit message edited to better respect our conventions: gnu: icecat: Update to 102.15.1 [security fixes]. This fixes fix mfsa2023-40, a critical webp vulnerability. See https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/ * gnu/packages/gnuzilla.scm (%icecat-base-version, icecat-source): Update to 102.15.1. Thanks for the prompt fix! T G-R Sent from a Web browser. Excuse or enjoy my brevity. From unknown Sun Jun 22 22:41:23 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Tue, 17 Oct 2023 11:24:10 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator