From unknown Sun Jun 22 11:37:34 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#76869 <76869@debbugs.gnu.org> To: bug#76869 <76869@debbugs.gnu.org> Subject: Status: [PATCH 0/3] Update LibreWolf to 136.0-2 [security fixes] Reply-To: bug#76869 <76869@debbugs.gnu.org> Date: Sun, 22 Jun 2025 18:37:34 +0000 retitle 76869 [PATCH 0/3] Update LibreWolf to 136.0-2 [security fixes] reassign 76869 guix-patches submitter 76869 Ian Eure severity 76869 normal tag 76869 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 08 10:40:16 2025 Received: (at submit) by debbugs.gnu.org; 8 Mar 2025 15:40:16 +0000 Received: from localhost ([127.0.0.1]:56195 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tqwHg-0004lj-Cr for submit@debbugs.gnu.org; Sat, 08 Mar 2025 10:40:16 -0500 Received: from lists.gnu.org ([2001:470:142::17]:38798) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tqwHd-0004hP-L8 for submit@debbugs.gnu.org; Sat, 08 Mar 2025 10:40:14 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tqwHU-00072K-Q3 for guix-patches@gnu.org; Sat, 08 Mar 2025 10:40:05 -0500 Received: from fhigh-a2-smtp.messagingengine.com ([103.168.172.153]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tqwHS-0004t0-3I for guix-patches@gnu.org; Sat, 08 Mar 2025 10:40:03 -0500 Received: from phl-compute-13.internal (phl-compute-13.phl.internal [10.202.2.53]) by mailfhigh.phl.internal (Postfix) with ESMTP id D11E111400EA; Sat, 8 Mar 2025 10:39:58 -0500 (EST) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-13.internal (MEProxy); Sat, 08 Mar 2025 10:39:58 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm3; t=1741448398; x=1741534798; bh=2+gx3eafGu8sFiHLO/cb9 bnidl8q4LknGVBJkNCKrjc=; b=LDzXcxeGDNYAqJVYVlEUwFsZF3lo82td4GKkU P5M18omUSv0+RVddanVMPT4+gJZrDPcF9nkll+aRMboj/ZQgM5I/yh8a3jyOZgUg iHdztH7/7DF6ifBGM6hUXBcDknTzLvY5GVXSjOdXWbd/gXixZwCQTwzaW78fx1fs trdZqBizr50f79q09OKSCxeJ/Kh/NwggyZU8CU4+SskQvRlI8XRVLG/PVHZlIdPz +sJV9kWG4w7exozB5coluCSLImhFTRaCr/sl0FKNQDsDQcRs8de24y/0s5iC/YHA SNSPRkSVd3iFMgjK8w+Sb9WXrsmuLEzPhDgZCaFtj2W0r/1dw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1741448398; x=1741534798; bh=2+gx3eafGu8sFiHLO/cb9bnidl8q4LknGVB JkNCKrjc=; b=hSUb4SKdW71XuTYhHsHM//jGbKTXjdSx2cF8XprLo3ymUfd4w5f OetKDV7S3nX5hHklpyciQ2iO1WkRo3+O2l3oymJLQMYHKWeZHkbbFYytENTQKbe4 2D5L6sk3QQKMdDkhh9Y+BI2wG54ImkebMIbxnZ1u7WyQw2keiKk/D7hvMk3Wh3uc h6FosF1qmib6l/vJ8uwe/FKS3eSKxVg8Mkqzf7DF0Dc+OFxRrdlhQzCeb5OYjXeq 9JNntz7mKvTFVUzQgwbd4yBui8Vhp7iVYHco4pcF5umFLkAvNJ+ib7ipaW6Zntyu gz0CkKSn5xg/Ic9SnoOLAteplJVNn3fjOuA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduudefleefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhephfeiveeliedukeffhe fhleeijedtveelleetgefggfehkeeljeehtdeguddvvefgnecuvehluhhsthgvrhfuihii vgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrth hvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehg uhhigidqphgrthgthhgvshesghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrh hoshhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 8 Mar 2025 10:39:57 -0500 (EST) From: Ian Eure To: guix-patches@gnu.org Subject: [PATCH 0/3] Update LibreWolf to 136.0-2 [security fixes] Date: Sat, 8 Mar 2025 07:39:54 -0800 Message-ID: <20250308153954.5863-1-ian@retrospec.tv> X-Mailer: git-send-email 2.48.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=103.168.172.153; envelope-from=ian@retrospec.tv; helo=fhigh-a2-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.7 (/) X-Debbugs-Envelope-To: submit Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) More complex update than usual. - LW now requires nss >= 3.108. Update nss-rapid to 3.109. - LW now requires libpng-apng >= 1.6.46. libpng is very low in the graph and needs to build on a branch. #76798 updates it in core-packages-team, I added libpng-for-librewolf in the meantime. - LW now needs icu4c >= 76.1, updated in #76750. There's also a bug with this, which requires a workaround until (presumably) 136.0.1-1. - Update firefox-l10n to the current HEAD. gnu/packages/librewolf.scm | 62 ++++++++++++++++++++++++++++++++------ gnu/packages/nss.scm | 6 ++-- 2 files changed, 56 insertions(+), 12 deletions(-) -- 2.48.1 From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 08 12:40:24 2025 Received: (at 76869) by debbugs.gnu.org; 8 Mar 2025 17:40:24 +0000 Received: from localhost ([127.0.0.1]:56672 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tqy9v-0003DU-Ok for submit@debbugs.gnu.org; Sat, 08 Mar 2025 12:40:24 -0500 Received: from fhigh-a3-smtp.messagingengine.com ([103.168.172.154]:55407) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tqy9s-0003D1-Q7 for 76869@debbugs.gnu.org; Sat, 08 Mar 2025 12:40:21 -0500 Received: from phl-compute-13.internal (phl-compute-13.phl.internal [10.202.2.53]) by mailfhigh.phl.internal (Postfix) with ESMTP id 912A01140136; Sat, 8 Mar 2025 12:40:15 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-13.internal (MEProxy); Sat, 08 Mar 2025 12:40:15 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm3; t=1741455615; x= 1741542015; bh=+et9y3k9OHteWhHWSwzXPy8pA4dnF17OWps+2EoyrEY=; b=S u+Gvssdgmp/OmoAWKDEKueceprQSShrUVFQg/QUCiQyUcxZjGDp2ggcnVdmScC06 YlTsMjtOJvUiHdtg4/oLxZMpciwIBmtLqjqEw8ejiSV0+/j4hP/n3I44S0fqJ96R aWAzzyH4XomEsV8pGzw7dyxCpPeK4slwIKhBx9J6ZpHGNl7cAznH+vdjpGXA0KIU 281QtIqKZ7p49wTlbjVdUbLNFb0OuMm/N8RwUMfyvFEfD8lVpIln89YKytFTYBVW /qKKO3V7/veL0ghbiDfHUuN9riJc0MArvNeYqOfSpQO09P1trwPyIN8AiSflXwUr 2Wk4wALtzBsMy6q1VtEZw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; t=1741455615; x=1741542015; bh=+ et9y3k9OHteWhHWSwzXPy8pA4dnF17OWps+2EoyrEY=; b=jECH1ZTbnFEDX+LiD HnJ5Yv54MsRZEZLsACXA87GIdhK1Q/TiWZl61Qs7gkt4H45EAngYxGqBI66Gg1XC gleS7iUk33XP2CE0gWw6YpQhxQnEnoNfEufM4kYcIuPemOUow2jDmRdz4Sng3du0 0Jk/XHAKUGHH3GGEXzieRIsEoAG6LQI64ziHmOuAuoiB9kkGV404D1ImcHh5FKVX vtLw1Jr0qMQk7OV1SkabgXEO0f4KDPAYCDfR+VKbvvwrzJxUI2sox/+BMMbHl0My GO0eXnCp8abR7GCubupJLstOIKKHa6tKvt97KsN3sMm3h5XA41A1PbpKp+GozCNu 89rKQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduudegudejucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepvdeugeduveefge ehvddthefgjeevvddvtefgheegtdfgueeitdehgfduffevjeeinecuffhomhgrihhnpehg ihhthhhusgdrtghomhenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrih hlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspghrtghpthhtohepvddp mhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeeikeeileesuggvsggsuhhgshdrgh hnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhhoshhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 8 Mar 2025 12:40:14 -0500 (EST) From: Ian Eure To: 76869@debbugs.gnu.org Subject: [PATCH 2/3] gnu: firefox-l10n: Update to 24e2602d2221646fbbe92e908bed0d605acd2e8a. Date: Sat, 8 Mar 2025 09:40:09 -0800 Message-ID: <20250308174010.21764-2-ian@retrospec.tv> X-Mailer: git-send-email 2.48.1 In-Reply-To: <20250308174010.21764-1-ian@retrospec.tv> References: <20250308174010.21764-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 76869 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/librewolf.scm (firefox-l10n): Update to 24e2602d2221646fbbe92e908bed0d605acd2e8a. Change-Id: I32c4748b6d76c21cf1e4dadbb0859cb55fb9a2ef --- gnu/packages/librewolf.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 2a4bf3fada..7a356b6d91 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -117,14 +117,14 @@ (define (librewolf-source-origin version hash) (define computed-origin-method (@@ (guix packages) computed-origin-method)) (define firefox-l10n - (let ((commit "d219efa7c64850dfb5904893e17a5431c7058192")) + (let ((commit "24e2602d2221646fbbe92e908bed0d605acd2e8a")) (origin (method git-fetch) (uri (git-reference (url "https://github.com/mozilla-l10n/firefox-l10n.git") (commit commit))) (file-name (git-file-name "firefox-l10n" commit)) - (sha256 (base32 "0g778fnxg5mkqm3rgryzl64f3n4pczngjdlby07vh2dycvmlyga8"))))) + (sha256 (base32 "1xnldwgldls07m5hmm9wnln6g2vcar5w4k4918qkmakldaw6ang0"))))) (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) (let* ((ff-src (firefox-source-origin -- 2.48.1 From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 08 12:40:24 2025 Received: (at 76869) by debbugs.gnu.org; 8 Mar 2025 17:40:24 +0000 Received: from localhost ([127.0.0.1]:56674 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tqy9w-0003DX-4n for submit@debbugs.gnu.org; Sat, 08 Mar 2025 12:40:24 -0500 Received: from fout-a8-smtp.messagingengine.com ([103.168.172.151]:34347) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tqy9s-0003Cz-DY for 76869@debbugs.gnu.org; Sat, 08 Mar 2025 12:40:21 -0500 Received: from phl-compute-06.internal (phl-compute-06.phl.internal [10.202.2.46]) by mailfout.phl.internal (Postfix) with ESMTP id 9737B1381139; Sat, 8 Mar 2025 12:40:14 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-06.internal (MEProxy); Sat, 08 Mar 2025 12:40:14 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm3; t=1741455614; x=1741542014; bh=33ojp8eWBjSlPe++8C4Vn d6KsW2C40Gwb7/V5It90XI=; b=MHvVLkHUfRE0q+DXnqLZxY98UYo3RPkM05Ei+ aLk/DqvKnDOInbUSJaOjYsrOxzqX0v3NNp5WKksxfjwd5C15MAqPzNQdV7jO60QN dhHsbHqkd1ZhL4nY/bi2p42nJS/aSRGRqbU34I9Xt35ZoaOpxzRztS4FGXP5COCX YOmVEzvAcM4KYsDlzL+WpUzpalo+OJCPVwfu7PGbR1u3TtKrp093OlrTN5WkOlHs KrFTw6m1UUQJq2RYb1VCl1epHl7IR2T3Xw/JKHKBxzttMbonCFboZELNeOWR48rm 0b0PxZ4s4iYJSX/PU+ZsobGQ9sF8M8d+3oiU0+wGfOJwN+cSA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1741455614; x=1741542014; bh=33ojp8eWBjSlPe++8C4Vnd6KsW2C40Gwb7/ V5It90XI=; b=r/THvpC/xzonQhMKvfwlOLmsxZr2+ZRgiyk5+yIdPUzx+wR4STP OpA4NKO39PbSncrvaY31suZieHn9m95+rpvBNvitIy2CfcHkydkW+mmwyqNpkMx/ 8LSeV39x83JA0d7UexJemrilzucgM6leuB/UG0Ne7OKQL5P+oodBjlhzQqF/m4Zd yNLCwzbLCLsWs3prP+0v2+T2Y8qtOiiTwy2/Tle3/19Euwnyl6So6brjxhJELv2X GG5b5C/rfWgeD4OzNy9OloXM9ydFzypmCcIgVs2HhEIZMw3opQCdtPsOYWrnNKSk JlnS1g1iq9KHEDTU/mVQExoGoXBm3JYaIcg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduudegudekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfdvjefhlefhfedtie elleefvdfhfeffteefueetlefgvdelffelvefgfeeukeejnecuffhomhgrihhnpehmohii ihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhm ohguvgepshhmthhpohhuthdprhgtphhtthhopeejieekieelseguvggssghughhsrdhgnh hurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 8 Mar 2025 12:40:13 -0500 (EST) From: Ian Eure To: 76869@debbugs.gnu.org Subject: [PATCH 1/3] gnu: nss-rapid: Update to 3.109. Date: Sat, 8 Mar 2025 09:40:08 -0800 Message-ID: <20250308174010.21764-1-ian@retrospec.tv> X-Mailer: git-send-email 2.48.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 76869 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nss-rapid): Update to 3.109. Change-Id: I6afa0f9ab714aa26dcd17c6526e4b95be07b9eb9 --- gnu/packages/nss.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 9b5d901063..8bcb593ed7 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -334,7 +334,7 @@ (define-public nss-rapid (package (inherit nss) (name "nss-rapid") - (version "3.107") + (version "3.109") (source (origin (inherit (package-source nss)) (uri (let ((version-with-underscores @@ -345,7 +345,7 @@ (define-public nss-rapid "nss-" version ".tar.gz"))) (sha256 (base32 - "0ab7kpyg54aha86aw0ak70ckmfj1ih7d9x8mlrqhf59q7r3rczkz")))) + "12y156frnhaqvwkla1c07gqr2lnp4yb3619g4088kk8qc4jnr95y")))) (arguments (substitute-keyword-arguments (package-arguments nss) ((#:phases phases) @@ -377,7 +377,7 @@ (define-public nss-rapid ;; leading to test failures: ;; . To ;; work around that, set the time to roughly the release date. - (invoke "faketime" "2024-11-29" "./nss/tests/all.sh")) + (invoke "faketime" "2025-03-01" "./nss/tests/all.sh")) (format #t "test suite not run~%")))))))) (synopsis "Network Security Services (Rapid Release)") (description -- 2.48.1 From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 08 12:40:30 2025 Received: (at 76869) by debbugs.gnu.org; 8 Mar 2025 17:40:30 +0000 Received: from localhost ([127.0.0.1]:56676 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tqyA1-0003Dq-JE for submit@debbugs.gnu.org; Sat, 08 Mar 2025 12:40:30 -0500 Received: from fout-a8-smtp.messagingengine.com ([103.168.172.151]:39503) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tqy9t-0003D3-QP for 76869@debbugs.gnu.org; Sat, 08 Mar 2025 12:40:22 -0500 Received: from phl-compute-08.internal (phl-compute-08.phl.internal [10.202.2.48]) by mailfout.phl.internal (Postfix) with ESMTP id 9FCFE138114B; Sat, 8 Mar 2025 12:40:16 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-08.internal (MEProxy); Sat, 08 Mar 2025 12:40:16 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm3; t=1741455616; x= 1741542016; bh=gor+TGpcrIaOShOgPYWi/kdtxwPvWgxZl1J2CZGYZBI=; b=I pZPeux5seX47sZBfqKESakpjbSgRcZvEc45GgTSSeFTsk2puqGMDMqxv+42WidVx J2cOxna7NOtNlzdKOxcMsdEHLw5ejVTWgFbzw7x9Ow2Z5DHsjUg8be/ht1HfYeu/ i6K3kTCoZKugY7i7Jn/LjJhI0RhZJ/8tkMLbQezTaV0a/Lt/J0ggBQhagouCQ866 uHFPX0+d4XMjwvbXbUgfP0+MqIGwH3pZVrCpxT8aQ6x0QINRpysoW1wbcwkSPWLq 9cEmC19qNqnxRAh4/YoIuMb0ZGFvNPhxsZulEX+Rm3pNmBwEd9C2my9dsJmbwe5u eizffyJyZ2vITgDes4Ayw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; t=1741455616; x=1741542016; bh=g or+TGpcrIaOShOgPYWi/kdtxwPvWgxZl1J2CZGYZBI=; b=LUUrwJikU8V3efmu5 bi+RyRJcFGbtOkQi5/VHfvoLeAH0G5T/B3nksYlJHU7H519ICsTaTjJ3f5LN0xJR u7ANCJqwDDfieoZhGjjEUodq7nJNEXafBC1ec05IPfKhkwjkTyUHBvpSqwYcumkM aax03UM9cdgLXkdncnKJ2eA9IYDsoaWPkZQGiO4YZOrftLkeVb175kjCbVe3ImXl F3CIphzCjOrhM2VhIawOcRqZ30LSTUutGifRNRr2Y1TkMkL6TkwEapqUfmFa/pch Sn5QoOCOMyeOLBcTOeI8RoBzHnAG/cJAr2Rs3wrYMf13EdIfVv5hDOpvlneUBiaa BQBqg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduudegudekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgeehieeivdefgf ffvdektedthfejtdeguedvvddtfeevfeelvdffvdefjefgtddunecuffhomhgrihhnpehm ohiiihhllhgrrdhorhhgpdhsihhmphhlvghshihsthgvmhhsrdhorhhgnecuvehluhhsth gvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhs phgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtph htthhopeejieekieelseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgr nhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 8 Mar 2025 12:40:15 -0500 (EST) From: Ian Eure To: 76869@debbugs.gnu.org Subject: [PATCH 3/3] gnu: librewolf: Update to 136.0-2 [security fixes]. Date: Sat, 8 Mar 2025 09:40:10 -0800 Message-ID: <20250308174010.21764-3-ian@retrospec.tv> X-Mailer: git-send-email 2.48.1 In-Reply-To: <20250308174010.21764-1-ian@retrospec.tv> References: <20250308174010.21764-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 76869 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free in the Browser process CVE-2025-1939: Tapjacking in Android Custom Tabs using transition animations CVE-2025-1931: Use-after-free in WebTransportChild CVE-2025-1932: Inconsistent comparator in XSLT sorting led to out-of-bounds access CVE-2025-1933: JIT corruption of WASM i32 return values on 64-bit CPUs CVE-2025-1940: Android Intent confirmation prompt tapjacking using Select options CVE-2024-9956: Passkey phishing within Bluetooth range CVE-2025-1934: Unexpected GC during RegExp bailout processing CVE-2025-1941: Lock screen setting bypass in Firefox Focus for Android CVE-2025-1942: Disclosure of uninitialized memory when .toUpperCase() causes string to get longer CVE-2025-1935: Clickjacking the registerProtocolHandler info-bar CVE-2025-1936: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents CVE-2025-1937: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 CVE-2025-1938: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 CVE-2025-1943: Memory safety bugs fixed in Firefox 136 and Thunderbird 136 * gnu/packages/librewolf.scm (librewolf): Update to 136.0-2. Change-Id: Ia3b5777478fa8443471bd1e61898128cdeda4bcf --- gnu/packages/librewolf.scm | 58 +++++++++++++++++++++++++++++++++----- 1 file changed, 51 insertions(+), 7 deletions(-) diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 7a356b6d91..f65e8bc69f 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -200,23 +200,56 @@ (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) ;;; but since in Guix only the latest packaged Rust is officially supported, ;;; it is a tradeoff worth making. ;;; 0: https://firefox-source-docs.mozilla.org/writing-rust-code/update-policy.html -;; 135.0 wants 1.83, but it's not available in Guix yet. +;; 136.0 wants 1.84, but it's not available in Guix yet. (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250209210057") +(define %librewolf-build-id "20250306064037") + +;; Temporary, until 76798 merges into core-packages-team, and that merges into +;; master. +(define libpng-apng-for-librewolf + (hidden-package + (package + (inherit libpng-apng) + (version "1.6.46") + (source + (origin + (method url-fetch) + (uri (list (string-append "mirror://sourceforge/libpng/libpng16/" + version "/libpng-" version ".tar.xz") + (string-append + "ftp://ftp.simplesystems.org/pub/libpng/png/src" + "/libpng16/libpng-" version ".tar.xz") + (string-append + "ftp://ftp.simplesystems.org/pub/libpng/png/src/history" + "/libpng16/libpng-" version ".tar.xz"))) + (sha256 + (base32 + "1cbwf20zlm4gcv8rpjivkngrjgl5366w21lr9qmbk2lr0dq8papk")))) + (inputs + (modify-inputs (package-inputs libpng-apng) + (replace "apng" + (origin + (method url-fetch) + (uri + (string-append "mirror://sourceforge/libpng-apng/libpng16/" + version "/libpng-" version "-apng.patch.gz")) + (sha256 + (base32 + "00ykl1bzb79xsjwrq7dl0yz9dz5g3zwj0lry5zam3vs6s3gw5gi9"))))))))) (define-public librewolf (package (name "librewolf") - (version "135.0-1") + (version "136.0-2") (source (make-librewolf-source #:version version - #:firefox-hash "0q5r2q6q56kyzl5pknrir9bzlhmzbvv9hi5gi4852izgcali4zl2" - #:librewolf-hash "0fg4vji5xb17pgvq7jnfz4dq08gi0rl998xhj37hfm5zxs19y8jk" + #:firefox-hash "0mvg53fr9zi6pq2pwa6qzqi88brqig1wlzic9sz52i4knx733viv" + #:librewolf-hash "0zb5f6hml7nmyf8hms66s07ba97x2px2hgqqi4lmwr5hm9mf942z" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -392,6 +425,17 @@ (define (write-setting key value) (lambda _ (setenv "MOZ_BUILD_DATE" #$%librewolf-build-id))) + ;; https://bugzilla.mozilla.org/show_bug.cgi?id=1927380 + (add-before 'configure 'patch-icu-lookup + (lambda _ + (let* ((file "js/moz.configure") + (old-content (call-with-input-file file get-string-all))) + (substitute* file + (("icu-i18n >= 76.1" all) + (string-append all ", icu-uc >= 76.1"))) + (if (string=? old-content + (pk (call-with-input-file file get-string-all))) + (error "substitute did nothing, phase requires an update"))))) (replace 'configure (lambda* (#:key inputs outputs configure-flags #:allow-other-keys) @@ -671,7 +715,7 @@ (define (runpaths-of-input label) gtk+ gtk+-2 hunspell - icu4c-75 + icu4c-76 jemalloc libcanberra libevent @@ -679,7 +723,7 @@ (define (runpaths-of-input label) libgnome libjpeg-turbo libnotify - libpng-apng + libpng-apng-for-librewolf libva libvpx libwebp -- 2.48.1 From debbugs-submit-bounces@debbugs.gnu.org Tue Mar 11 23:39:52 2025 Received: (at 76869) by debbugs.gnu.org; 12 Mar 2025 03:39:53 +0000 Received: from localhost ([127.0.0.1]:46705 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tsCwi-0003lj-EK for submit@debbugs.gnu.org; Tue, 11 Mar 2025 23:39:52 -0400 Received: from mail-qv1-xf2e.google.com ([2607:f8b0:4864:20::f2e]:53521) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1tsCwf-0003lQ-0B for 76869@debbugs.gnu.org; Tue, 11 Mar 2025 23:39:49 -0400 Received: by mail-qv1-xf2e.google.com with SMTP id 6a1803df08f44-6e8f8657f29so47345436d6.3 for <76869@debbugs.gnu.org>; Tue, 11 Mar 2025 20:39:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1741750783; x=1742355583; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=d809uBuSA9iC6z54Gu7zId3NBO4bT+vtHoe771jMbkw=; b=UZZSUhDe3SeGbHzWejruUN99ljmqF4wTcrfhbEnSgfmaXPTTyR5Bv5IDWv9kUQTBAw CMQoBB15JzI7ND+1h8vxrcYhti6TqUD9llg2jdssCZOFq4zsTPUhIAC47HZ2aeakeIR0 TdNUeMLHIL67CWJQ4hvMZ0LxqGFW9AvbvfYIdCVGuEsEzRtGV9wlcNhyPsSnXyMWMNnm 8mFDiVM3mT1J3NAY3GMoqoOlJ3dKev2+o5x7uMemQwOaVHiqIECzoinV9K0bMSiuvHeH IlqwQH4LzGtYitOzLZ5uNiwslnHEL+bn9IkRTgPUGf037eGDZsAmEDAoJvGK5E4RRXZV p90A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1741750783; x=1742355583; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=d809uBuSA9iC6z54Gu7zId3NBO4bT+vtHoe771jMbkw=; b=w3PARvFC728IGC+sSbfmEqP5jgaRHQuQ+psJh87H/CsOkwzqpcLWD7Ps5Na9eajHic Clh86b6fCGieyn9DueX3Fl3ywzCCZXBVGtOKEG6921U9Yf4XCHvT33psK9+EGesLkvaf wdw2Pyq33TlxgvVqjEankZLGnwmYLVVv+rGOT8/lDN8vS7WJ8TJ0hUbvI3TF5zMAjWKG i0QBv/PEXnn8s6lxdet8ycFHZfy2O88Y2q+XBs/y821ukfXb49MIMDkxa63d6BAiTqBO 9n6VpuzIEJI/3MgwzA18HCJ+zBddFGHok4L7XvGMJ+RPo/ZeESQIszLDt7nSrmfgtU1H QWsA== X-Gm-Message-State: AOJu0YxuMS9n4irvUDiH8p5ufl5VaWuuO8n/lekIzY1GyR740GwVQXKL u/X8xWys4owtBTj84fxOUPn+Wv37BwzH867LkCnQ62wIuSsHmu8m35LV84hUgF0= X-Gm-Gg: ASbGncvnZmMXYn9zJLsD2JFvAuZJVJB0y4NwLzdLk8YKVBIWc6cdTWRiMVY0SSFrY2b 5avTmcJ9/z1QypQ7ISIeN2LAs6/bkKzdET50ILySiM4bHpe/eY4Gde8Q/br9mmKrkG+fcOu0Hlt Gm+8cEqBB6EvjWEpdqryLbN5wisOTSoFfK6Id+lL2iP8S+vbg6/wfooNSQCwPy4Vd/kjtXRceXX 6GTkRiABcbn07erkRn0yMGEJg5VmjVVJWISkqU4LC3hhR76iD1fDitI0O1unLOLIj9G8jS3QDTk ETdcdV3b98rZbxb5Q9zQXajML4u7yfygHjkyl1GthaoPaOSXejXNfsQFw2JFYtF1ew== X-Google-Smtp-Source: AGHT+IHOspCwbslDsuN5kk/Uy3DJ6R8T4M1PXT7uUOU/TsrFhnb56O5Dz82I7uBzAwUyA0BWyB7WfQ== X-Received: by 2002:ad4:5c8e:0:b0:6d8:8d16:7cec with SMTP id 6a1803df08f44-6e9006cb8d5mr316091486d6.37.1741750782482; Tue, 11 Mar 2025 20:39:42 -0700 (PDT) Received: from terra (vps-6234970c.vps.ovh.ca. [51.222.13.224]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6e8f707c381sm79496536d6.9.2025.03.11.20.39.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 11 Mar 2025 20:39:41 -0700 (PDT) From: Maxim Cournoyer To: Ian Eure Subject: Re: [bug#76869] [PATCH 3/3] gnu: librewolf: Update to 136.0-2 [security fixes]. In-Reply-To: <20250308174010.21764-3-ian@retrospec.tv> (Ian Eure's message of "Sat, 8 Mar 2025 09:40:10 -0800") References: <20250308174010.21764-1-ian@retrospec.tv> <20250308174010.21764-3-ian@retrospec.tv> Date: Wed, 12 Mar 2025 12:39:26 +0900 Message-ID: <87cyemgbo1.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 76869 Cc: 76869@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Ian Eure writes: > CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free in > the Browser process > CVE-2025-1939: Tapjacking in Android Custom Tabs using transition > animations > CVE-2025-1931: Use-after-free in WebTransportChild > CVE-2025-1932: Inconsistent comparator in XSLT sorting led to > out-of-bounds access > CVE-2025-1933: JIT corruption of WASM i32 return values on 64-bit CPUs > CVE-2025-1940: Android Intent confirmation prompt tapjacking using > Select options > CVE-2024-9956: Passkey phishing within Bluetooth range > CVE-2025-1934: Unexpected GC during RegExp bailout processing > CVE-2025-1941: Lock screen setting bypass in Firefox Focus for Android > CVE-2025-1942: Disclosure of uninitialized memory when .toUpperCase() > causes string to get longer > CVE-2025-1935: Clickjacking the registerProtocolHandler info-bar > CVE-2025-1936: Adding %00 and a fake extension to a jar: URL changed > the interpretation of the contents > CVE-2025-1937: Memory safety bugs fixed in Firefox 136, Thunderbird > 136, Firefox ESR 115.21, Firefox ESR 128.8, and > Thunderbird 128.8 > CVE-2025-1938: Memory safety bugs fixed in Firefox 136, Thunderbird > 136, Firefox ESR 128.8, and Thunderbird 128.8 > CVE-2025-1943: Memory safety bugs fixed in Firefox 136 and Thunderbird > 136 Wooh! [...] > ;; Update this id with every update to its release date. > ;; It's used for cache validation and therefore can lead to strange bugs. > ;; ex: date '+%Y%m%d%H%M%S' > -(define %librewolf-build-id "20250209210057") > +(define %librewolf-build-id "20250306064037") > + > +;; Temporary, until 76798 merges into core-packages-team, and that merges into > +;; master. > +(define libpng-apng-for-librewolf > + (hidden-package > + (package > + (inherit libpng-apng) That package should be defined in (gnu packages libpng-apng), to avoid cyclic import problems down the road (info "(guix) Cyclic Module Dependencies"). > (define-public librewolf > (package > (name "librewolf") > - (version "135.0-1") > + (version "136.0-2") > (source > (make-librewolf-source > #:version version > - #:firefox-hash "0q5r2q6q56kyzl5pknrir9bzlhmzbvv9hi5gi4852izgcali4zl2" > - #:librewolf-hash "0fg4vji5xb17pgvq7jnfz4dq08gi0rl998xhj37hfm5zxs19y8jk" > + #:firefox-hash "0mvg53fr9zi6pq2pwa6qzqi88brqig1wlzic9sz52i4knx733viv" > + #:librewolf-hash "0zb5f6hml7nmyf8hms66s07ba97x2px2hgqqi4lmwr5hm9mf942z" > #:l10n firefox-l10n)) > (build-system gnu-build-system) > (arguments > @@ -392,6 +425,17 @@ (define (write-setting key value) > (lambda _ > (setenv "MOZ_BUILD_DATE" > #$%librewolf-build-id))) > + ;; https://bugzilla.mozilla.org/show_bug.cgi?id=1927380 > + (add-before 'configure 'patch-icu-lookup > + (lambda _ > + (let* ((file "js/moz.configure") > + (old-content (call-with-input-file file get-string-all))) > + (substitute* file > + (("icu-i18n >= 76.1" all) > + (string-append all ", icu-uc >= 76.1"))) > + (if (string=? old-content > + (pk (call-with-input-file file get-string-all))) > + (error "substitute did nothing, phase requires an update"))))) Please try to keep the max column width < 80 columns. That's why often we use something like, to keep the hanging indent small. --8<---------------cut here---------------start------------->8--- #:phases (list #~(modify-phases %standard-phases (add-after ...))) --8<---------------cut here---------------end--------------->8--- Other than these small things, it LGTM. I'll try testing it to see if the localization issue I had mentioned is resolved. Thanks for maintaining it! -- Maxim From debbugs-submit-bounces@debbugs.gnu.org Wed Mar 12 00:22:09 2025 Received: (at 76869) by debbugs.gnu.org; 12 Mar 2025 04:22:09 +0000 Received: from localhost ([127.0.0.1]:46823 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tsDbd-0000QN-Ha for submit@debbugs.gnu.org; Wed, 12 Mar 2025 00:22:09 -0400 Received: from fhigh-a6-smtp.messagingengine.com ([103.168.172.157]:37183) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tsDba-0000Pl-Hd for 76869@debbugs.gnu.org; Wed, 12 Mar 2025 00:22:07 -0400 Received: from phl-compute-07.internal (phl-compute-07.phl.internal [10.202.2.47]) by mailfhigh.phl.internal (Postfix) with ESMTP id E12621140236; Wed, 12 Mar 2025 00:22:00 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-07.internal (MEProxy); Wed, 12 Mar 2025 00:22:00 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm3; t=1741753320; x=1741839720; bh=QpHgQgstNP9QUYUObgxugcivKJtn5oFMnT0PDzetNzU=; b= G1uKWKzNkLmc1GuFTtBjF1YGyOpxJ5DqepudCtAY3hiKkdsE5F5awz/4M6Rrgfgx t953Tcafs/bphaJT4DKV2uf38clOpS7N/oe4PUMTzKbGBxZDmB7LyZCWtRpLZwHL 0QbK0kVnUqOVrqI9+bXD5+L5jSoZx93IGV1C5K6HbFMPZZ1yaSWGQW0UXpZFcy2i kSwayNTXs5QpyLaCM3RxVl9D9VqhUxZkdarSY5IIyhduAxcNUqUm/8leLp0JAcVn CCaSw4dkhC4EJPzwtZ8eaI/RX2WCRx/mI/sfCjx8wD/aruQzXAUMxGJIhsoZu812 q/j+gGGUAYD6jaukWAxaUw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1741753320; x= 1741839720; bh=QpHgQgstNP9QUYUObgxugcivKJtn5oFMnT0PDzetNzU=; b=6 Ufa7QJ21FH43D33h5fI+AHJcxWc82fkxUPFMlrqHLtjK6qEP2PXe/UxF9YG8wLtB Ut/xkaiTHorKwPkKhcdu+PBI23uly9sH1pAsERyUwAMDpKNZFYC20uua275WbClv Z1Tws+HDx8NX/mxs13ZfROtNeMubNWbg3tUT3ut83oTkxo8ujdfLKr8BdU1cVr2q FwTbNs64zJTP7pF2QoCPRkp3ZNzNgXnSBkQsYM17u57FmpDy3wARoND/HH7RTfF5 YjmJQMJS3d1B8exBYofu1e8qDsGvz1ml2Ui48zOZzRuTS0nJTcaUjkkC/YYM/5YJ pJ1/1Jp3JZqC/TbimyfxQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduvdegtdelucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpih gvnhhtshculddquddttddmnecujfgurhephffvvefujghffgffkfggtgfgsehtqhertddt reejnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghnsehrvghtrhhoshhpvggtrdhtvh eqnecuggftrfgrthhtvghrnhepveeuleeugedujeeukefhhffhlefgjeehfeffhefgffel keevkeeutdegkeelgeffnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrg hilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedv pdhmohguvgepshhmthhpohhuthdprhgtphhtthhopeejieekieelseguvggssghughhsrd hgnhhurdhorhhgpdhrtghpthhtohepmhgrgihimhdrtghouhhrnhhohigvrhesghhmrghi lhdrtghomh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 12 Mar 2025 00:21:59 -0400 (EDT) From: Ian Eure To: Maxim Cournoyer Subject: Re: [bug#76869] [PATCH 3/3] gnu: librewolf: Update to 136.0-2 [security fixes]. In-Reply-To: <87cyemgbo1.fsf@gmail.com> (Maxim Cournoyer's message of "Wed, 12 Mar 2025 12:39:26 +0900") References: <20250308174010.21764-1-ian@retrospec.tv> <20250308174010.21764-3-ian@retrospec.tv> <87cyemgbo1.fsf@gmail.com> User-Agent: mu4e 1.12.9; emacs 29.4 Date: Tue, 11 Mar 2025 21:21:57 -0700 Message-ID: <87r032khei.fsf@retrospec.tv> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 76869 Cc: 76869@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Maxim Cournoyer writes: > Hi, > > Ian Eure writes: > >> +;; Temporary, until 76798 merges into core-packages-team, and=20 >> that merges into >> +;; master. >> +(define libpng-apng-for-librewolf >> + (hidden-package >> + (package >> + (inherit libpng-apng) > > That package should be defined in (gnu packages libpng-apng), to=20 > avoid > cyclic import problems down the road (info "(guix) Cyclic Module > Dependencies"). Huh, okay. I=E2=80=99ll move it. > Please try to keep the max column width < 80 columns. That's=20 > why often > we use something like, to keep the hanging indent small. Ooh, yeah, some of these have gotten out of hand. Will fix both issues and push. > Other than these small things, it LGTM. I'll try testing it to=20 > see > if the localization issue I had mentioned is resolved. I haven=E2=80=99t had a chance to look into this / compare with other LW=20 packages, so I wouldn=E2=80=99t expect much. > Thanks for maintaining it! Happy to! Thank you for the review. -- Ian From debbugs-submit-bounces@debbugs.gnu.org Wed Mar 12 00:31:43 2025 Received: (at control) by debbugs.gnu.org; 12 Mar 2025 04:31:43 +0000 Received: from localhost ([127.0.0.1]:46849 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tsDks-0000u2-Q3 for submit@debbugs.gnu.org; Wed, 12 Mar 2025 00:31:43 -0400 Received: from fout-a3-smtp.messagingengine.com ([103.168.172.146]:54163) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tsDko-0000tj-LG for control@debbugs.gnu.org; Wed, 12 Mar 2025 00:31:40 -0400 Received: from phl-compute-12.internal (phl-compute-12.phl.internal [10.202.2.52]) by mailfout.phl.internal (Postfix) with ESMTP id 45CD513831A0 for ; Wed, 12 Mar 2025 00:31:33 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-12.internal (MEProxy); Wed, 12 Mar 2025 00:31:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:content-type:date:date:from:from:in-reply-to:message-id :reply-to:subject:subject:to:to; s=fm3; t=1741753893; x= 1741840293; bh=1EhFhCU/IcF7Mknt5Fv3dF5rN3EWwTBLwt/4ddHD8cQ=; b=i zX98429f6XUCKmjtzfrZtRbRdjVOrM7k7z49uF55l0mdpqesfr4rkGXEcq+9HWXZ SB/641ucCikOUM9/A1xJG3oN0VeHaOYdqUGbCVPtyl7A/5meYWMtVUAl1Fj4HU/Q LqHS9F0mwqDpBGPJ4aPg+kNcT4Oh7gjSc+JOe0mCNVrlamszHDabsywAi5BF65TR YmrQaiqBZbGW3SzYZfG2IxJLYj82GlAVpeJfvcuuuD3RelnZHOXBUbETmidb4aBQ QNIC3bZrjDV7lNBWTLV4WOGjKsF0fUQ17oFBylWPqTnyYxzJeb7k3FFWI7xKKxRl Xrvn1iDUN6bzdzPA8I2rw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:message-id:reply-to:subject :subject:to:to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm1; t=1741753893; x=1741840293; bh=1EhFhCU/IcF7Mknt5Fv3dF5rN3EW wTBLwt/4ddHD8cQ=; b=pucMHdnCMJJ7SnLFpEjoj4Ix64oE/vwa6VSykHUkZQxR fE6PBc4V8LRXvHWLE16K/z+HmY8mauFLY5Hy53qVmWrBWZNOxpD5qINkYUdAB0WG JoY5e1l6mxg7VyQHSUHcGNhselZqd1H1GOtZIeRwLTGM2+qtUJQ6HEVrQupobelq YN2sHdp4qfL04i+VS7+zXQAXuXyG7TNbhY/fbmUVMQJXdgIrFDbwI4mSwQAeMJv+ aOwliny8e5D+OtI2lPFCmCxWqXvGuArI3LZ2FzdaJXqZYZ35pCCGGClHb3U1IAuM 1lgqcoOjSNj6KYeWhNOFyMU0ith30xUbPkNzSmUaNg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduvdegudduucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpeffkf fvhffusedttdertddttddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghnsehrvght rhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepteekjefhfefhteeigeekheehve dvfefggfegvefftddvudefheeigfetieeuheeknecuvehluhhsthgvrhfuihiivgeptden ucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsg gprhgtphhtthhopedupdhmohguvgepshhmthhpohhuthdprhgtphhtthhopegtohhnthhr ohhlseguvggssghughhsrdhgnhhurdhorhhg X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Wed, 12 Mar 2025 00:31:32 -0400 (EDT) Date: Tue, 11 Mar 2025 21:31:31 -0700 Message-Id: <87plimkgyk.fsf_-_@retrospec.tv> To: control@debbugs.gnu.org From: Ian Eure Subject: control message for bug #76869 X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) close 76869 quit From unknown Sun Jun 22 11:37:34 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 09 Apr 2025 11:24:19 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator