From unknown Fri Jun 20 07:08:55 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#78249 <78249@debbugs.gnu.org> To: bug#78249 <78249@debbugs.gnu.org> Subject: Status: [PATCH 0/3] gnu: librewolf: Update to 138.0.1-2 [security fixes]. Reply-To: bug#78249 <78249@debbugs.gnu.org> Date: Fri, 20 Jun 2025 14:08:55 +0000 retitle 78249 [PATCH 0/3] gnu: librewolf: Update to 138.0.1-2 [security fix= es]. reassign 78249 guix-patches submitter 78249 Ian Eure severity 78249 normal tag 78249 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Sun May 04 19:18:51 2025 Received: (at submit) by debbugs.gnu.org; 4 May 2025 23:18:51 +0000 Received: from localhost ([127.0.0.1]:35012 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uBibj-00081Z-1e for submit@debbugs.gnu.org; Sun, 04 May 2025 19:18:51 -0400 Received: from lists.gnu.org ([2001:470:142::17]:45770) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uBibf-00081F-Ql for submit@debbugs.gnu.org; Sun, 04 May 2025 19:18:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uBibZ-0007Yr-B7 for guix-patches@gnu.org; Sun, 04 May 2025 19:18:41 -0400 Received: from fout-b2-smtp.messagingengine.com ([202.12.124.145]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uBibX-0004T4-4f for guix-patches@gnu.org; Sun, 04 May 2025 19:18:41 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfout.stl.internal (Postfix) with ESMTP id 7FA29114020B; Sun, 4 May 2025 19:18:35 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-01.internal (MEProxy); Sun, 04 May 2025 19:18:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1746400715; x=1746487115; bh=tsWh5a7lMUFXJSdVlr8I7 e3q+XLvP0Ef++e/fSLwvCI=; b=eRuFRiYHpab+yR3U6NmwmSshcMwlJRXJKRQ0S tVvNmKhA0jVnt6Fm5YPpZGVdms7DWPMUJKuL2n3LIy5QZRs+R7MivVSLwGAcgAqa oBuXARJVSPvvwmB7dbwksi93FK9hq19CCvzg0dW3bEg8cyfdwd+FeZ6nyPuMKlUS lwM76a5j1+QSTdVA5TVrj/WrGZ7PZdz7V1rTO/C5F/lC/a57PctvIqVmQizZqMla 0xib8V5Do4LhEa/tvwlNAD5ffxnMkJRedGqwZWqsjlO+fiOsXeS4JtMPwBLf1jXh cSrhs7wPtgjmP+ou7+op/kJGEpQG88LyJj5sRz9DrxszXI3MQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1746400715; x=1746487115; bh=tsWh5a7lMUFXJSdVlr8I7e3q+XLvP0Ef++e /fSLwvCI=; b=KUy/sOhQof9rVH2RJ1Bf6aou2OFLguFz7o/DFZVTnl2y2TxkLd4 z5zQZz2h1aGg1MoOLLYQlvZ4cTdnpPbkPGW4kAPAWoDrzD2ZVauatMa+RXi3NmEr AopqP0R6USslzOh7+nl+Vdpv0/EwOra7XCi3OB+Iwxo/xqJRCbCtEBjP7JdByEhu eTpwZ/edd1InlQ3766A/TrOGq6fWYWtywQHENvnEFHeXdd+KaaC3nF2eJhoKVGTr 57vsj2Xkr3IfBahiNZ2iL5kV6G1lFxdC28wyMdznsUELa94X0ioQiNT3FQHug8O4 cT30R7lIAi3kAiRkozujDNSmyJMsuXnPm9A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvjeelheduucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhephfeiveeliedukeffhe fhleeijedtveelleetgefggfehkeeljeehtdeguddvvefgnecuvehluhhsthgvrhfuihii vgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrth hvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehg uhhigidqphgrthgthhgvshesghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrh hoshhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 4 May 2025 19:18:34 -0400 (EDT) From: Ian Eure To: guix-patches@gnu.org Subject: [PATCH 0/3] gnu: librewolf: Update to 138.0.1-2 [security fixes]. Date: Sun, 4 May 2025 16:18:31 -0700 Message-ID: <20250504231831.20420-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=202.12.124.145; envelope-from=ian@retrospec.tv; helo=fout-b2-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.7 (/) X-Debbugs-Envelope-To: submit Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) The 138.x series needs both nspr and nss bumps. This adds nspr 4.36 to avoid a large rebuild. I have a WIP v2 patch for #73152 which includes that update, and I'll clean this stuff up after that merges. Ian Eure (3): gnu: Add nspr-4.36. gnu: nss-rapid: Update to 3.110. gnu: librewolf: Update to 138.0.1-2 [security fixes]. gnu/packages/librewolf.scm | 12 ++++---- gnu/packages/nss.scm | 30 +++++++++++++++++-- .../patches/torbrowser-compare-paths.patch | 17 +++-------- 3 files changed, 37 insertions(+), 22 deletions(-) -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Sun May 04 19:19:45 2025 Received: (at 78249) by debbugs.gnu.org; 4 May 2025 23:19:45 +0000 Received: from localhost ([127.0.0.1]:35025 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uBica-00083x-Qm for submit@debbugs.gnu.org; Sun, 04 May 2025 19:19:45 -0400 Received: from fhigh-b1-smtp.messagingengine.com ([202.12.124.152]:52053) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uBicY-00083Z-Ab for 78249@debbugs.gnu.org; Sun, 04 May 2025 19:19:43 -0400 Received: from phl-compute-05.internal (phl-compute-05.phl.internal [10.202.2.45]) by mailfhigh.stl.internal (Postfix) with ESMTP id AF896254021A; Sun, 4 May 2025 19:19:36 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-05.internal (MEProxy); Sun, 04 May 2025 19:19:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1746400776; x=1746487176; bh=wqaVfWfvz647olqDuK+Oq JFdwi/euGdeu0kPoRDVbsA=; b=Gy3fawUj9VK3T2dyEnz8eFeFRVBVj9fKwgXvw VlLNxBJJSsZAadsPUsg0JrpUC7vsUuCk5XS/6urEzMX5RojxM+GWpnyrAE9E27T2 wnNcZ9SgacXZ5uyoqzLefEvlCLeZychsl9LHzopfk4XgFi9+6x3xpZsBrugD2Ouf 0f8pB69Ddfp7uX/faDfGNqSiJtaqL+WYIpP8I3HUUk+plGIzs7kOcJzyIghdfYn4 PbNc+eej8YbQUk4uRJiRo8Ufv0l6Mmr0tq7I6zAgsCxP7rsE0JR8lurAf1c8rLeL iAGFFjTrQ/lKFwBSw9jdjpwQWTXLBr1Poq22VPNcmLgiXcKsA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1746400776; x=1746487176; bh=wqaVfWfvz647olqDuK+OqJFdwi/euGdeu0k PoRDVbsA=; b=vTxZSXvq5nOeVy7xKZ+F00cNVQHyVIanzbYsTBmvrlUkQTIeAje JCfof0FxD5GnBV94GslEDbqGKsZZTkZZNjElCo+2quJXDdk2pD5YKcTpSaDtXBUT EaotvVIgDmoAiMfjCbs52H1KmjiDR2gAFurXUVaPHGjFaHa6apdAHrWA7Y18YJ+S 1cl6caBuTVIEleabIkCW9faMg7gdACvvbFQCD4uXNwIIkX0ivAMwPRFoya/5VYD5 tGUz8qT1T42ByUZ81sJU/SBOqEZGUFA5L4XRGHyYNPaovdncbFT3mT6iRYOrBqHG ACExcBdhlvTQhJei+mRwCqO8DNHF+ImB3ZQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvjeelheduucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfdvjefhlefhfedtie elleefvdfhfeffteefueetlefgvdelffelvefgfeeukeejnecuffhomhgrihhnpehmohii ihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhm ohguvgepshhmthhpohhuthdprhgtphhtthhopeejkedvgeelseguvggssghughhsrdhgnh hurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 4 May 2025 19:19:35 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH 1/3] gnu: Add nspr-4.36. Date: Sun, 4 May 2025 16:19:29 -0700 Message-ID: <20250504231932.20519-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nspr-4.36): New variable. Change-Id: I5c7c4f5f96e3b9ed763c63c9b5b5996a63d45985 --- gnu/packages/nss.scm | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 8bcb593ed7..7a8c6b075d 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -95,6 +95,19 @@ (define-public nspr in the Mozilla clients.") (license license:mpl2.0))) +(define-public nspr-4.36 + (package + (inherit nspr) + (version "4.36") + (source (origin + (method url-fetch) + (uri (string-append + "https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v" + version "/src/nspr-" version ".tar.gz")) + (sha256 + (base32 + "15b83ipjxrmw0909l5qqz13pbarhp50d6i58vgjx4720y4bw7pjm")))))) + (define-public nspr-4.32 (package (inherit nspr) -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Sun May 04 19:19:46 2025 Received: (at 78249) by debbugs.gnu.org; 4 May 2025 23:19:46 +0000 Received: from localhost ([127.0.0.1]:35030 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uBicb-000846-Cx for submit@debbugs.gnu.org; Sun, 04 May 2025 19:19:46 -0400 Received: from fhigh-b1-smtp.messagingengine.com ([202.12.124.152]:60525) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uBicZ-00083b-60 for 78249@debbugs.gnu.org; Sun, 04 May 2025 19:19:43 -0400 Received: from phl-compute-04.internal (phl-compute-04.phl.internal [10.202.2.44]) by mailfhigh.stl.internal (Postfix) with ESMTP id C0563254022B; Sun, 4 May 2025 19:19:37 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-04.internal (MEProxy); Sun, 04 May 2025 19:19:37 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1746400777; x= 1746487177; bh=nuVsU1Tfvz2ogHhqXDLH3VIqkIInhRTA7dvEFOj0G/4=; b=o qgJD/kSZK0MNzf2vnKkpW24tjRvjkjwmqZ/hrMTQNEjjjn+uTa6dIDaLbw/S7wVB 6L2VEchroqv4iC78Oxx0CfhZowl/x2nR1Dyo3mLE61oCeIf3j0SiDodZ+U5ChnVM EphudN8uKCE33sShO2xfDXUql0Dv1l7uSadK/MEh7mlbLIQaNibHSgV2Wd6JdzFs 5f2bE9bvc4zQS8XpyH6r3wPBpGjc55fe/KWfIQRoByg4LXtvZU+sD+12GLwXW6Cs DY3OD1kUlc5HnAL4kdLI2TZyhh2acGrqMTbdw7mROfmFPsaj31J91DFg8g4LSNDM qNBFbqI8Nq9G0hhhUKBDA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1746400777; x=1746487177; bh=n uVsU1Tfvz2ogHhqXDLH3VIqkIInhRTA7dvEFOj0G/4=; b=dzfF3tuqgg74seTie c++9A6fHKxkKBYNCJhYP/wQ9f5gkRJeqze9QOrYBP+7oaix18Y0+yaGLuKFgRUk1 DBagawqYiakVwOnKxk7kqQxk1dodHmcq4gYwj0cV4T8xtmK2NC2PQ3i1ycNP7XnI aybkCVgckpEqZa8g/JmX6l3k6/N+axMwhN4uPBpkYbxJmiXanNyXoKQDxBDRL+SL 2hfKJT15K2aIxNYy0v7TBBHB5w8qQFUe5/xjtnr0jYJYdV1g/TpSZxTeYeTdlMqu GCBKsucY251yeXyu6XB+u7Ege5VOGltKsh6MT+aalxyjTOI/4zYGMdSL6pm7BaEd nb3tA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvjeelheduucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepudekudeuiefgue dtteelveekvefhhfdvudegteduleduledutedtledtvdejgffgnecuffhomhgrihhnpehg nhhurdhorhhgpdhmohiiihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenuc frrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggp rhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopeejkedvgeelse guvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgv tgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 4 May 2025 19:19:36 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH] gnu: librewolf: Update to 137.0-1 [security fixes]. Date: Sun, 4 May 2025 16:19:30 -0700 Message-ID: <20250504231932.20519-2-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250504231932.20519-1-ian@retrospec.tv> References: <20250504231932.20519-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Contains fixes for: CVE-2025-3028: Use-after-free triggered by XSLTProcessor CVE-2025-3031: JIT optimization bug with different stack slot sizes CVE-2025-3032: Leaking file descriptors from the fork server CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters CVE-2025-3035: Tab title disclosure across pages when using AI chatbot CVE-2025-3033: Opening local .url files could lead to another file being opened CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137 * gnu/packages/librewolf.scm (librewolf): Update to 137.0-1. Change-Id: I23d8cbefc242e57c19b4e98660fd22bd1dda8d6a --- gnu/packages/librewolf.scm | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 1cb7084f23..ae4d64534c 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -206,17 +206,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250327215540") +(define %librewolf-build-id "20250401171639") (define-public librewolf (package (name "librewolf") - (version "136.0.4-1") + (version "137.0-1") (source (make-librewolf-source #:version version - #:firefox-hash "0hn2ywyacgg8n47qz1q2l8bf32mszj3vnpkl6kag3wmqqbhvja2a" - #:librewolf-hash "045il4xrji2zh1scx3aiy6hx6jv098232aycda6bhsh27szbsrfa" + #:firefox-hash "07d9rdxmp48gbk41y1c6gggzziv9aqdhjwgi6c0hrf6chcppxi0y" + #:librewolf-hash "164bvissxzhzlwjafp9pdyhhg8hhdxh8w61ifkak497qm4yf8af7" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -236,8 +236,6 @@ (define-public librewolf "--with-system-ffi" "--enable-system-pixman" "--enable-jemalloc" - - ;; see https://bugs.gnu.org/32833 "--with-system-nspr" "--with-system-nss" @@ -312,7 +310,7 @@ (define (write-setting key value) (libavcodec (string-append ffmpeg "/lib/libavcodec.so"))) ;; Arrange to load libavcodec.so by its absolute file name. - (substitute* + (substitute* "dom/media/platforms/ffmpeg/FFmpegRuntimeLinker.cpp" (("libavcodec\\.so") libavcodec))))) @@ -405,7 +403,7 @@ (define (write-setting key value) (string-append all ", icu-uc >= 76.1"))) (if (string=? old-content (pk (call-with-input-file file get-string-all))) - (error + (error "substitute did nothing, phase requires an update"))))) (replace 'configure (lambda* (#:key inputs outputs configure-flags @@ -478,7 +476,7 @@ (define write-flags (invoke "./mach" "configure"))) (add-before 'build 'fix-addons-placeholder (lambda _ - (substitute* + (substitute* "toolkit/locales/en-US/toolkit/about/aboutAddons.ftl" (("addons.mozilla.org") "gnuzilla.gnu.org")))) -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Sun May 04 19:19:48 2025 Received: (at 78249) by debbugs.gnu.org; 4 May 2025 23:19:48 +0000 Received: from localhost ([127.0.0.1]:35032 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uBice-00084P-7f for submit@debbugs.gnu.org; Sun, 04 May 2025 19:19:48 -0400 Received: from fhigh-b1-smtp.messagingengine.com ([202.12.124.152]:47465) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uBica-00083f-8w for 78249@debbugs.gnu.org; Sun, 04 May 2025 19:19:44 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfhigh.stl.internal (Postfix) with ESMTP id D18E02540224; Sun, 4 May 2025 19:19:38 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-01.internal (MEProxy); Sun, 04 May 2025 19:19:38 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1746400778; x= 1746487178; bh=tIzC2m8An8ToCGxELMUH4vlJ0uGGHcAVLwIelyymRfc=; b=C cx5YVgR/H4FyGyhFguSQpFpbacda04rjpcQtyESkv+PfPdIVGacoAoTj+LRfoFJc 4nC1ir0BGh2/+GYsmcLnJlVy+ROjIpw8Zt+xhnptDS6uRqCH56zsc1rra9Vv95qb k0gln+tZEhML8hf8jjc9oGqHT0Ju2KTNCXyiEZZoBRKY8l674T1WZef6eJjPP0W5 A/z5OZIrC58vRbpiCyZqe3cSXB0HVWyNTzZzNUkqWbytvHGPD1NNwTaLAWp/0uxa 1GoUZsFkQrcADlmlFkOSrPDUA8OnLokAASmxGd6MJ8SdG6J5fjgMopZndFsnzF1h DHxgU/7xzJ1tyLKXHKaXw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1746400778; x=1746487178; bh=t IzC2m8An8ToCGxELMUH4vlJ0uGGHcAVLwIelyymRfc=; b=q7DEuHZQOlSMV0J6E sktCHuEUWSjtmcT/r17VTT5xHkDvV8sQwq3gUtGmKfjGZ1NzISR8y1L7o2spGn9P CE3zUhDEko/6D2Vx/bHkw8hAbcjwUeIWNzuqBceLCShwICb4k2Ckfw43x5lXkEYo 51OipANNylpIMgdYLomujPUcAZxqNfTaaYW5wV7A8Pvr3xAZDA0mkwwrLAxZyma6 0APqs+hSLxH+MQXt5Cs2x4D60FPqlPE9cd/DKlDJW/XEiND6ZVsZIzbnrPtD98Z0 +JLZYB5n4zy7Fs5kuzJx72Eb9RsaP1W8aTeZjU+PUll4Ofc3SE5RwqSUWLe6I9xW HGPpA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvjeelheduucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepvdfgveffvdekle dttdetjeektdevteegfefhvdefhfffffejudetkeduieekudelnecuffhomhgrihhnpegs rggushhslhdrtghomhdpmhhoiihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdp nhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeekvd egleesuggvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhho shhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 4 May 2025 19:19:37 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH 2/3] gnu: nss-rapid: Update to 3.110. Date: Sun, 4 May 2025 16:19:31 -0700 Message-ID: <20250504231932.20519-3-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250504231932.20519-1-ian@retrospec.tv> References: <20250504231932.20519-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nss-rapid): Update to 3.110. Change-Id: Ibdae3c70066a70cdde560c5d8f9bac797cd2cd99 --- gnu/packages/nss.scm | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 7a8c6b075d..24f4b60369 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -347,7 +347,7 @@ (define-public nss-rapid (package (inherit nss) (name "nss-rapid") - (version "3.109") + (version "3.110") (source (origin (inherit (package-source nss)) (uri (let ((version-with-underscores @@ -358,11 +358,19 @@ (define-public nss-rapid "nss-" version ".tar.gz"))) (sha256 (base32 - "12y156frnhaqvwkla1c07gqr2lnp4yb3619g4088kk8qc4jnr95y")))) + "09xfndqj07wy28l7jnk01gqa4bh55nz6cldlp5qpg8120k211mlw")))) (arguments (substitute-keyword-arguments (package-arguments nss) ((#:phases phases) #~(modify-phases #$phases + (add-after 'unpack 'neutralize-network-test + ;; Test tries to resolve `wrong.host.badssl.com' which fails due + ;; to no networking in the build environment. + ;; Behavior changed as of 3.110. + (lambda _ + (substitute* "nss/tests/ssl/ssl.sh" + ((" ssl_policy_pkix_ocsp" all) + (string-append "#" all))))) (replace 'check (lambda* (#:key tests? #:allow-other-keys) (if tests? @@ -390,8 +398,11 @@ (define-public nss-rapid ;; leading to test failures: ;; . To ;; work around that, set the time to roughly the release date. - (invoke "faketime" "2025-03-01" "./nss/tests/all.sh")) + (invoke "faketime" "2025-03-28" "./nss/tests/all.sh")) (format #t "test suite not run~%")))))))) + (propagated-inputs + (modify-inputs (package-propagated-inputs nss) + (replace "nspr" nspr-4.36))) (synopsis "Network Security Services (Rapid Release)") (description "Network Security Services (@dfn{NSS}) is a set of libraries designed to -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Sun May 04 19:19:49 2025 Received: (at 78249) by debbugs.gnu.org; 4 May 2025 23:19:49 +0000 Received: from localhost ([127.0.0.1]:35034 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uBice-00084X-OH for submit@debbugs.gnu.org; Sun, 04 May 2025 19:19:49 -0400 Received: from fhigh-b1-smtp.messagingengine.com ([202.12.124.152]:60477) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uBicb-00083h-9j for 78249@debbugs.gnu.org; Sun, 04 May 2025 19:19:45 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfhigh.stl.internal (Postfix) with ESMTP id CD070254022E; Sun, 4 May 2025 19:19:39 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-01.internal (MEProxy); Sun, 04 May 2025 19:19:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1746400779; x= 1746487179; bh=Dp7zaMQWt6URMcPb3tC9Ds+ZCAzjo2greSPd7frV1U8=; b=J urFwoMdI8q9fyA4Z0u4UhWta3wjWZ3RHjh8+hq43uliwjnqemw93oe9g0XN/nos2 Mq2tzTA6hSOH0VL4n3zeLtIrOHAfh1Ouqvy8pqmfrUFMkjxybcufqhsed6xahAOs Rp8c5/WQVjuBFI5wZ3he3oOLEnvoGeo7mFVr8N1b8+JEcPkuyuZDIEupo/PiqUnw u8BF7/pR+8MLft8wHhtp3X7CKKzkG8p/hIGw8rL8GpmJo7OYfIPVn5dbwoviPoHQ zyH/0+c4mITo0MHVWLjnNB8YEkM/QVvfQ8m/iKk/PWUjY8+wEEi8AsloOlfhw+/p 4MZCkyHkVZ3yykhrPdYMg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1746400779; x=1746487179; bh=D p7zaMQWt6URMcPb3tC9Ds+ZCAzjo2greSPd7frV1U8=; b=ksceVhPgqS25mCQJH rDvQpN7qv5aHz6ZFwP6O8Dzy/2pRKFNaZ2BCkTTpNOBWGzE46tYeZ/BXbuc4cOBU voYvmiOa9fSwNThnBCAoFfAkXBKcbXmYRu7IOZaAP9pLeEKbR65CY+FEuYYzW7R2 WqTRmGUdYxjBWYQexH2BCgvmSndStJIJbWkDs36DAIgKKHlQs7YkACnydz2/7gHx GeIXpDFVoZ+38AGq7yh8CRWoHWK4D2df9MJWRsIINbxsXEFwxZuFsHzDPyI5bRvd /TTgqueZ+BlUqgNP7dGa2SRu0CbnqpbuOONuKaK+ApTs1zexWsBuKYCnzdCqeGmH i4gxw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvjeelheduucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepveevjeffuddvte eiueetgfeukedvfeeiuedvveelfeeghfduleeftedvgfefgeejnecuvehluhhsthgvrhfu ihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtg drthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthho peejkedvgeelseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrh gvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 4 May 2025 19:19:39 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH 3/3] gnu: librewolf: Update to 138.0.1-2 [security fixes]. Date: Sun, 4 May 2025 16:19:32 -0700 Message-ID: <20250504231932.20519-4-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250504231932.20519-1-ian@retrospec.tv> References: <20250504231932.20519-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Contains fixes for: CVE-2025-2817: Privilege escalation in Firefox Updater CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor CVE-2025-4086: Specially crafted filename could be used to obscure download type CVE-2025-4087: Unsafe attribute access during XPath parsing CVE-2025-4088: Cross-site request forgery via storage access API redirects CVE-2025-4089: Potential local code execution in "copy as cURL" command CVE-2025-4090: Leaked library paths in Firefox for Android CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 * gnu/packages/librewolf.scm (librewolf): Update to 138.0.1-2. * gnu/packages/patches/torbrowser-compare-paths.patch: Adjust for new version. Change-Id: I2cc11b758dbc77f7ec3451faa89918b08c890729 --- gnu/packages/librewolf.scm | 12 ++++++------ .../patches/torbrowser-compare-paths.patch | 17 ++++------------- 2 files changed, 10 insertions(+), 19 deletions(-) diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index bcacbf8dd1..8a8dbd05ad 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -207,17 +207,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250416062358") +(define %librewolf-build-id "20250502155055") (define-public librewolf (package (name "librewolf") - (version "137.0.2-1") + (version "138.0.1-2") (source (make-librewolf-source #:version version - #:firefox-hash "01yd5cq6qgww6w2kq1bchy9j81blim15kdz7bvx8n512m2x3mz06" - #:librewolf-hash "0vy1xvjwgc4vd9q3laakx6lrsy4ghpdr98vm9lmx86amg9gak5ix" + #:firefox-hash "0aybkr6zan7klybc1r455lgzz524rmhzj85g6xv88vw70dibk54q" + #:librewolf-hash "0c98hjhfklfbi2biib7bk5qijp6x77hmp8ska2fy3lzi78lsz08z" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -639,7 +639,7 @@ (define (runpaths-of-input label) libxt mesa mit-krb5 - nspr + nspr-4.36 nss-rapid pango pciutils @@ -665,7 +665,7 @@ (define (runpaths-of-input label) pkg-config python rust-librewolf - rust-cbindgen-0.26 + rust-cbindgen-0.28 which yasm)) (native-search-paths diff --git a/gnu/packages/patches/torbrowser-compare-paths.patch b/gnu/packages/patches/torbrowser-compare-paths.patch index 7d4d5fdb78..8e880bf390 100644 --- a/gnu/packages/patches/torbrowser-compare-paths.patch +++ b/gnu/packages/patches/torbrowser-compare-paths.patch @@ -5,20 +5,11 @@ name. --- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs -@@ -3606,6 +3606,7 @@ +@@ -3753,6 +3753,7 @@ if ( newAddon || oldAddon.updateDate != xpiState.mtime || + oldAddon.path != xpiState.path || - (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) - ) { - newAddon = this.updateMetadata( -@@ -3614,8 +3615,6 @@ - xpiState, - newAddon - ); -- } else if (oldAddon.path != xpiState.path) { -- newAddon = this.updatePath(installLocation, oldAddon, xpiState); - } else if (aUpdateCompatibility || aSchemaChange) { - newAddon = this.updateCompatibility( - installLocation, + (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) || + // update addon metadata if the addon in bundled into + // the omni jar and version or the resource URI pointing -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Wed May 07 19:05:30 2025 Received: (at 78249) by debbugs.gnu.org; 7 May 2025 23:05:30 +0000 Received: from localhost ([127.0.0.1]:49507 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uCnpS-00068k-6L for submit@debbugs.gnu.org; Wed, 07 May 2025 19:05:30 -0400 Received: from fout-a7-smtp.messagingengine.com ([103.168.172.150]:34757) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uCnpO-00067s-Qt for 78249@debbugs.gnu.org; Wed, 07 May 2025 19:05:28 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfout.phl.internal (Postfix) with ESMTP id 4CE251380205; Wed, 7 May 2025 19:05:21 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Wed, 07 May 2025 19:05:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1746659121; x=1746745521; bh=wqaVfWfvz647olqDuK+Oq JFdwi/euGdeu0kPoRDVbsA=; b=TIHARlxKbSndIAV8Jk0WlS+h8YxjFsSCVKdZX w8JyD1EJmNM+1IFgwSqxFRxGLLFxCx1lHl8VUbzjHZ4/uleELt8WnHzGgWTrWm/f LW2YIEgX7YyQ4w2GuZUxldBXhtKqOJsFA5+IDIBGyaHo5oVzWTm4DBIaeWWPo+Ha HtzleKiL71pmpeXPiN4VSZVoS7/UXJy2hbK04BjsQUPQ8cMXRNfDbf/OYD8SIRe9 gnfoubkbTncCju0LoRqZSK0i3PN/s6wfk7zeSSWhOX4Fbl8ni94NI+zdbjPuPXvu rIsT6yRJwOCLViwq0YNxifkgQF4o9dh+fH291pr8d64PS4rJw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1746659121; x=1746745521; bh=wqaVfWfvz647olqDuK+OqJFdwi/euGdeu0k PoRDVbsA=; b=W/hZeECsfQfS+QtuPiyLYQmIKYEa9CIpM9Y03uu1wzmMGvuQxAv a8ylnCqHe9cllTdCMsQdg5TnnHwfYkLFZCgjy+Zc/TFt+cbMb0zoUd7fS3her1TN 9OXh6awt1P5K2oQBzxLGl/UZm0u6Y4rfpqvvUF0R3uwgNO+G+NRslOace+W9aedB fB2S+6zJRwdh74vSIS0rBWdd+gReL82xmuKn4wJ7yk9+XMLJhVYIA3f6Wfafwjq7 58FysFMM9h8tYBzKkiSFt7diSWphGadNotr999ixxcJh6EztJlNukp7OiZo1crDL pYq7QSF/Mc01QEXTS/NbJL4OIGBAqarMfig== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvkeekudefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfdvjefhlefhfedtie elleefvdfhfeffteefueetlefgvdelffelvefgfeeukeejnecuffhomhgrihhnpehmohii ihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhm ohguvgepshhmthhpohhuthdprhgtphhtthhopeejkedvgeelseguvggssghughhsrdhgnh hurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 7 May 2025 19:05:20 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v2 1/3] gnu: Add nspr-4.36. Date: Wed, 7 May 2025 16:05:14 -0700 Message-ID: <20250507230516.3882-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nspr-4.36): New variable. Change-Id: I5c7c4f5f96e3b9ed763c63c9b5b5996a63d45985 --- gnu/packages/nss.scm | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 8bcb593ed7..7a8c6b075d 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -95,6 +95,19 @@ (define-public nspr in the Mozilla clients.") (license license:mpl2.0))) +(define-public nspr-4.36 + (package + (inherit nspr) + (version "4.36") + (source (origin + (method url-fetch) + (uri (string-append + "https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v" + version "/src/nspr-" version ".tar.gz")) + (sha256 + (base32 + "15b83ipjxrmw0909l5qqz13pbarhp50d6i58vgjx4720y4bw7pjm")))))) + (define-public nspr-4.32 (package (inherit nspr) -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Wed May 07 19:05:34 2025 Received: (at 78249) by debbugs.gnu.org; 7 May 2025 23:05:35 +0000 Received: from localhost ([127.0.0.1]:49510 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uCnpW-00068v-7M for submit@debbugs.gnu.org; Wed, 07 May 2025 19:05:34 -0400 Received: from fout-a7-smtp.messagingengine.com ([103.168.172.150]:47143) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uCnpP-00067u-5W for 78249@debbugs.gnu.org; Wed, 07 May 2025 19:05:28 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfout.phl.internal (Postfix) with ESMTP id 013F9138020E; Wed, 7 May 2025 19:05:22 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Wed, 07 May 2025 19:05:22 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1746659121; x= 1746745521; bh=tIzC2m8An8ToCGxELMUH4vlJ0uGGHcAVLwIelyymRfc=; b=b CZ+ChaMLXN4cFbZV8CawCRxAFbbnI80/Dbxb872u5I9XbkSy5S7Qh0VmypV/Dhmz 3dBzM7PmCYCGczVt7QnkkkE0p4Kj5EWhr4Gp8HmsyD67EHqwkjosjQYbraycTBbQ oZ3EQr6uQ1Gswyt2NJOWpffi3bxHNkldQLu/MOpViV9957rhyhhFr6qYuSYRCVTA vTOrMtIRmeGNE5hxP9w6M58eJ6fEX/t3Xl57az5GCjVcjQ6LR0CS26FFGOb71ea2 y3IvPSGQt2clsHeSg+pm/zxhSfIo5kxO+4dKRqFVxKMiN6KFi14hvRCu2KfkjWxT 8Z6rFNIqa0zTvVA7O6jzg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1746659121; x=1746745521; bh=t IzC2m8An8ToCGxELMUH4vlJ0uGGHcAVLwIelyymRfc=; b=LcA8Bz0gvQDPTYYlF 5zuNAOgspuaWd5x78IQUP/qdK24VpePF2ffENuz3DySHkikL8PT2lOJqq7+tZ2oP TCspM6K83eKkVSq4dUtJgrf1oJN7swY4WfXQWPdVehv0ipr4Cz5zcnJU2bottiLE YTS5MCltNUBLux2+8e7K8loc1p3cJJx8JZAVPMslW/tgZOgZrWPAIyR+d/c4Lq5l ufD/EaTiUmwBn79ewkFD3LBCDED0yeAnCFEJyp1uB1AM/mmq5Vtog5zFiJh/qZk7 i7ob9Met2lfLVlTdd9OykkKz7aQUOgKe2tgZ0p1qIZNh1/bVKgQqzNzS5mjl4l4r qpE0A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvkeekudefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepvdfgveffvdekle dttdetjeektdevteegfefhvdefhfffffejudetkeduieekudelnecuffhomhgrihhnpegs rggushhslhdrtghomhdpmhhoiihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdp nhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeekvd egleesuggvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhho shhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 7 May 2025 19:05:21 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v2 2/3] gnu: nss-rapid: Update to 3.110. Date: Wed, 7 May 2025 16:05:15 -0700 Message-ID: <20250507230516.3882-2-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250507230516.3882-1-ian@retrospec.tv> References: <20250507230516.3882-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nss-rapid): Update to 3.110. Change-Id: Ibdae3c70066a70cdde560c5d8f9bac797cd2cd99 --- gnu/packages/nss.scm | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 7a8c6b075d..24f4b60369 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -347,7 +347,7 @@ (define-public nss-rapid (package (inherit nss) (name "nss-rapid") - (version "3.109") + (version "3.110") (source (origin (inherit (package-source nss)) (uri (let ((version-with-underscores @@ -358,11 +358,19 @@ (define-public nss-rapid "nss-" version ".tar.gz"))) (sha256 (base32 - "12y156frnhaqvwkla1c07gqr2lnp4yb3619g4088kk8qc4jnr95y")))) + "09xfndqj07wy28l7jnk01gqa4bh55nz6cldlp5qpg8120k211mlw")))) (arguments (substitute-keyword-arguments (package-arguments nss) ((#:phases phases) #~(modify-phases #$phases + (add-after 'unpack 'neutralize-network-test + ;; Test tries to resolve `wrong.host.badssl.com' which fails due + ;; to no networking in the build environment. + ;; Behavior changed as of 3.110. + (lambda _ + (substitute* "nss/tests/ssl/ssl.sh" + ((" ssl_policy_pkix_ocsp" all) + (string-append "#" all))))) (replace 'check (lambda* (#:key tests? #:allow-other-keys) (if tests? @@ -390,8 +398,11 @@ (define-public nss-rapid ;; leading to test failures: ;; . To ;; work around that, set the time to roughly the release date. - (invoke "faketime" "2025-03-01" "./nss/tests/all.sh")) + (invoke "faketime" "2025-03-28" "./nss/tests/all.sh")) (format #t "test suite not run~%")))))))) + (propagated-inputs + (modify-inputs (package-propagated-inputs nss) + (replace "nspr" nspr-4.36))) (synopsis "Network Security Services (Rapid Release)") (description "Network Security Services (@dfn{NSS}) is a set of libraries designed to -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Wed May 07 19:05:36 2025 Received: (at 78249) by debbugs.gnu.org; 7 May 2025 23:05:36 +0000 Received: from localhost ([127.0.0.1]:49512 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uCnpY-000693-45 for submit@debbugs.gnu.org; Wed, 07 May 2025 19:05:36 -0400 Received: from fhigh-a1-smtp.messagingengine.com ([103.168.172.152]:47911) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uCnpQ-00067v-3G for 78249@debbugs.gnu.org; Wed, 07 May 2025 19:05:30 -0400 Received: from phl-compute-04.internal (phl-compute-04.phl.internal [10.202.2.44]) by mailfhigh.phl.internal (Postfix) with ESMTP id B3FBA114014B; Wed, 7 May 2025 19:05:22 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-04.internal (MEProxy); Wed, 07 May 2025 19:05:22 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1746659122; x= 1746745522; bh=Dp7zaMQWt6URMcPb3tC9Ds+ZCAzjo2greSPd7frV1U8=; b=f +NOLY7smgy5pHa46APdvX4/Cy73beJBUR+bALzjygfa8tAK3PNZ/9l4gMrttdBal v8YVKPsZtyv3tpVf9BehzQbFLI4Nt2xgZQIkb2RBUDwjRqd6hqynasPFyEdKxhm6 Ue6Mqyryti+uOLVfyx217oPK8Q3yNQ+LOEj5dfEoJZbTaNjXbAr6+eIevPLfuLiN LdXgxa1CoAse1hc5hNsEGFlWdsmSiGLt74Y502Gj8uWsUi0TcJz6N9JcdQ90aYqw 1IrIS6z5f8gk5Vh+JmUPhuo98k4ZM+TXiO5pwE0SyEWmwQ2GP6rbqIdPCw993Pll tWyN3bva06nqVGjRudwPg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1746659122; x=1746745522; bh=D p7zaMQWt6URMcPb3tC9Ds+ZCAzjo2greSPd7frV1U8=; b=MqAu4+t5DYtOXsGit +neg1t8MFp66qW+AJmviNQ3GG6jIXlgee8trke4RX5SnLEQEkvHUbNrKpz1pFuP/ VqP6EjHILGI+BJYwTokSRWwF9DdbLCrOzGYieqiV9UG2ksa3FAOlG/nfA+Kz8mL+ jzzbMgjy2ke7PK2wVWNFuuT/Oz52W301ua2GK3QilEuITETYs4zn0xZ9CsbkpeYn vegftYWZAniMJgC0ZrwF7vFDMhltFxdNDYS3yr/YXMoiHd5GpvHWXjLKNoWCm5O1 GiNExstQsljk08+8DsGNLSfURpxZ6k9rYTUpkBGG93CSgnHhqxQWo6yQU134G86H W19rQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvkeekudefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepveevjeffuddvte eiueetgfeukedvfeeiuedvveelfeeghfduleeftedvgfefgeejnecuvehluhhsthgvrhfu ihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtg drthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthho peejkedvgeelseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrh gvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 7 May 2025 19:05:22 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v2 3/3] gnu: librewolf: Update to 138.0.1-2 [security fixes]. Date: Wed, 7 May 2025 16:05:16 -0700 Message-ID: <20250507230516.3882-3-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250507230516.3882-1-ian@retrospec.tv> References: <20250507230516.3882-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Contains fixes for: CVE-2025-2817: Privilege escalation in Firefox Updater CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor CVE-2025-4086: Specially crafted filename could be used to obscure download type CVE-2025-4087: Unsafe attribute access during XPath parsing CVE-2025-4088: Cross-site request forgery via storage access API redirects CVE-2025-4089: Potential local code execution in "copy as cURL" command CVE-2025-4090: Leaked library paths in Firefox for Android CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 * gnu/packages/librewolf.scm (librewolf): Update to 138.0.1-2. * gnu/packages/patches/torbrowser-compare-paths.patch: Adjust for new version. Change-Id: I2cc11b758dbc77f7ec3451faa89918b08c890729 --- gnu/packages/librewolf.scm | 12 ++++++------ .../patches/torbrowser-compare-paths.patch | 17 ++++------------- 2 files changed, 10 insertions(+), 19 deletions(-) diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index bcacbf8dd1..8a8dbd05ad 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -207,17 +207,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250416062358") +(define %librewolf-build-id "20250502155055") (define-public librewolf (package (name "librewolf") - (version "137.0.2-1") + (version "138.0.1-2") (source (make-librewolf-source #:version version - #:firefox-hash "01yd5cq6qgww6w2kq1bchy9j81blim15kdz7bvx8n512m2x3mz06" - #:librewolf-hash "0vy1xvjwgc4vd9q3laakx6lrsy4ghpdr98vm9lmx86amg9gak5ix" + #:firefox-hash "0aybkr6zan7klybc1r455lgzz524rmhzj85g6xv88vw70dibk54q" + #:librewolf-hash "0c98hjhfklfbi2biib7bk5qijp6x77hmp8ska2fy3lzi78lsz08z" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -639,7 +639,7 @@ (define (runpaths-of-input label) libxt mesa mit-krb5 - nspr + nspr-4.36 nss-rapid pango pciutils @@ -665,7 +665,7 @@ (define (runpaths-of-input label) pkg-config python rust-librewolf - rust-cbindgen-0.26 + rust-cbindgen-0.28 which yasm)) (native-search-paths diff --git a/gnu/packages/patches/torbrowser-compare-paths.patch b/gnu/packages/patches/torbrowser-compare-paths.patch index 7d4d5fdb78..8e880bf390 100644 --- a/gnu/packages/patches/torbrowser-compare-paths.patch +++ b/gnu/packages/patches/torbrowser-compare-paths.patch @@ -5,20 +5,11 @@ name. --- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs -@@ -3606,6 +3606,7 @@ +@@ -3753,6 +3753,7 @@ if ( newAddon || oldAddon.updateDate != xpiState.mtime || + oldAddon.path != xpiState.path || - (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) - ) { - newAddon = this.updateMetadata( -@@ -3614,8 +3615,6 @@ - xpiState, - newAddon - ); -- } else if (oldAddon.path != xpiState.path) { -- newAddon = this.updatePath(installLocation, oldAddon, xpiState); - } else if (aUpdateCompatibility || aSchemaChange) { - newAddon = this.updateCompatibility( - installLocation, + (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) || + // update addon metadata if the addon in bundled into + // the omni jar and version or the resource URI pointing -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Tue May 13 20:25:18 2025 Received: (at 78249) by debbugs.gnu.org; 14 May 2025 00:25:18 +0000 Received: from localhost ([127.0.0.1]:37019 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uEzvy-00048i-0k for submit@debbugs.gnu.org; Tue, 13 May 2025 20:25:18 -0400 Received: from fout-a7-smtp.messagingengine.com ([103.168.172.150]:56669) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uEzvu-00046c-MS for 78249@debbugs.gnu.org; Tue, 13 May 2025 20:25:16 -0400 Received: from phl-compute-06.internal (phl-compute-06.phl.internal [10.202.2.46]) by mailfout.phl.internal (Postfix) with ESMTP id 28613138019F; Tue, 13 May 2025 20:25:09 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-06.internal (MEProxy); Tue, 13 May 2025 20:25:09 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1747182309; x=1747268709; bh=rme3XHFYtHl35B5X5XoHA dJZFxGgI71f5XKddJ7fAXU=; b=HbzGZVk0QB4jCSP9xeiokVJR7ma4YjKzilqRr XOYsukQNN4Czu3yGAAgdwi/kZi+0n2cjfYduUJc+GrVxowmYq47b9UcIVjaRGPOP raP+Vr40kyj9jg+/I9KRfRlR38zQcZndjo5Xu1U93JEjcumu8UQZlTo/JjM8fivs +YgLrnExqaGLBo5GRI9+Bqqcy3cW4Vt1CBI52KFmLXk01RthbGtPu3fbKUOrd8+u 3k7Ef1Pa+yPk+pSsoNSBasKPA56tmC8WuLBZm0Fw0XkwPbr3xkMIi8IBON/islcr 5VCKJ07PkrIQf7AAmz/va8ubI51gh9uOlX2VW0JH8hv8Nfqsw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1747182309; x=1747268709; bh=rme3XHFYtHl35B5X5XoHAdJZFxGgI71f5XK ddJ7fAXU=; b=rat5ODwyc9GICPf/RfjBiNQPlxPKBfEf1kplvslaFM6lv8iaeHF mGzjWZxZEFyb+gElx+ygvFZKawb/6DAbKx9PCaBVaAq+KVMhylSrryI/g1yZUGDh 27at9ANgHQZ44i5VWY0lb96OmTklBbDR9UAzugx+sv+b6siwCGn+GZtomayqUDy6 Ng2izyeMYEN/iSAXYq5u5aqpEUysuYUwJXjp4/i+T9PQ2ZCj7ve//uRbrDPdWbRM HBqbpAj6wy1Q85fDuD+LPui2TMd1or3CxfLpL76gop84fntbfo487UHm9oE4FwI7 YlZrXf9I7Qubn4dKIEKj6R/Jx0Dezn4y7xQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeftdehheegucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfdvjefhlefhfedtie elleefvdfhfeffteefueetlefgvdelffelvefgfeeukeejnecuffhomhgrihhnpehmohii ihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhm ohguvgepshhmthhpohhuthdprhgtphhtthhopeejkedvgeelseguvggssghughhsrdhgnh hurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 13 May 2025 20:25:08 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v3 1/3] gnu: Add nspr-4.36. Date: Tue, 13 May 2025 17:25:03 -0700 Message-ID: <20250514002505.19495-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nspr-4.36): New variable. Change-Id: I5c7c4f5f96e3b9ed763c63c9b5b5996a63d45985 --- gnu/packages/nss.scm | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 8bcb593ed75..7a8c6b075d7 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -95,6 +95,19 @@ (define-public nspr in the Mozilla clients.") (license license:mpl2.0))) +(define-public nspr-4.36 + (package + (inherit nspr) + (version "4.36") + (source (origin + (method url-fetch) + (uri (string-append + "https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v" + version "/src/nspr-" version ".tar.gz")) + (sha256 + (base32 + "15b83ipjxrmw0909l5qqz13pbarhp50d6i58vgjx4720y4bw7pjm")))))) + (define-public nspr-4.32 (package (inherit nspr) -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Tue May 13 20:25:23 2025 Received: (at 78249) by debbugs.gnu.org; 14 May 2025 00:25:23 +0000 Received: from localhost ([127.0.0.1]:37022 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uEzw2-0004BP-F7 for submit@debbugs.gnu.org; Tue, 13 May 2025 20:25:22 -0400 Received: from fhigh-a2-smtp.messagingengine.com ([103.168.172.153]:39211) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uEzvw-00046m-0M for 78249@debbugs.gnu.org; Tue, 13 May 2025 20:25:16 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id D2B4411400E7; Tue, 13 May 2025 20:25:10 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Tue, 13 May 2025 20:25:10 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747182310; x= 1747268710; bh=EcSFHWKfAT+gJZ8K1AZajM6ba6NoTAnkILbbrO3ZJM4=; b=J sSHJotcqq6tocvyn3bRv22dXbEsv+8pi+ajirE1OeiGaDFfAkBi7yOOYvQy2vUOd WegXbdTvJf/JsCIMly0nBBR/i3ylKm92m410ytiTYlTfMv2/rUKsvUOOKavkTGDP RicMU7Ve5ogatrttVb9BnyNDSMHkFYsj/MPJyaALu4X1JT3Xxkp/lGvVtL/BSUlf iad0WkmvMx+FBMnjlr+cKmvKL7fsQ7LQtZK/F+CzdPEZJHnk1HawLm1wMur6RAOY 04nDImO9c40sldMuSGyeyrW3AR4vE/8lHqkmkEBOKwjqdHqH66wAH3Mih8B7d0sz 2EK9QMOzPSprXKTrrAm3w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747182310; x=1747268710; bh=E cSFHWKfAT+gJZ8K1AZajM6ba6NoTAnkILbbrO3ZJM4=; b=FuBHQiTnjswRvE1LJ ncja4WvLtIr6z3zYLTiJB8bPWh/FcWxQ2YPYn6yQPzCTB2I5keEKRnLaXlzvYebq 8dISj6HwHTrLNC7S/Pvbw+iY4FmDU/XFqyswSYIV184TWjBnNLGvaliXhJlzcsTc rXpmM1W3AJ8uGgcKHjdX5i/Bx7yI+/1cts/E9Njzzv0VYaM/F11aB6Ww/riAoxaO YILbMHdB0CyV7NShMLLbvGzrK+9Ufion55SRshqlok3YJMdHSoYMPb7fRMKplN/r 33jFqAK8fcumaTBN7N7Un4OQouygBIFfviNCH/IU23jvyvUYrQ5Gx9kaAsDph2Xe qv3+A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeftdehheegucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepveevjeffuddvte eiueetgfeukedvfeeiuedvveelfeeghfduleeftedvgfefgeejnecuvehluhhsthgvrhfu ihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtg drthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthho peejkedvgeelseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrh gvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 13 May 2025 20:25:10 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v3 3/3] gnu: librewolf: Update to 138.0.1-2 [security fixes]. Date: Tue, 13 May 2025 17:25:05 -0700 Message-ID: <20250514002505.19495-3-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250514002505.19495-1-ian@retrospec.tv> References: <20250514002505.19495-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Contains fixes for: CVE-2025-2817: Privilege escalation in Firefox Updater CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor CVE-2025-4086: Specially crafted filename could be used to obscure download type CVE-2025-4087: Unsafe attribute access during XPath parsing CVE-2025-4088: Cross-site request forgery via storage access API redirects CVE-2025-4089: Potential local code execution in "copy as cURL" command CVE-2025-4090: Leaked library paths in Firefox for Android CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 * gnu/packages/librewolf.scm (librewolf): Update to 138.0.1-2. * gnu/packages/patches/librewolf-compare-paths.patch: New file. Change-Id: I2cc11b758dbc77f7ec3451faa89918b08c890729 --- gnu/packages/librewolf.scm | 14 +++++++------- .../patches/librewolf-compare-paths.patch | 15 +++++++++++++++ 2 files changed, 22 insertions(+), 7 deletions(-) create mode 100644 gnu/packages/patches/librewolf-compare-paths.patch diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index bcacbf8dd15..5b3c3a4a837 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -191,7 +191,7 @@ (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) #$output))))) (patches (search-patches - "torbrowser-compare-paths.patch" + "librewolf-compare-paths.patch" "librewolf-use-system-wide-dir.patch" "librewolf-add-store-to-rdd-allowlist.patch"))))) @@ -207,17 +207,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250416062358") +(define %librewolf-build-id "20250502155055") (define-public librewolf (package (name "librewolf") - (version "137.0.2-1") + (version "138.0.1-2") (source (make-librewolf-source #:version version - #:firefox-hash "01yd5cq6qgww6w2kq1bchy9j81blim15kdz7bvx8n512m2x3mz06" - #:librewolf-hash "0vy1xvjwgc4vd9q3laakx6lrsy4ghpdr98vm9lmx86amg9gak5ix" + #:firefox-hash "0aybkr6zan7klybc1r455lgzz524rmhzj85g6xv88vw70dibk54q" + #:librewolf-hash "0c98hjhfklfbi2biib7bk5qijp6x77hmp8ska2fy3lzi78lsz08z" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -639,7 +639,7 @@ (define (runpaths-of-input label) libxt mesa mit-krb5 - nspr + nspr-4.36 nss-rapid pango pciutils @@ -665,7 +665,7 @@ (define (runpaths-of-input label) pkg-config python rust-librewolf - rust-cbindgen-0.26 + rust-cbindgen-0.28 which yasm)) (native-search-paths diff --git a/gnu/packages/patches/librewolf-compare-paths.patch b/gnu/packages/patches/librewolf-compare-paths.patch new file mode 100644 index 00000000000..8e880bf3908 --- /dev/null +++ b/gnu/packages/patches/librewolf-compare-paths.patch @@ -0,0 +1,15 @@ +See comment in gnu/build/icecat-extension.scm. +This is only needed while icecat and torbrowser remain on +different ESR versions as the patched file has changed its +name. + +--- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs ++++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +@@ -3753,6 +3753,7 @@ + if ( + newAddon || + oldAddon.updateDate != xpiState.mtime || ++ oldAddon.path != xpiState.path || + (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) || + // update addon metadata if the addon in bundled into + // the omni jar and version or the resource URI pointing -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Tue May 13 20:25:23 2025 Received: (at 78249) by debbugs.gnu.org; 14 May 2025 00:25:23 +0000 Received: from localhost ([127.0.0.1]:37024 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uEzw2-0004CF-Vw for submit@debbugs.gnu.org; Tue, 13 May 2025 20:25:23 -0400 Received: from fhigh-a2-smtp.messagingengine.com ([103.168.172.153]:37215) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uEzvv-00046i-Cn for 78249@debbugs.gnu.org; Tue, 13 May 2025 20:25:16 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id 1A1E711400B1; Tue, 13 May 2025 20:25:10 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Tue, 13 May 2025 20:25:10 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747182310; x= 1747268710; bh=+Mw2i03h6v2+ZLt8kmlYhentcr620cttQxkSycYFbzE=; b=d 2KGB0vIpiLESU94gLBqn5d+FqqYVhEBJdbyJFudLbMgznGRHUlS87Bd0iF1oJwX/ HS96JBP/ZEFjc1rJjWbRiTHhphP640FpK1YPweO2ABs/3I6H1kz4rOLo9MeFUApb tj76FM4JDdAsf7futx2/EJmiy3jaSdWUwvlJ5+ImszUkAcXmx4Nvr0lVC8hBt2lD va192oEdxQdHwveiqFEGvBqojKwVRfWjLcNO/593h/W7t/PTzaPD5MofPkq55i20 w0+3PUG3hG6AFBfnLKj9QgynoKcJHdXBGAQ3rlWpEb7EOJ+FCEunEvn8J1B6bYIY VNVWxch6LHXCXaiQK65mA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747182310; x=1747268710; bh=+ Mw2i03h6v2+ZLt8kmlYhentcr620cttQxkSycYFbzE=; b=PBV5QCFS3lNKRulV8 k1vYmSa1J+2uj7aW4CWRdSGevdXNG4nYkCp5xyRzWFPbL9BocVRk6A8A83mEsOeP +23kOTbFy06pr+m+xwcJZNaV7/h5xvq2SMrX6KpMQiJ+eNxwM1sWN4KYyK0/mp8X T/AsrhvN1CyQRKSZZrtzsFXeWg5iAi6/M+sDDeF+IhlrE8VO7S4bsNb7SIglP8BU psnQTv9gTTnZK+9V7MVBola17rPoc7atDSoELhkpGPp525Pvu4ZkWP/0jeZDnpHj aFRgINVtSt2Dn1QH5ZACQQso504vVNMVbuezccYvNHYepDu+OUmyA+NE+vdyaFM5 4zKsQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeftdehheegucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepvdfgveffvdekle dttdetjeektdevteegfefhvdefhfffffejudetkeduieekudelnecuffhomhgrihhnpegs rggushhslhdrtghomhdpmhhoiihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdp nhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeekvd egleesuggvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhho shhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 13 May 2025 20:25:09 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v3 2/3] gnu: nss-rapid: Update to 3.110. Date: Tue, 13 May 2025 17:25:04 -0700 Message-ID: <20250514002505.19495-2-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250514002505.19495-1-ian@retrospec.tv> References: <20250514002505.19495-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nss-rapid): Update to 3.110. Change-Id: Ibdae3c70066a70cdde560c5d8f9bac797cd2cd99 --- gnu/packages/nss.scm | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 7a8c6b075d7..24f4b603694 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -347,7 +347,7 @@ (define-public nss-rapid (package (inherit nss) (name "nss-rapid") - (version "3.109") + (version "3.110") (source (origin (inherit (package-source nss)) (uri (let ((version-with-underscores @@ -358,11 +358,19 @@ (define-public nss-rapid "nss-" version ".tar.gz"))) (sha256 (base32 - "12y156frnhaqvwkla1c07gqr2lnp4yb3619g4088kk8qc4jnr95y")))) + "09xfndqj07wy28l7jnk01gqa4bh55nz6cldlp5qpg8120k211mlw")))) (arguments (substitute-keyword-arguments (package-arguments nss) ((#:phases phases) #~(modify-phases #$phases + (add-after 'unpack 'neutralize-network-test + ;; Test tries to resolve `wrong.host.badssl.com' which fails due + ;; to no networking in the build environment. + ;; Behavior changed as of 3.110. + (lambda _ + (substitute* "nss/tests/ssl/ssl.sh" + ((" ssl_policy_pkix_ocsp" all) + (string-append "#" all))))) (replace 'check (lambda* (#:key tests? #:allow-other-keys) (if tests? @@ -390,8 +398,11 @@ (define-public nss-rapid ;; leading to test failures: ;; . To ;; work around that, set the time to roughly the release date. - (invoke "faketime" "2025-03-01" "./nss/tests/all.sh")) + (invoke "faketime" "2025-03-28" "./nss/tests/all.sh")) (format #t "test suite not run~%")))))))) + (propagated-inputs + (modify-inputs (package-propagated-inputs nss) + (replace "nspr" nspr-4.36))) (synopsis "Network Security Services (Rapid Release)") (description "Network Security Services (@dfn{NSS}) is a set of libraries designed to -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 15 01:11:32 2025 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 05:11:32 +0000 Received: from localhost ([127.0.0.1]:49509 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFQsT-0006Vc-7T for submit@debbugs.gnu.org; Thu, 15 May 2025 01:11:32 -0400 Received: from fhigh-b6-smtp.messagingengine.com ([202.12.124.157]:50841) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFQsP-0006UF-U8 for 78249@debbugs.gnu.org; Thu, 15 May 2025 01:11:27 -0400 Received: from phl-compute-12.internal (phl-compute-12.phl.internal [10.202.2.52]) by mailfhigh.stl.internal (Postfix) with ESMTP id A39B525400A7; Thu, 15 May 2025 01:11:19 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-12.internal (MEProxy); Thu, 15 May 2025 01:11:19 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1747285879; x=1747372279; bh=rme3XHFYtHl35B5X5XoHA dJZFxGgI71f5XKddJ7fAXU=; b=WUNnp3UMdfBPhJ0LCLOpYHHf85YyB5U7TBZH+ WSIa94wFNvAeEuNxXzyWk1ESmbWJjUKAZDnCvq68lOliS6PGsDpAjM2hkpVbxsby CXOK8t2KT32itNuPYBI2cenActcBHQDBBOux+GBUP4WGqXl/N4rqZshOb1GiF+EH 61y44R/0mps735TAwSULpCjOFIhnudG9R1rBStpqtEtu8pGkxxifCSbD15Lbg9jl V0uH31BJvxj94z8Mfxnrd5x+EXhIB2lqhtEQHq/0bwC3UktGNNVAWuF4J0264Kmp pH9D34lbvEkdWLoYAs1tGhQOiirY0pJpTUL5A340BpLykz4sQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1747285879; x=1747372279; bh=rme3XHFYtHl35B5X5XoHAdJZFxGgI71f5XK ddJ7fAXU=; b=GOg/+K/6p+wEslI53pTF8gaUoE+zJlGG+HerOkiZCsE3onKsHKU vh0byagDsPN/kwczWWruPesETp4c3CfTf9WjfEhpXbdEMNmbxFSDLn0LBmRwzPyf eHJqu9zhDBd9lrAHJeHL75cp3NysQfqN6b12z1jHxFtxGTSKw1fKZ0fXJL5XHDHd V+P3/EcUVOWxoZ8Piq1scEMx/o8OSsZ/c6oH8JWRw4klBx9XUCWH17CuJ1o7QcSO H6t0VonY3sZ/KVlxPJo2kljPb52Eg/sVMixq+aKNKkQsjT3saWY/ayeMad7adejf 7tEQmrThk3URgp6XYZWgfD5SV4ua9HYYcXw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeftdekleelucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfdvjefhlefhfedtie elleefvdfhfeffteefueetlefgvdelffelvefgfeeukeejnecuffhomhgrihhnpehmohii ihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhm ohguvgepshhmthhpohhuthdprhgtphhtthhopeejkedvgeelseguvggssghughhsrdhgnh hurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 01:11:18 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v4 1/3] gnu: Add nspr-4.36. Date: Wed, 14 May 2025 22:11:11 -0700 Message-ID: <20250515051113.2978-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nspr-4.36): New variable. Change-Id: I5c7c4f5f96e3b9ed763c63c9b5b5996a63d45985 --- gnu/packages/nss.scm | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 8bcb593ed75..7a8c6b075d7 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -95,6 +95,19 @@ (define-public nspr in the Mozilla clients.") (license license:mpl2.0))) +(define-public nspr-4.36 + (package + (inherit nspr) + (version "4.36") + (source (origin + (method url-fetch) + (uri (string-append + "https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v" + version "/src/nspr-" version ".tar.gz")) + (sha256 + (base32 + "15b83ipjxrmw0909l5qqz13pbarhp50d6i58vgjx4720y4bw7pjm")))))) + (define-public nspr-4.32 (package (inherit nspr) -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 15 01:11:39 2025 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 05:11:39 +0000 Received: from localhost ([127.0.0.1]:49511 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFQsc-0006X2-IQ for submit@debbugs.gnu.org; Thu, 15 May 2025 01:11:39 -0400 Received: from fhigh-b6-smtp.messagingengine.com ([202.12.124.157]:37111) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFQsQ-0006UN-8I for 78249@debbugs.gnu.org; Thu, 15 May 2025 01:11:29 -0400 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfhigh.stl.internal (Postfix) with ESMTP id C88BD25400AB; Thu, 15 May 2025 01:11:20 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Thu, 15 May 2025 01:11:20 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747285880; x= 1747372280; bh=+Mw2i03h6v2+ZLt8kmlYhentcr620cttQxkSycYFbzE=; b=W rESALW2rWRFDkrsym19rs2+UyBt+usmqclvH+3tPmJFp27vuy6Dd9h87clcogZzo jNMZCid/4xgY4KUpcM73JqT+CfJ3oJEu14x1+f0w+hkDr630jA11CdzNDlqsHE3W /nlSXFHGs34DXybW9Co3M1AUEsEFXne1nosGEx63D99LOpvphdKyOikUBxbLD/3k dfFCXOPg8JJj2OyNfE57c1XPmg3vCoZB7QNBARs9YxCeAYLjaVix/aVdjndYIefJ GN+Sh51NnEeQlxY2NlpdJYrqWI714fy0mpLU5VdbcdF9XTfn3cTwaIaGc/n9EWJA lzNnDJcErqkyQZHIGDAEg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747285880; x=1747372280; bh=+ Mw2i03h6v2+ZLt8kmlYhentcr620cttQxkSycYFbzE=; b=smhFrMsREQy5IPSsj vwr6ytT8YlV9iOR6k8qzAcQcL8Z5DNGwQuxCGabKEEILjX+Azb8tNmPVUaPnzLFT pOhtfybOYFnGvmp7TgZK3k8b5zqDf+HWW3Ck/es9YQbeAEMqT4/+beds5ME1/L8H 1IoAo1vhw6V6+LzncAWJCTjz8QeQUdStQrA0i8IvqtLO32c+aHstpkBopcdEYVHx nM6sSTtf/f9bca6TFtOQhEGBvgsrA0u1jiKQWLzoRiSYo7k2TRG/JRzm0Qvn7xms lREuxyIq5KoaJGDepVoY9MrkkLir2RWTmzMX2yIwykdb4QCeLlLpzttTIDhRsgIo GD9vg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeftdekleelucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepvdfgveffvdekle dttdetjeektdevteegfefhvdefhfffffejudetkeduieekudelnecuffhomhgrihhnpegs rggushhslhdrtghomhdpmhhoiihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdp nhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeekvd egleesuggvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhho shhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 01:11:19 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v4 2/3] gnu: nss-rapid: Update to 3.110. Date: Wed, 14 May 2025 22:11:12 -0700 Message-ID: <20250515051113.2978-2-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250515051113.2978-1-ian@retrospec.tv> References: <20250515051113.2978-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nss-rapid): Update to 3.110. Change-Id: Ibdae3c70066a70cdde560c5d8f9bac797cd2cd99 --- gnu/packages/nss.scm | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 7a8c6b075d7..24f4b603694 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -347,7 +347,7 @@ (define-public nss-rapid (package (inherit nss) (name "nss-rapid") - (version "3.109") + (version "3.110") (source (origin (inherit (package-source nss)) (uri (let ((version-with-underscores @@ -358,11 +358,19 @@ (define-public nss-rapid "nss-" version ".tar.gz"))) (sha256 (base32 - "12y156frnhaqvwkla1c07gqr2lnp4yb3619g4088kk8qc4jnr95y")))) + "09xfndqj07wy28l7jnk01gqa4bh55nz6cldlp5qpg8120k211mlw")))) (arguments (substitute-keyword-arguments (package-arguments nss) ((#:phases phases) #~(modify-phases #$phases + (add-after 'unpack 'neutralize-network-test + ;; Test tries to resolve `wrong.host.badssl.com' which fails due + ;; to no networking in the build environment. + ;; Behavior changed as of 3.110. + (lambda _ + (substitute* "nss/tests/ssl/ssl.sh" + ((" ssl_policy_pkix_ocsp" all) + (string-append "#" all))))) (replace 'check (lambda* (#:key tests? #:allow-other-keys) (if tests? @@ -390,8 +398,11 @@ (define-public nss-rapid ;; leading to test failures: ;; . To ;; work around that, set the time to roughly the release date. - (invoke "faketime" "2025-03-01" "./nss/tests/all.sh")) + (invoke "faketime" "2025-03-28" "./nss/tests/all.sh")) (format #t "test suite not run~%")))))))) + (propagated-inputs + (modify-inputs (package-propagated-inputs nss) + (replace "nspr" nspr-4.36))) (synopsis "Network Security Services (Rapid Release)") (description "Network Security Services (@dfn{NSS}) is a set of libraries designed to -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 15 01:11:40 2025 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 05:11:41 +0000 Received: from localhost ([127.0.0.1]:49513 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFQsd-0006X8-Fq for submit@debbugs.gnu.org; Thu, 15 May 2025 01:11:40 -0400 Received: from fhigh-b6-smtp.messagingengine.com ([202.12.124.157]:44711) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFQsS-0006UZ-3F for 78249@debbugs.gnu.org; Thu, 15 May 2025 01:11:29 -0400 Received: from phl-compute-03.internal (phl-compute-03.phl.internal [10.202.2.43]) by mailfhigh.stl.internal (Postfix) with ESMTP id A214725400BF; Thu, 15 May 2025 01:11:22 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Thu, 15 May 2025 01:11:22 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747285882; x= 1747372282; bh=uNZpeLIiKUKup4o08XEoA4RHUcRL+wp0x2RERJMcj5k=; b=W ibTRcLK9o/FGxesLQ+QWzt/X8VbN8TNEow3JzIFb7NI89zkCBvGjrgUxCzM1IKXc HCB9ahqj9vUmbLdmZAepQgP3Ps1YsvtRX5UbLqEnNih/+4TF/oN4Sfya1X/KNA+3 5LiikISjKW+mpdS4aAh24F8yBNtps5SjeklpwvhxqTohekJ0nrJhx/b1W+Z+Q4RL 2/SwMP/5yu81sLcGRuA9hHMpL2LK1it4yq59+XqRjU297Y6cLOmoYPdLvpYqbvQ6 Cn4Hrv6MMqVA+GJ9efSdrJYem5Ibn4qrVXNyVcEQhthQxLPAUvefsugtcIEpuCbZ hETI3rgckKCfvfguh0JuQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747285882; x=1747372282; bh=u NZpeLIiKUKup4o08XEoA4RHUcRL+wp0x2RERJMcj5k=; b=An/ZjsRdpwO65QaXT UpDGaFm290ZsAX+n1RHnDfPAB43de2v0oAS3DLkS4NzRwu9+AK3T2sCa7FZzHeOC WCZZah7npw2yj3Pka+rMymcClnbTpNUF0JkHWv019QPyqHBWpZIZPnISFNRYgyK/ YnPXXo7jg0qC/CJcdS0gm6AxeE7rizbtNbmwBBiIU5nVnwpqkCTWIwVGqrEEzDss b8Q6QWLyRBLUuzVjDSWRiSIB9qEY4P/bIMdqNF2Mht8aO9d0usr6uIM7a6TyRDhR dHRPLS3ZMsYKOLlqLKw6R1dsptOVHnOw5d//x4mDn7X5W46e66qK0nDqJdaloTja kwGpg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeftdekleelucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepveevjeffuddvte eiueetgfeukedvfeeiuedvveelfeeghfduleeftedvgfefgeejnecuvehluhhsthgvrhfu ihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtg drthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthho peejkedvgeelseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrh gvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 01:11:21 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v4 3/3] gnu: librewolf: Update to 138.0.3-1 [security fixes]. Date: Wed, 14 May 2025 22:11:13 -0700 Message-ID: <20250515051113.2978-3-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250515051113.2978-1-ian@retrospec.tv> References: <20250515051113.2978-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Contains fixes for: CVE-2025-2817: Privilege escalation in Firefox Updater CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor CVE-2025-4086: Specially crafted filename could be used to obscure download type CVE-2025-4087: Unsafe attribute access during XPath parsing CVE-2025-4088: Cross-site request forgery via storage access API redirects CVE-2025-4089: Potential local code execution in "copy as cURL" command CVE-2025-4090: Leaked library paths in Firefox for Android CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 * gnu/packages/librewolf.scm (librewolf): Update to 138.0.3-1. * gnu/packages/patches/librewolf-compare-paths.patch: New file. Change-Id: I2cc11b758dbc77f7ec3451faa89918b08c890729 --- gnu/packages/librewolf.scm | 14 +++++++------- .../patches/librewolf-compare-paths.patch | 15 +++++++++++++++ 2 files changed, 22 insertions(+), 7 deletions(-) create mode 100644 gnu/packages/patches/librewolf-compare-paths.patch diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index bcacbf8dd15..063a89420fe 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -191,7 +191,7 @@ (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) #$output))))) (patches (search-patches - "torbrowser-compare-paths.patch" + "librewolf-compare-paths.patch" "librewolf-use-system-wide-dir.patch" "librewolf-add-store-to-rdd-allowlist.patch"))))) @@ -207,17 +207,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250416062358") +(define %librewolf-build-id "20250502155055") (define-public librewolf (package (name "librewolf") - (version "137.0.2-1") + (version "138.0.3-1") (source (make-librewolf-source #:version version - #:firefox-hash "01yd5cq6qgww6w2kq1bchy9j81blim15kdz7bvx8n512m2x3mz06" - #:librewolf-hash "0vy1xvjwgc4vd9q3laakx6lrsy4ghpdr98vm9lmx86amg9gak5ix" + #:firefox-hash "1r0kam26cz5rz39n6zcc2hrbav6dxlfrsa0qhhfjlnv33ns3lzx2" + #:librewolf-hash "1bf9sa5radjr7g6ng7kqy2ss13c0q6vkq9dfzj5y998ifxw19s4c" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -639,7 +639,7 @@ (define (runpaths-of-input label) libxt mesa mit-krb5 - nspr + nspr-4.36 nss-rapid pango pciutils @@ -665,7 +665,7 @@ (define (runpaths-of-input label) pkg-config python rust-librewolf - rust-cbindgen-0.26 + rust-cbindgen-0.28 which yasm)) (native-search-paths diff --git a/gnu/packages/patches/librewolf-compare-paths.patch b/gnu/packages/patches/librewolf-compare-paths.patch new file mode 100644 index 00000000000..8e880bf3908 --- /dev/null +++ b/gnu/packages/patches/librewolf-compare-paths.patch @@ -0,0 +1,15 @@ +See comment in gnu/build/icecat-extension.scm. +This is only needed while icecat and torbrowser remain on +different ESR versions as the patched file has changed its +name. + +--- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs ++++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +@@ -3753,6 +3753,7 @@ + if ( + newAddon || + oldAddon.updateDate != xpiState.mtime || ++ oldAddon.path != xpiState.path || + (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) || + // update addon metadata if the addon in bundled into + // the omni jar and version or the resource URI pointing -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 15 10:16:20 2025 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 14:16:20 +0000 Received: from localhost ([127.0.0.1]:54764 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFZNk-0003h7-6b for submit@debbugs.gnu.org; Thu, 15 May 2025 10:16:20 -0400 Received: from fhigh-b3-smtp.messagingengine.com ([202.12.124.154]:51103) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFZNa-0003gV-Tc for 78249@debbugs.gnu.org; Thu, 15 May 2025 10:16:12 -0400 Received: from phl-compute-09.internal (phl-compute-09.phl.internal [10.202.2.49]) by mailfhigh.stl.internal (Postfix) with ESMTP id 85AC925400C6; Thu, 15 May 2025 10:16:04 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-09.internal (MEProxy); Thu, 15 May 2025 10:16:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1747318564; x=1747404964; bh=rme3XHFYtHl35B5X5XoHA dJZFxGgI71f5XKddJ7fAXU=; b=nRbxe6k1fA45HBSeC4aYGFBYJ46DeUqYhA/Fi DXyGu6ZiuqrXUzPevuTgsgM70ysAuExef2wtw5DVEkTZPP2wzHOKsoEcz2QibgOi NVdtK60g+wPAfks9go3gypUv/7CXhsjQungrxo3iQ6E75Igx0fEZel9AYFsXHkHv QrRQpWkSUf8pvSok2neR6JnFPFYIgtSgDWWrpt8daf2X0gXyagVsGBOoimO6eoEd ob7yqvS0pZl5PvdZ32wpkkmmGlVbRljJfEAy22xY6UI996SIMc4mqABTtONNbHqH apf+HiUFYHe12G8h0GhVIVHtrXeiDQTRYFLCjC56ab9qrg7bw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1747318564; x=1747404964; bh=rme3XHFYtHl35B5X5XoHAdJZFxGgI71f5XK ddJ7fAXU=; b=lWRACFx98mLcMLwt29oFCUmYFFf3rl4InerGIQGTfSu3M8Wu0/9 m/LgyMiImSmlFm7W+UDvUtw4vFElwO3lbEMvpJ3I7nr8Cm7bKuUcnwCzf30YH3uU Fu2Z0OJQjwetf4pHfwzqQZb64Msz1jpMtzOICphX/tGkmMBbD92wCNsCefxAsHD9 muoEsddkftPfxMzwbiNg4pYh+oKmsirlUubVYlyXsuLT9xnuXeAdNLh2/jZoY6Li ykPnfNjl3Kjyh31iukxCm4BnGkWwjGfCjF9I2MO6l2YOOHgg0YhQ1fzfsBBohYWt Z9KRYYp0FMJ9VO/lt2k7+RaD/AND+HEgRMw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefuddttdekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfdvjefhlefhfedtie elleefvdfhfeffteefueetlefgvdelffelvefgfeeukeejnecuffhomhgrihhnpehmohii ihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhm ohguvgepshhmthhpohhuthdprhgtphhtthhopeejkedvgeelseguvggssghughhsrdhgnh hurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 10:16:03 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v5 1/3] gnu: Add nspr-4.36. Date: Thu, 15 May 2025 07:15:58 -0700 Message-ID: <20250515141600.4759-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nspr-4.36): New variable. Change-Id: I5c7c4f5f96e3b9ed763c63c9b5b5996a63d45985 --- gnu/packages/nss.scm | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 8bcb593ed75..7a8c6b075d7 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -95,6 +95,19 @@ (define-public nspr in the Mozilla clients.") (license license:mpl2.0))) +(define-public nspr-4.36 + (package + (inherit nspr) + (version "4.36") + (source (origin + (method url-fetch) + (uri (string-append + "https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v" + version "/src/nspr-" version ".tar.gz")) + (sha256 + (base32 + "15b83ipjxrmw0909l5qqz13pbarhp50d6i58vgjx4720y4bw7pjm")))))) + (define-public nspr-4.32 (package (inherit nspr) -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 15 10:16:21 2025 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 14:16:21 +0000 Received: from localhost ([127.0.0.1]:54766 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFZNk-0003hF-TH for submit@debbugs.gnu.org; Thu, 15 May 2025 10:16:21 -0400 Received: from fout-b5-smtp.messagingengine.com ([202.12.124.148]:41385) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFZNc-0003gX-0G for 78249@debbugs.gnu.org; Thu, 15 May 2025 10:16:13 -0400 Received: from phl-compute-09.internal (phl-compute-09.phl.internal [10.202.2.49]) by mailfout.stl.internal (Postfix) with ESMTP id 40BDB1140163; Thu, 15 May 2025 10:16:06 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-09.internal (MEProxy); Thu, 15 May 2025 10:16:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747318566; x= 1747404966; bh=7u0av8IJDVDlm2tYtLJIaDV/yYqYO8uQSMaWwKsaycY=; b=K dwiPNenQhjjK04d22rSD0DO45ulhWppUBnS+NsRsc5toHqmryIH42qSkjZ2QJBSr S6PU3pxC5o30LIT1fHRiSziWQw9y4u8IbRgqTxc+FydBVtPYtgf+1Aq9gpQ6vhkr xf2OiUfuvBOtFb/3Nu94VWDl+efaiIhSy3dJ74tHGnciNQ4Egh3AQwlCTAydb51g awonuZsd8D63nfXoI6c4B3bFapcvEaIgLm1ld2jnwjeiHRo7EKNzYMnIVXnwpvwt l4hIA9xVHNHbGfaKKDqWOjLg3QceWpY4kQfjtSc0DwaercBY/mBj4wPJxh11fgEV YnSVVRUwwVBj3SojotyKw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747318566; x=1747404966; bh=7 u0av8IJDVDlm2tYtLJIaDV/yYqYO8uQSMaWwKsaycY=; b=XDhtF6i3yTMGsiBip EuznkrpLG9YxqrppwMp58o7SNLPL6fxwDVA7BSKBrrW6BpaDUiZpy1SoIuE76IyN 5NcLT2+kO6inEaEFWYmFguuRPVjSu/qmIVv7VRtXlPD8wjk3obUDyXTWsMh5wtG/ JI5SlhH8gT4grZucpR/TA10sq7kT7AsN6uCovJkBOkhbWjpLSwG7NkPzLVocd5Ll uJipG5pOk9ELbFJKGT3GJ9Cxs8m42z0+9vsFl+x9VVJvgufM8DW1bEaOuJbRWWuD sj01kIIvWyipGZIstccNEeTumlvUQDsHMQg/TuqSOTrKlAKY6trxn9RoB7NIyXTs cZhaw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefuddttdekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepvdfgveffvdekle dttdetjeektdevteegfefhvdefhfffffejudetkeduieekudelnecuffhomhgrihhnpegs rggushhslhdrtghomhdpmhhoiihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdp nhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeekvd egleesuggvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhho shhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 10:16:05 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v5 2/3] gnu: nss-rapid: Update to 3.110. Date: Thu, 15 May 2025 07:15:59 -0700 Message-ID: <20250515141600.4759-2-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250515141600.4759-1-ian@retrospec.tv> References: <20250515141600.4759-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/nss.scm (nss-rapid): Update to 3.110. [phase 'check]: Use datefudge on 32-bit systems. Change-Id: Ibdae3c70066a70cdde560c5d8f9bac797cd2cd99 --- gnu/packages/nss.scm | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 7a8c6b075d7..80444e80386 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -347,7 +347,7 @@ (define-public nss-rapid (package (inherit nss) (name "nss-rapid") - (version "3.109") + (version "3.110") (source (origin (inherit (package-source nss)) (uri (let ((version-with-underscores @@ -358,11 +358,19 @@ (define-public nss-rapid "nss-" version ".tar.gz"))) (sha256 (base32 - "12y156frnhaqvwkla1c07gqr2lnp4yb3619g4088kk8qc4jnr95y")))) + "09xfndqj07wy28l7jnk01gqa4bh55nz6cldlp5qpg8120k211mlw")))) (arguments (substitute-keyword-arguments (package-arguments nss) ((#:phases phases) #~(modify-phases #$phases + (add-after 'unpack 'neutralize-network-test + ;; Test tries to resolve `wrong.host.badssl.com' which fails due + ;; to no networking in the build environment. + ;; Behavior changed as of 3.110. + (lambda _ + (substitute* "nss/tests/ssl/ssl.sh" + ((" ssl_policy_pkix_ocsp" all) + (string-append "#" all))))) (replace 'check (lambda* (#:key tests? #:allow-other-keys) (if tests? @@ -390,8 +398,12 @@ (define-public nss-rapid ;; leading to test failures: ;; . To ;; work around that, set the time to roughly the release date. - (invoke "faketime" "2025-03-01" "./nss/tests/all.sh")) + (invoke #$(if (target-64bit?) "faketime" "datefudge") + "2025-03-28" "./nss/tests/all.sh")) (format #t "test suite not run~%")))))))) + (propagated-inputs + (modify-inputs (package-propagated-inputs nss) + (replace "nspr" nspr-4.36))) (synopsis "Network Security Services (Rapid Release)") (description "Network Security Services (@dfn{NSS}) is a set of libraries designed to -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 15 10:16:33 2025 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 14:16:33 +0000 Received: from localhost ([127.0.0.1]:54768 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFZNw-0003hl-M7 for submit@debbugs.gnu.org; Thu, 15 May 2025 10:16:33 -0400 Received: from fhigh-b3-smtp.messagingengine.com ([202.12.124.154]:37633) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFZNc-0003gZ-TY for 78249@debbugs.gnu.org; Thu, 15 May 2025 10:16:13 -0400 Received: from phl-compute-09.internal (phl-compute-09.phl.internal [10.202.2.49]) by mailfhigh.stl.internal (Postfix) with ESMTP id 5EC5425400E7; Thu, 15 May 2025 10:16:07 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-09.internal (MEProxy); Thu, 15 May 2025 10:16:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747318567; x= 1747404967; bh=uNZpeLIiKUKup4o08XEoA4RHUcRL+wp0x2RERJMcj5k=; b=f HaWUqc/NOIV2dqd5cX3EyaXpZWdDixJ5lEjOPUMuSZmumJG0pWSgkymiZ7g2kwaQ C2/vyhJB4DfUuNvv9EP3QRyZ9quIGwenr2BVxt7Qrow1auF9KbVopA7a3k4ikK72 ym47QOR4H+1th+gibgehpwTgOeKK5J/9o6plB+StXBeqvtrDlH0S32m6hZDlAD2U PSK53EYnShkJETnYf6y1TvFisyUflIJWAKQ7+YZYhX6v2yAdZDjsFXhardNO5iMN hM4z2GAdpSupW2h9Cg2DTobgbHKamcZYh0m70Lp3QEMiV/42lAHWvAlo7EYNddrR iQivn8P7MnO198vwT8/iA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747318567; x=1747404967; bh=u NZpeLIiKUKup4o08XEoA4RHUcRL+wp0x2RERJMcj5k=; b=VMHBIi3e3GsWvVdx6 XP0b2qbY7CT2+zPjDrLCMLSZsBWtJ/jGEnpSuCVqSc85tevZzfo4/g6dP5Y5x4oG AY4bWBHKNR/5pP6yubQxJIQ+nVCXUUcOSK7AkxGuz0HBXHXr/bQgixmY4t158e/m rtxi8WOX8gHI53WSNp9mNVJoQG8IzKmA6ZMNeMmzSTLqNSruEScJy7lrvsB0owLs SswZY8IGyi/77N/X8UoMufY9krfixP1A3gwv/42nJWB3PtZAHElfkGdELsro57XR a4q/DJa+Hg4UhJjmKvvA5nQyzGYGwcfd+I0eAu4YQ7Eb7Cg2H3uUiaGbG9VvMsQz a3aRg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefuddttdekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepveevjeffuddvte eiueetgfeukedvfeeiuedvveelfeeghfduleeftedvgfefgeejnecuvehluhhsthgvrhfu ihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtg drthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthho peejkedvgeelseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrh gvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 10:16:06 -0400 (EDT) From: Ian Eure To: 78249@debbugs.gnu.org Subject: [PATCH v5 3/3] gnu: librewolf: Update to 138.0.3-1 [security fixes]. Date: Thu, 15 May 2025 07:16:00 -0700 Message-ID: <20250515141600.4759-3-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250515141600.4759-1-ian@retrospec.tv> References: <20250515141600.4759-1-ian@retrospec.tv> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 78249 Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Contains fixes for: CVE-2025-2817: Privilege escalation in Firefox Updater CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor CVE-2025-4086: Specially crafted filename could be used to obscure download type CVE-2025-4087: Unsafe attribute access during XPath parsing CVE-2025-4088: Cross-site request forgery via storage access API redirects CVE-2025-4089: Potential local code execution in "copy as cURL" command CVE-2025-4090: Leaked library paths in Firefox for Android CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 * gnu/packages/librewolf.scm (librewolf): Update to 138.0.3-1. * gnu/packages/patches/librewolf-compare-paths.patch: New file. Change-Id: I2cc11b758dbc77f7ec3451faa89918b08c890729 --- gnu/packages/librewolf.scm | 14 +++++++------- .../patches/librewolf-compare-paths.patch | 15 +++++++++++++++ 2 files changed, 22 insertions(+), 7 deletions(-) create mode 100644 gnu/packages/patches/librewolf-compare-paths.patch diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index bcacbf8dd15..063a89420fe 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -191,7 +191,7 @@ (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) #$output))))) (patches (search-patches - "torbrowser-compare-paths.patch" + "librewolf-compare-paths.patch" "librewolf-use-system-wide-dir.patch" "librewolf-add-store-to-rdd-allowlist.patch"))))) @@ -207,17 +207,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250416062358") +(define %librewolf-build-id "20250502155055") (define-public librewolf (package (name "librewolf") - (version "137.0.2-1") + (version "138.0.3-1") (source (make-librewolf-source #:version version - #:firefox-hash "01yd5cq6qgww6w2kq1bchy9j81blim15kdz7bvx8n512m2x3mz06" - #:librewolf-hash "0vy1xvjwgc4vd9q3laakx6lrsy4ghpdr98vm9lmx86amg9gak5ix" + #:firefox-hash "1r0kam26cz5rz39n6zcc2hrbav6dxlfrsa0qhhfjlnv33ns3lzx2" + #:librewolf-hash "1bf9sa5radjr7g6ng7kqy2ss13c0q6vkq9dfzj5y998ifxw19s4c" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -639,7 +639,7 @@ (define (runpaths-of-input label) libxt mesa mit-krb5 - nspr + nspr-4.36 nss-rapid pango pciutils @@ -665,7 +665,7 @@ (define (runpaths-of-input label) pkg-config python rust-librewolf - rust-cbindgen-0.26 + rust-cbindgen-0.28 which yasm)) (native-search-paths diff --git a/gnu/packages/patches/librewolf-compare-paths.patch b/gnu/packages/patches/librewolf-compare-paths.patch new file mode 100644 index 00000000000..8e880bf3908 --- /dev/null +++ b/gnu/packages/patches/librewolf-compare-paths.patch @@ -0,0 +1,15 @@ +See comment in gnu/build/icecat-extension.scm. +This is only needed while icecat and torbrowser remain on +different ESR versions as the patched file has changed its +name. + +--- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs ++++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +@@ -3753,6 +3753,7 @@ + if ( + newAddon || + oldAddon.updateDate != xpiState.mtime || ++ oldAddon.path != xpiState.path || + (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) || + // update addon metadata if the addon in bundled into + // the omni jar and version or the resource URI pointing -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Sat May 17 22:49:00 2025 Received: (at control) by debbugs.gnu.org; 18 May 2025 02:49:00 +0000 Received: from localhost ([127.0.0.1]:53050 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uGU5E-0003wT-4v for submit@debbugs.gnu.org; Sat, 17 May 2025 22:49:00 -0400 Received: from fhigh-a6-smtp.messagingengine.com ([103.168.172.157]:48389) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uGU5C-0003w1-Pi for control@debbugs.gnu.org; Sat, 17 May 2025 22:48:59 -0400 Received: from phl-compute-11.internal (phl-compute-11.phl.internal [10.202.2.51]) by mailfhigh.phl.internal (Postfix) with ESMTP id A4B9C11400F9 for ; Sat, 17 May 2025 22:48:53 -0400 (EDT) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-11.internal (MEProxy); Sat, 17 May 2025 22:48:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:content-type:date:date:from:from:in-reply-to:message-id :reply-to:subject:subject:to:to; s=fm2; t=1747536533; x= 1747622933; bh=S+IteUK0NmpyTkFOXi8uS8S6Ge3tTv4En2iDGRRII6s=; b=b P5tuJMLmK+XiMikkBbCVRzVHj73B2NdDytpdWqWoi426XW4Mb4TsjGddQjUnzMSC QjXtkPCIwraCLz8zcruz63NOoCz1YFdya0qVzUXLErkVojdvum9x1dfjB1ziq6dr SdEMimWF4TlOXD1COOz18kROz1JQmggABSTe93VL4r3POnEqq8gZhj4cDp66OSUL AxKnwm7XLmR9opdqkd+wcbD4kLHoEGdyG+fIqDJOtAVUvkMU5PmKIc/ppEwsw2kf 26plV0zl8IBipn5SL874e5/XQuegtd0HEBu5dWhujYWcla0eAxQIjfJr6eK6uUkN I/dnGfcIg5qfo3WD8nSxA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:message-id:reply-to:subject :subject:to:to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1747536533; x=1747622933; bh=S+IteUK0NmpyTkFOXi8uS8S6Ge3t Tv4En2iDGRRII6s=; b=gUeyFWkU7JnT/90F0XwnMcL/DlvVIyieB46MV9qfY3Js 6r/i3o5vWtpDkXXL1Vd+KTpdcyf6r+cBYgTDgIQagmgh3Jzq/Td3/Kmi3YdjAIxF w1/ADkW2Y5mtWqxHjKDpesbIeSBnuFuR9++8bZByzo6rfDCEc86lFYgtUPd0KYOJ yMYWVe9Fvrskk/amb88B/A4aiqAOyfXOB4/lWOIQtdejpZpzK/VOackrVs1gDeo1 a6IpSGRRML88m3DP+F1tlpWLBbWOkromprX2TwEhHASvdjWy9Vc1UlIP2KM1l6VX TeEMnzB5QD89QV3MAcwte306M7bJ9tgC0sJXeIQdSg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefudejfeehucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpeffkf fvhffusedttdertddttddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghnsehrvght rhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepteekjefhfefhteeigeekheehve dvfefggfegvefftddvudefheeigfetieeuheeknecuvehluhhsthgvrhfuihiivgepuden ucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsg gprhgtphhtthhopedupdhmohguvgepshhmthhpohhuthdprhgtphhtthhopegtohhnthhr ohhlseguvggssghughhsrdhgnhhurdhorhhg X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Sat, 17 May 2025 22:48:53 -0400 (EDT) Date: Sat, 17 May 2025 19:48:52 -0700 Message-Id: <877c2eeiqz.fsf_-_@retrospec.tv> To: control@debbugs.gnu.org From: Ian Eure Subject: control message for bug #78249 X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) close 78249 quit From unknown Fri Jun 20 07:08:55 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sun, 15 Jun 2025 11:24:10 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator