From debbugs-submit-bounces@debbugs.gnu.org Sun May 18 17:43:42 2025 Received: (at submit) by debbugs.gnu.org; 18 May 2025 21:43:42 +0000 Received: from localhost ([127.0.0.1]:32981 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uGlnJ-0004Yl-NK for submit@debbugs.gnu.org; Sun, 18 May 2025 17:43:42 -0400 Received: from lists.gnu.org ([2001:470:142::17]:38560) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uGlnG-0004YR-CW for submit@debbugs.gnu.org; Sun, 18 May 2025 17:43:39 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uGlnA-0004N6-RI for guix-patches@gnu.org; Sun, 18 May 2025 17:43:32 -0400 Received: from fhigh-a2-smtp.messagingengine.com ([103.168.172.153]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uGln8-0007Oa-Fq for guix-patches@gnu.org; Sun, 18 May 2025 17:43:32 -0400 Received: from phl-compute-08.internal (phl-compute-08.phl.internal [10.202.2.48]) by mailfhigh.phl.internal (Postfix) with ESMTP id B34F411400F8; Sun, 18 May 2025 17:43:27 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-08.internal (MEProxy); Sun, 18 May 2025 17:43:27 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1747604607; x=1747691007; bh=j0qCtQu8Uxo7xgCToHJCk GWtzMLhUUwxEavzrk3yjdQ=; b=Ic5m/4vbB1N0EDmq5xJ6yRpgDqOw5RAq1nhGR E0sRRaK7lJTAC2BP7ccwTHI2BkHNvabDSfU05PKrYg06/f/LtjM4/oJ8vpgRkE+O cDV7lZT0GKCb58LKu6/Kqx1b//u8/r7kqu+zbKuaW8wxfFszzOAz4DZtywteh/B+ c7UNzN/61+DN5Etc1aTn/0RWyEMOT3QGiagZovrqulfGxwZQqzgsSw4P6pWfFdgk /GJfTUnKqUoEtO0C8MNmswaG7opCicpLIVjqm2fiiAeJowONxbdq1tj5S4D9sDA4 JaWZXroRX2JHS0+iyQjcBLHQMRuDHtPNu3wkbYTp42sdmE4wA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1747604607; x=1747691007; bh=j0qCtQu8Uxo7xgCToHJCkGWtzMLhUUwxEav zrk3yjdQ=; b=AFsApG/9jy6j1WGWbfOBT+MFvkhPk1wejHbgmnot855qNK+t21E W2E49OAKEJ5ywBNG0AC5U1aJEBynLV9P+TPIJm1KAiNESD8BLQPSxiTo3lANy0AS uv2v+JMaW7YTdNj4cvY0XPOd35ZQPQxLoszYZoUnKJwTQVBL2bHnO4TwV18Wzgbl XY3GRP4REHLGmSkoqIf+sHH38Bg/u4SP3m5I52tQPUqmjL9Nx/fU8t5mzLRVv3us rEN71E+eWS/D0a5xKKs9YdkwyqA3k0htFYHawhFkvj3Ppz1ePs6t08c1nPtxqEAh Qs4MOaqeEZY6lnMIC1hmtQQqCKV1gWoldSw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefudelieduucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhephfeiveeliedukeffhe fhleeijedtveelleetgefggfehkeeljeehtdeguddvvefgnecuvehluhhsthgvrhfuihii vgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrth hvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehg uhhigidqphgrthgthhgvshesghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrh hoshhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 18 May 2025 17:43:26 -0400 (EDT) From: Ian Eure To: guix-patches@gnu.org Subject: [PATCH] gnu: librewolf: Update to 138.0.4-1 [security fixes]. Date: Sun, 18 May 2025 14:43:21 -0700 Message-ID: <20250518214321.26115-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=103.168.172.153; envelope-from=ian@retrospec.tv; helo=fhigh-a2-smtp.messagingengine.com X-Spam_score_int: -37 X-Spam_score: -3.8 X-Spam_bar: --- X-Spam_report: (-3.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.7 (/) X-Debbugs-Envelope-To: submit Cc: Ian Eure X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) Fixes: CVE-2025-4918: Out-of-bounds access when resolving Promise objects CVE-2025-4919: Out-of-bounds access when optimizing linear sums * gnu/packages/librewolf.scm (librewolf): Update to 138.0.4-1. Change-Id: I2c2b7b5a043b37b60f0378f115f0f31fa3993618 --- gnu/packages/librewolf.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 063a89420fe..db4a7673858 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -207,17 +207,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250502155055") +(define %librewolf-build-id "20250518101454") (define-public librewolf (package (name "librewolf") - (version "138.0.3-1") + (version "138.0.4-1") (source (make-librewolf-source #:version version - #:firefox-hash "1r0kam26cz5rz39n6zcc2hrbav6dxlfrsa0qhhfjlnv33ns3lzx2" - #:librewolf-hash "1bf9sa5radjr7g6ng7kqy2ss13c0q6vkq9dfzj5y998ifxw19s4c" + #:firefox-hash "0mjh2if31ibx68a66cvxh5sa20xb78gdn9wdw0wv745dinq0vlrz" + #:librewolf-hash "1g4r2k8z5i25gcc8gfspixbi21dddyk4yg6wv7nya44swy51j7r9" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments -- 2.49.0 From debbugs-submit-bounces@debbugs.gnu.org Fri May 23 00:36:39 2025 Received: (at control) by debbugs.gnu.org; 23 May 2025 04:36:39 +0000 Received: from localhost ([127.0.0.1]:43013 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uIK99-0004fE-L8 for submit@debbugs.gnu.org; Fri, 23 May 2025 00:36:39 -0400 Received: from fout-b4-smtp.messagingengine.com ([202.12.124.147]:49157) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uIK98-0004eu-6i for control@debbugs.gnu.org; Fri, 23 May 2025 00:36:38 -0400 Received: from phl-compute-12.internal (phl-compute-12.phl.internal [10.202.2.52]) by mailfout.stl.internal (Postfix) with ESMTP id BB8CA1140099 for ; Fri, 23 May 2025 00:36:32 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-12.internal (MEProxy); Fri, 23 May 2025 00:36:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:content-type:date:date:from:from:in-reply-to:message-id :reply-to:subject:subject:to:to; s=fm2; t=1747974992; x= 1748061392; bh=E7UxP3N66QjyLoCcqL7bDoHdsyCf+2Rn/aZf5ldg6cg=; b=c shbFgtlMnTh6PVpVWwFKL/n8vxto4PummQMoAyqM/Pzoyya2Ymo6R+rjeannZQK/ 7jOPDAdp8MGTUu9tfEZh/oFmDc9eVX8NiCNsojr+UPOaUBFOiWqKFbn5s/3bAV1i 2QTKDEZYavrsLZyqfc8Z1UxWCUYSGLAKjQwoK0Np7NZazRNqB8o4ORCl+uPziMqM j7gPZc8Q3OHmARm9wY2q/A+p/a6k/j6t9KPheUv+lcBxegY7IaAvOgcDgGFSuFV3 u0+8bcR+MK432HcIJVB1PvgTRtAq9nTFlGBnU2wGoaZU9M9t+Cj8RK5loNqeAQS9 wkSPLyhdVJSIlb/vNmupw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:message-id:reply-to:subject :subject:to:to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1747974992; x=1748061392; bh=E7UxP3N66QjyLoCcqL7bDoHdsyCf +2Rn/aZf5ldg6cg=; b=UIigcMD34k4pne7zw5+Q8pRLIFieZFmqQvcE369PXoYl QtyKX60onGNSRgfnBF42ys6EAJBsgXZ89FFBPdgPAuMTEAz0V/LPGMjHKH1tV1X4 e5g1cQtmlDvu0vuZGMTFdC6YVs18uRvYqgbjOpScfB6tgJF1a9Nq1TZQoFsyJ5pn F6agPZI4fREiU2iIGRvS+jn2SU27zFeCSyNqrju98gD1pLgDvoPhwvlspCzaHS9z zO4WVxbz7EqKMrVHed9hWJnT9seV+KS/6UcH4gf66OZPpTSbQMT/ma6ocw5lr/JR UTMkLRDQs/jS41O/mP+8JP3OMn6KroXxT72bDugUqw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtddtgdejledtucdltddurdegfedvrddttd dmucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgf nhhsuhgsshgtrhhisggvpdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttd enucenucfjughrpeffkffvhffusedttdertddttddtnecuhfhrohhmpefkrghnucfguhhr vgcuoehirghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepteekje fhfefhteeigeekheehvedvfefggfegvefftddvudefheeigfetieeuheeknecuvehluhhs thgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhroh hsphgvtgdrthhvpdhnsggprhgtphhtthhopedupdhmohguvgepshhmthhpohhuthdprhgt phhtthhopegtohhnthhrohhlseguvggssghughhsrdhgnhhurdhorhhg X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 23 May 2025 00:36:31 -0400 (EDT) Date: Thu, 22 May 2025 21:36:31 -0700 Message-Id: <87frgwgcz4.fsf@retrospec.tv> To: control@debbugs.gnu.org From: Ian Eure Subject: control message for bug #78487 X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) close 78487 quit