X-Loop: help-debbugs@HIDDEN Subject: [bug#76189] [PATCH] gnu: librewolf: Update to 135.0-1 [security fixes]. Resent-From: Ian Eure <ian@HIDDEN> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> Resent-CC: guix-patches@HIDDEN Resent-Date: Tue, 11 Feb 2025 01:57:01 +0000 Resent-Message-ID: <handler.76189.B.173923898632442 <at> debbugs.gnu.org> Resent-Sender: help-debbugs@HIDDEN X-GNU-PR-Message: report 76189 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 76189 <at> debbugs.gnu.org Cc: Ian Eure <ian@HIDDEN> X-Debbugs-Original-To: guix-patches@HIDDEN Received: via spool by submit <at> debbugs.gnu.org id=B.173923898632442 (code B ref -1); Tue, 11 Feb 2025 01:57:01 +0000 Received: (at submit) by debbugs.gnu.org; 11 Feb 2025 01:56:26 +0000 Received: from localhost ([127.0.0.1]:53160 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1thfVh-0008RB-RI for submit <at> debbugs.gnu.org; Mon, 10 Feb 2025 20:56:26 -0500 Received: from lists.gnu.org ([2001:470:142::17]:57604) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <ian@HIDDEN>) id 1thfVc-0008Qq-86 for submit <at> debbugs.gnu.org; Mon, 10 Feb 2025 20:56:22 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <ian@HIDDEN>) id 1thfVV-0002T9-8B for guix-patches@HIDDEN; Mon, 10 Feb 2025 20:56:13 -0500 Received: from fhigh-a8-smtp.messagingengine.com ([103.168.172.159]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <ian@HIDDEN>) id 1thfVR-0005ZO-O8 for guix-patches@HIDDEN; Mon, 10 Feb 2025 20:56:13 -0500 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfhigh.phl.internal (Postfix) with ESMTP id 8E987114022F; Mon, 10 Feb 2025 20:56:07 -0500 (EST) Received: from phl-mailfrontend-02 ([10.202.2.163]) by phl-compute-01.internal (MEProxy); Mon, 10 Feb 2025 20:56:07 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1739238967; x=1739325367; bh=jbA5fkJAl/tEhzrfaYCRb OGy+H6DpFnPVaiHIuQBkJg=; b=isLqLsJ1f+Md3dCSjPE8K+ZDwrQhM2hMu/Fdf QxFanazEgrLhz62wF7/PoWWycY/vNYjoDpPgQQQqTLClePKcms4ugnb1SJ9dv/e/ LnSyMKpvmVTX02F8gVqOWKQhtKBsDQPo/s6AKskDBlp03Ifsr+jdkIvS9B5BoSko HQ/2wn7Rl9CvO3Y4m1L5aKSFvkTMpJi1/VCkOEp66unmHRNjYQvlJc8TMKPyrGSa XfVrcMLLAkaUE97BuIwl7TeYaDJlNA3pGPjQ31HsCNrYE130CG7TJbwN5Ctlt4Bm TcGAEZ+9VqMIk/yTp+zkpjbz/YmDSW7aoLGoUh+9fx1wITziQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1739238967; x=1739325367; bh=jbA5fkJAl/tEhzrfaYCRbOGy+H6DpFnPVai HIuQBkJg=; b=yzPK2duj7X7hHfnANYvXlCbEf04QMbP2Rv1d+49V4I+fLPGLt8a eTAGdVtIm3dY+gQnX1AH1ojNl1tDKe8jnCqfFRonLE/H5sOOWRfNunH2ztDvbgBX 4nzD1Sm+zJofy3TowB8j1zhTUQVfPlXqtQfQJM+bbXq9QVLiHW0pkz81lISJOIs5 xiKc38rOylsYQEBIJN0XayH+vdvlFKgscNBfK0DwwQlh7prc6T6z5VVunlfhqIVh 0hJQYAmVEmMWQ16bUVXEzRso62KzbToIe3i505UJ+lDSyeQBe6G1aarkBeVoZkU8 LZWc/VZo2dXS6TwybMTzYivMtayVl45sWkQ== X-ME-Sender: <xms:N66qZ81fho6RKQXdfo2uGdVprfKIaVXdl7NQN2wK7hgZ-VEvi1VkOg> <xme:N66qZ3EUO8h4aaCXsFkiw85KK0zv5bSuA4uuzK4LtsHmnbHSrszCO8Xh-0pTxfD6O t5uA3yi1UsfFdxrJg> X-ME-Received: <xmr:N66qZ06SESMgLLg6JNkqtvqtFuyO1FuzfPd2gz9Gx2zxoKdgeTUUqu70mvVQCQI6nBkwBPTkirbvvw9jwPwb5Y3PVSfx6M6mHMYTD8gVNeP8zS1SEOrYjg> X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefleejvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvve fufffkofgggfestdekredtredttdenucfhrhhomhepkfgrnhcugfhurhgvuceoihgrnhes rhgvthhrohhsphgvtgdrthhvqeenucggtffrrghtthgvrhhnpefgvdejhfelhfeftdeile elfedvhfefffetfeeuteelgfdvleffleevgfefueekjeenucffohhmrghinhepmhhoiihi lhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfh hrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspghrtghpthhtohepvddpmhho uggvpehsmhhtphhouhhtpdhrtghpthhtohepghhuihigqdhprghttghhvghssehgnhhurd horhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: <xmx:N66qZ13LuIBNUMasTB5PLHcKOdua_yjnijES1YvYfk2ifu6ctDEEdQ> <xmx:N66qZ_HoYzHVz6WiSM0y2JwIifmnDfF4KTZaMCdBsjXkxN3itKS8JQ> <xmx:N66qZ-9Q5Qc7wTLf0P1gujEx42OzlnlMbRhsHmUKFzXbDcziFAsPeA> <xmx:N66qZ0nBS7Q776OuVBUaLB_PoNtburFrSFSOp5j4AmuHoT9O2dKGlA> <xmx:N66qZ0TDLoLm8v7lyGhW5bCJEzqhgSj1_iCDrPB-QJ-I51wNKBHr08Oc> Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 10 Feb 2025 20:56:06 -0500 (EST) From: Ian Eure <ian@HIDDEN> Date: Mon, 10 Feb 2025 17:55:34 -0800 Message-ID: <20250211015602.4658-1-ian@HIDDEN> X-Mailer: git-send-email 2.48.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=103.168.172.159; envelope-from=ian@HIDDEN; helo=fhigh-a8-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.7 (/) X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.3 (/) New upstream version. Contains fixes for: CVE-2025-1009: Use-after-free in XSLT CVE-2025-1010: Use-after-free in Custom Highlight CVE-2025-1018: Fullscreen notification is not displayed when fullscreen is re-requested CVE-2025-1011: A bug in WebAssembly code generation could result in a crash CVE-2025-1012: Use-after-free during concurrent delazification CVE-2025-1019: Fullscreen notification not properly displayed CVE-2025-1013: Potential opening of private browsing tabs in normal browsing windows CVE-2025-1014: Certificate length was not properly checked CVE-2025-1016: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 CVE-2025-1017: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 CVE-2025-1020: Memory safety bugs fixed in Firefox 135 and Thunderbird 135 * gnu/packages/librewolf.scm (librewolf): Update to 135.0-1. Change-Id: I7054fc9df31d59bb0d42e02b1f359cf3e6c1a43d --- gnu/packages/librewolf.scm | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index 59c7e3a4a3..e5e91fb91e 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -200,22 +200,23 @@ (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) ;;; but since in Guix only the latest packaged Rust is officially supported, ;;; it is a tradeoff worth making. ;;; 0: https://firefox-source-docs.mozilla.org/writing-rust-code/update-policy.html -(define rust-librewolf rust-1.81) +;; 135.0 wants 1.83, but it's not available in Guix yet. +(define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250121184331") +(define %librewolf-build-id "20250209210057") (define-public librewolf (package (name "librewolf") - (version "134.0.2-1") + (version "135.0-1") (source (make-librewolf-source #:version version - #:firefox-hash "09yxacfcklgjqbqvcac32llwmlb16d9jhfp2mif9qs7s2gzvfvkc" - #:librewolf-hash "1qa3crgazfvmsqx8dm0k78yk9cb11w1lf74x6x8ixjq5ifsdh1ws" + #:firefox-hash "0q5r2q6q56kyzl5pknrir9bzlhmzbvv9hi5gi4852izgcali4zl2" + #:librewolf-hash "0fg4vji5xb17pgvq7jnfz4dq08gi0rl998xhj37hfm5zxs19y8jk" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments -- 2.48.1
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) Content-Type: text/plain; charset=utf-8 X-Loop: help-debbugs@HIDDEN From: help-debbugs@HIDDEN (GNU bug Tracking System) To: Ian Eure <ian@HIDDEN> Subject: bug#76189: Acknowledgement ([PATCH] gnu: librewolf: Update to 135.0-1 [security fixes].) Message-ID: <handler.76189.B.173923898632442.ack <at> debbugs.gnu.org> References: <20250211015602.4658-1-ian@HIDDEN> X-Gnu-PR-Message: ack 76189 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 76189 <at> debbugs.gnu.org Date: Tue, 11 Feb 2025 01:57:02 +0000 Thank you for filing a new bug report with debbugs.gnu.org. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): guix-patches@HIDDEN If you wish to submit further information on this problem, please send it to 76189 <at> debbugs.gnu.org. Please do not send mail to help-debbugs@HIDDEN unless you wish to report a problem with the Bug-tracking system. --=20 76189: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D76189 GNU Bug Tracking System Contact help-debbugs@HIDDEN with problems
Received: (at control) by debbugs.gnu.org; 15 Feb 2025 00:05:03 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Fri Feb 14 19:05:02 2025 Received: from localhost ([127.0.0.1]:52357 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1tj5g6-00039f-A9 for submit <at> debbugs.gnu.org; Fri, 14 Feb 2025 19:05:02 -0500 Received: from fhigh-b2-smtp.messagingengine.com ([202.12.124.153]:34455) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <ian@HIDDEN>) id 1tj5g3-00038y-DW for control <at> debbugs.gnu.org; Fri, 14 Feb 2025 19:04:59 -0500 Received: from phl-compute-04.internal (phl-compute-04.phl.internal [10.202.2.44]) by mailfhigh.stl.internal (Postfix) with ESMTP id 0140A2540118 for <control <at> debbugs.gnu.org>; Fri, 14 Feb 2025 19:04:53 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-04.internal (MEProxy); Fri, 14 Feb 2025 19:04:54 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:content-type:date:date:from:from:in-reply-to:message-id :reply-to:subject:subject:to:to; s=fm2; t=1739577893; x= 1739664293; bh=m9CGYBQarnyZ4ZvzqkanDbltx3BkHiWf/pX8/RLQ2QE=; b=d ouE2V9v/omX3yR4H/EIPq9/VFWSgkG3fG+4iaHblihxriScrDIEVXX/lB7NTQ+bs eGzCab67XzDM3dHtCIRlgrdk/BImPem2YuNQfkLEpprSvwQ1TxQ0/EhzTvOdEW8t p2OMCNy0D0TpYi0eY2cdwGG5E2gvgxoFF2C0xG2XkSnOTX5qONTTScqttJElqVvV 2VUjd34CEPOh3VbGftNXTZEPaDCzZlg2x7oqR7KfXP2krRgC6IexYLTupEVYEqAK bD33GZ+hm8dYNHfPDFR15d1rp/OIKXuMy4CxkPJhaBUDELUHJPvu9b/OMG3JhQtj UUYavIe9LaR0Zxcc1149w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:message-id:reply-to:subject :subject:to:to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1739577893; x=1739664293; bh=m9CGYBQarnyZ4ZvzqkanDbltx3Bk HiWf/pX8/RLQ2QE=; b=lAx2o/QlFdJieIemz1L6mKPT8kteft/E7Cm3tIUuBvBA 7gciTJgFaCbnOaxDEhv7akAiGErPRHfaFxqyRI8D3EEO454w/Nc6NceA4VojDx8C hc81aYIJ3zrjnx0HDPS9S14VzmA7dRzAippoEDJnnEPmkOT0geiKAUbNP2+AZBZ2 wyrv90hl5DxETQHnpKvzSshH0TxolX/L/ziKoaW7CLTGBZl4VDk54mf6vG1NNBx6 p9xo00/I/nD896ki875lkD3EVuCmN6Xqd6Rn3+Ihrp9/bvOyOygSeXTIi+yrbpsb VHoQ2td3jlTdZWNlc6CpOHKjp03ulNCM30ONWC946g== X-ME-Sender: <xms:JdqvZ8F7KbR5-lZk5a2kRQ-cIM4844mQvRRgOxzSrR1pR9ylJjxLeQ> <xme:JdqvZ1Uzu7YdL1pkQWtrtSvAHtQ9heJbr3-uX7p09qNmTHOJSad1p3gZHbhkUfsv4 U9EkhgTE2dPvSGaag> X-ME-Received: <xmr:JdqvZ2KRj_1RDC8tB_LQBMiHqljJLokuPIEgxaFiTJqypCJ6A3qTV8aLTC_cxNHAeBBAW-OO8CqtkQDo7edy-CrNHN1nQt1Jx-mJQmoBug> X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdehuddthecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhepfffkvf fhufestddtredttddttdenucfhrhhomhepkfgrnhcugfhurhgvuceoihgrnhesrhgvthhr ohhsphgvtgdrthhvqeenucggtffrrghtthgvrhhnpeetkeejhfefhfetieegkeehheevvd efgffggeevffdtvddufeehiefgteeiueehkeenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspg hrtghpthhtohepuddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtoheptghonhhtrhho lhesuggvsggsuhhgshdrghhnuhdrohhrgh X-ME-Proxy: <xmx:JdqvZ-Fe-jl1FQyuJnamJn-R0WV_vhgMc1-AFGvNRtIG8vqm5x4Oag> <xmx:JdqvZyVQiHKHWT9Fyn-9zWZ-IAbXflZCnRgAaDQhHr7OUSKYCC5bQA> <xmx:JdqvZxP6DbWE0zoxv5_3sz_HWvPcN6n-7bivCN7dbqS2LFaB6wXP6A> <xmx:JdqvZ50dwhsuYs5yUxTeTGm9_BVQObiQMdvc9C1kAImIAIokqPT__Q> <xmx:JdqvZ1cFEIuqH9aaxoksSyKaPeUMVH_QRqIdi1MHWLKSwiU5vZwXZGGK> Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <control <at> debbugs.gnu.org>; Fri, 14 Feb 2025 19:04:53 -0500 (EST) Date: Fri, 14 Feb 2025 16:04:52 -0800 Message-Id: <87ldu8oyxn.fsf@HIDDEN> To: control <at> debbugs.gnu.org From: Ian Eure <ian@HIDDEN> Subject: control message for bug #76189 X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.7 (-) close 76189 quit
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.