From 44e1f5d6be6db70379ab7b665f0df3f7f89b4b97 Mon Sep 17 00:00:00 2001 From: Mark H Weaver Date: Mon, 10 Nov 2025 15:43:20 -0500 Subject: [PATCH] gnu: icecat: Update to 140.5.0-gnu1 [security fixes]. Includes fixes for CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015, CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019, and CVE-2025-13020. * gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update. (icecat-source): Update 'gnuzilla-commit' and hashes. --- gnu/packages/gnuzilla.scm | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index 71051e7a987df4abf77a6586dfbbe1919ed43ec9..7620337142c42254a80cd5fdcaa4996ffe9ea180 100644 --- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -603,9 +603,9 @@ in the case of Firefox, it is browser/locales/all-locales." "zh-CN" "zh-TW")) -(define %icecat-base-version "140.4.0") +(define %icecat-base-version "140.5.0") (define %icecat-version (string-append %icecat-base-version "-gnu1")) -(define %icecat-build-id "20251014000000") ;must be of the form YYYYMMDDhhmmss +(define %icecat-build-id "20251111000000") ;must be of the form YYYYMMDDhhmmss ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat' @@ -625,9 +625,9 @@ in the case of Firefox, it is browser/locales/all-locales." "firefox-" upstream-firefox-version ".source.tar.xz")) (sha256 (base32 - "1xx4rsdkfkx9nxlfzw07j5di07kfqi0a7jplcixvqihh2xrhdwj9")))) + "1qhhsgk1dvdrxvvvry6gpijqzpbgmc6h1fd01c7478ppwprpwaw3")))) - (gnuzilla-commit "579bc2897077119e38a7e1493bca6ec97a06a36a") + (gnuzilla-commit "5897aee761cc6d179bd8632f085c3c14ccf7db6c") (gnuzilla-source (origin (method git-fetch) @@ -638,7 +638,7 @@ in the case of Firefox, it is browser/locales/all-locales." (string-take gnuzilla-commit 8))) (sha256 (base32 - "094sci1mvvmb6xrpfjw0r482lspkmkfdln78mrkcqq7a5x3gwp83")))) + "1yk3bpsa01gy5s5dwavsr089qp5dznzb8za5k3ab3fs79i9vdg6z")))) ;; 'search-patch' returns either a valid file name or #f, so wrap it ;; in 'assume-valid-file-name' to avoid 'local-file' warnings.