This is an automated email from the git hooks/post-receive script.
guix_mirror_bot pushed a commit to branch master
in repository guix.
The following commit(s) were added to refs/heads/master by this push:
new a820849c9d gnu: icecat: Update to 128.14.0-gnu1 [security fixes].
a820849c9d is described below
commit a820849c9dcd88ac57c23320304e2f169c9b9892
Author: Mark H Weaver <[email protected]>
AuthorDate: Mon Aug 18 14:32:34 2025 -0400
gnu: icecat: Update to 128.14.0-gnu1 [security fixes].
Includes fixes for MFSA-RESERVE-2025-2 (Memory safety bugs),
MFSA-RESERVE-2025-1977130 (Uninitialized memory in the JavaScript
Engine component), MFSA-RESERVE-2025-1979527 (Sandbox escape due to
invalid pointer in the Audio/Video: GMP component), and
MFSA-RESERVE-2025-1979782 (Same-origin policy bypass in the Graphics:
Canvas2D component).
* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id):
Update.
(icecat-source): Update 'gnuzilla-commit' and hashes.
---
gnu/packages/gnuzilla.scm | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm
index 49aa0fd961..3f7c4c2441 100644
--- a/gnu/packages/gnuzilla.scm
+++ b/gnu/packages/gnuzilla.scm
@@ -695,9 +695,9 @@ variable defined below. It requires guile-json to be
installed."
"sco" "si" "sk" "skr" "sl" "son" "sq" "sr" "sv-SE" "szl" "ta" "te"
"tg" "th" "tl" "tr" "trs" "uk" "ur" "uz" "vi" "xh" "zh-CN" "zh-TW"))
-(define %icecat-base-version "128.13.0")
+(define %icecat-base-version "128.14.0")
(define %icecat-version (string-append %icecat-base-version "-gnu1"))
-(define %icecat-build-id "20250722000000") ;must be of the form YYYYMMDDhhmmss
+(define %icecat-build-id "20250819000000") ;must be of the form YYYYMMDDhhmmss
;; 'icecat-source' is a "computed" origin that generates an IceCat tarball
;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat'
@@ -717,9 +717,9 @@ variable defined below. It requires guile-json to be
installed."
"firefox-" upstream-firefox-version ".source.tar.xz"))
(sha256
(base32
- "1x22a1ihnpsmcmj1ljx586rh8kgm996qbncgyr7z3rgsmslx1am4"))))
+ "0lwsn1y988naxs9031sbzsh9b0x7c6zmpf89y4pv477l55ifzfck"))))
- (gnuzilla-commit "b73acfe395ea849fcd15c9886a7f4631f2b6f82b")
+ (gnuzilla-commit "ba161be3de71bb556be951ac4dbb81c807f68770")
(gnuzilla-source
(origin
(method git-fetch)
@@ -730,7 +730,7 @@ variable defined below. It requires guile-json to be
installed."
(string-take gnuzilla-commit 8)))
(sha256
(base32
- "06zm63vs1m8c3xh4jw75ffah6anf1xxqgqn3hl3gqw5g486ncir1"))))
+ "0gcpwxjz407lgjg8p3mgaij10xy1p6j3sbij46mi8h18d4q1iagg"))))
;; 'search-patch' returns either a valid file name or #f, so wrap it
;; in 'assume-valid-file-name' to avoid 'local-file' warnings.
