gnu: icecat: Update to 115.6.0-guix0-preview1 [security fixes].
Includes fixes for CVE-2023-6856, CVE-2023-6857, CVE-2023-6858, CVE-2023-6859, CVE-2023-6860, CVE-2023-6861, CVE-2023-6862, CVE-2023-6863, CVE-2023-6864, CVE-2023-6865, and CVE-2023-6867. * gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update. (icecat-source): Update gnuzilla commit, base version, and hashes.
This commit is contained in:
		
							parent
							
								
									dc2b59ddc1
								
							
						
					
					
						commit
						352594e812
					
				
					 1 changed files with 6 additions and 6 deletions
				
			
		| 
						 | 
					@ -546,9 +546,9 @@ variable defined below.  It requires guile-json to be installed."
 | 
				
			||||||
;; XXXX: Workaround 'snippet' limitations.
 | 
					;; XXXX: Workaround 'snippet' limitations.
 | 
				
			||||||
(define computed-origin-method (@@ (guix packages) computed-origin-method))
 | 
					(define computed-origin-method (@@ (guix packages) computed-origin-method))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
(define %icecat-base-version "115.5.0")
 | 
					(define %icecat-base-version "115.6.0")
 | 
				
			||||||
(define %icecat-version (string-append %icecat-base-version "-guix0-preview1"))
 | 
					(define %icecat-version (string-append %icecat-base-version "-guix0-preview1"))
 | 
				
			||||||
(define %icecat-build-id "20231121000000") ;must be of the form YYYYMMDDhhmmss
 | 
					(define %icecat-build-id "20231219000000") ;must be of the form YYYYMMDDhhmmss
 | 
				
			||||||
 | 
					
 | 
				
			||||||
;; 'icecat-source' is a "computed" origin that generates an IceCat tarball
 | 
					;; 'icecat-source' is a "computed" origin that generates an IceCat tarball
 | 
				
			||||||
;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat'
 | 
					;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat'
 | 
				
			||||||
| 
						 | 
					@ -568,12 +568,12 @@ variable defined below.  It requires guile-json to be installed."
 | 
				
			||||||
                  "firefox-" upstream-firefox-version ".source.tar.xz"))
 | 
					                  "firefox-" upstream-firefox-version ".source.tar.xz"))
 | 
				
			||||||
            (sha256
 | 
					            (sha256
 | 
				
			||||||
             (base32
 | 
					             (base32
 | 
				
			||||||
              "0a578r4kri7jdw8pkkzp7f1mm9idlk7sjxjghcb08k5p14172gyv"))))
 | 
					              "0rmw486yhkb1is1j2fy51djl5p5qggf2fhp2hgzfdj4s2bjydmv6"))))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
         ;; The upstream-icecat-base-version may be older than the
 | 
					         ;; The upstream-icecat-base-version may be older than the
 | 
				
			||||||
         ;; %icecat-base-version.
 | 
					         ;; %icecat-base-version.
 | 
				
			||||||
         (upstream-icecat-base-version "115.5.0")
 | 
					         (upstream-icecat-base-version "115.6.0")
 | 
				
			||||||
         (gnuzilla-commit "bd66797f3bb057c9d051d4276d63843b4d7ee854")
 | 
					         (gnuzilla-commit "6a76a10682b6e63f562e4b9f26f3ef12f88bd839")
 | 
				
			||||||
         (gnuzilla-source
 | 
					         (gnuzilla-source
 | 
				
			||||||
          (origin
 | 
					          (origin
 | 
				
			||||||
            (method git-fetch)
 | 
					            (method git-fetch)
 | 
				
			||||||
| 
						 | 
					@ -585,7 +585,7 @@ variable defined below.  It requires guile-json to be installed."
 | 
				
			||||||
                                      (string-take gnuzilla-commit 8)))
 | 
					                                      (string-take gnuzilla-commit 8)))
 | 
				
			||||||
            (sha256
 | 
					            (sha256
 | 
				
			||||||
             (base32
 | 
					             (base32
 | 
				
			||||||
              "0v3ckm8yv566f2y9a2bfzakbsk529f1ykr7dj69kb9k93dgny3ja"))))
 | 
					              "15bvlz7c4d8mk10zc317rai91hd96wnchikcfdfxzl35zdnd315r"))))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
         ;; 'search-patch' returns either a valid file name or #f, so wrap it
 | 
					         ;; 'search-patch' returns either a valid file name or #f, so wrap it
 | 
				
			||||||
         ;; in 'assume-valid-file-name' to avoid 'local-file' warnings.
 | 
					         ;; in 'assume-valid-file-name' to avoid 'local-file' warnings.
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Reference in a new issue