mbox series

[bug#70618,0/3] Update LibreWolf to 125.0.2-1

Message ID cover.1714263218.git.ian@retrospec.tv
Headers show
Series Update LibreWolf to 125.0.2-1 | expand

Message

Ian Eure April 28, 2024, 12:31 a.m. UTC 
New upstream release.  A few things to note:

- nss / nss-certs needs a bump from 3.98->3.99, as this is what LibreWolf wants in order to build.
- Clang 13.x (the Guix default) segfaulted when building LibreWolf and suggested that I file a bug report.  Switching to clang/LLVM 18 resolved the issue.

LibreWolf 125.0.2-1 resolves:

CVE-2024-3852 (high)
CVE-2024-3853 (high)
CVE-2024-3854 (high)
CVE-2024-3855 (high)
CVE-2024-3856 (high)
CVE-2024-3857 (high)
CVE-2024-3858 (high)
CVE-2024-3859 (moderate)
CVE-2024-3860 (moderate)
CVE-2024-3861 (moderate)
CVE-2024-3862 (moderate)
CVE-2024-3302 (low)
CVE-2024-3864 (high)
CVE-2024-3865 (high)

Ian Eure (3):
  gnu: nss/fixed: Update to 3.99.
  gnu: nss-certs: Update to 3.99.
  gnu: librewolf: Update to 125.0.2-1.

 gnu/packages/certs.scm     |  6 +++---
 gnu/packages/librewolf.scm | 15 ++++++++-------
 gnu/packages/nss.scm       |  4 ++--
 3 files changed, 13 insertions(+), 12 deletions(-)


base-commit: 8d29f416a9378d30f63c2a95f1bd1a420d9ccab4

Comments

Maxim Cournoyer April 28, 2024, 2:42 p.m. UTC | #1 
Hi,

Ian Eure <ian@retrospec.tv> writes:

> New upstream release.  A few things to note:
>
> - nss / nss-certs needs a bump from 3.98->3.99, as this is what LibreWolf wants in order to build.
> - Clang 13.x (the Guix default) segfaulted when building LibreWolf and suggested that I file a bug report.  Switching to clang/LLVM 18 resolved the issue.
>
> LibreWolf 125.0.2-1 resolves:
>
> CVE-2024-3852 (high)
> CVE-2024-3853 (high)
> CVE-2024-3854 (high)
> CVE-2024-3855 (high)
> CVE-2024-3856 (high)
> CVE-2024-3857 (high)
> CVE-2024-3858 (high)
> CVE-2024-3859 (moderate)
> CVE-2024-3860 (moderate)
> CVE-2024-3861 (moderate)
> CVE-2024-3862 (moderate)
> CVE-2024-3302 (low)
> CVE-2024-3864 (high)
> CVE-2024-3865 (high)
>
> Ian Eure (3):
>   gnu: nss/fixed: Update to 3.99.
>   gnu: nss-certs: Update to 3.99.
>   gnu: librewolf: Update to 125.0.2-1.

Applied, thank you!