From patchwork Sun Apr 28 00:31:21 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ian Eure X-Patchwork-Id: 2508 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 52B3D27BBEA; Sun, 28 Apr 2024 01:33:02 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 8D04927BBE2 for ; Sun, 28 Apr 2024 01:33:00 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1s0sTJ-00014I-1R; Sat, 27 Apr 2024 20:32:49 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s0sTE-00012Z-11 for guix-patches@gnu.org; Sat, 27 Apr 2024 20:32:45 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1s0sTD-0003Rn-Np for guix-patches@gnu.org; Sat, 27 Apr 2024 20:32:43 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1s0sTW-0002yC-4j for guix-patches@gnu.org; Sat, 27 Apr 2024 20:33:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#70618] [PATCH 0/3] Update LibreWolf to 125.0.2-1 Resent-From: Ian Eure Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 28 Apr 2024 00:33:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 70618 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 70618@debbugs.gnu.org Cc: Ian Eure X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.171426433211375 (code B ref -1); Sun, 28 Apr 2024 00:33:01 +0000 Received: (at submit) by debbugs.gnu.org; 28 Apr 2024 00:32:12 +0000 Received: from localhost ([127.0.0.1]:49835 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s0sSi-0002xP-1d for submit@debbugs.gnu.org; Sat, 27 Apr 2024 20:32:12 -0400 Received: from lists.gnu.org ([2001:470:142::17]:59106) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s0sSg-0002xB-2B for submit@debbugs.gnu.org; Sat, 27 Apr 2024 20:32:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s0sSF-0000m2-Rb for guix-patches@gnu.org; Sat, 27 Apr 2024 20:31:43 -0400 Received: from fout5-smtp.messagingengine.com ([103.168.172.148]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s0sSE-00030x-01 for guix-patches@gnu.org; Sat, 27 Apr 2024 20:31:43 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailfout.nyi.internal (Postfix) with ESMTP id D633313800AD; Sat, 27 Apr 2024 20:31:40 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sat, 27 Apr 2024 20:31:40 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1714264300; x=1714350700; bh=hyaTto0vhLOLi1EdfIsz4 y+hFHMzQFqWvrz8hDPuqWk=; b=jklwrKA9ZW8Iuz4WX6RSYEvwLAqf+bgEfcOMO 6QTZNhqzT0bU4acxS0YbmTgVNvF++Vy/rVKL+bVOQHNAypCkjJ5c/eOg2pq5zqCr jVdj8LOaXE7yAUYbBfkwZo+68ptSvTxaYgrx/kh5TBGhzVKjZyp5NLmHjWRCXoDa 5f7fMNju9pC8YPdPDj8ItDcMvEzvFtWagNOh9pp767snMMgINmixH8TN7mCQ34/M 2jEMXoCE1Ydb7T4V2dH7fI4Kgdr6oJU/FJQYa+nPPkRWtG9Nf+5Gws89b8FSBF17 1IwKKrivg3ntX3LMU1F+bzKAJWlakKQ4szt4Xo1TVV3d6V1Qw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1714264300; x=1714350700; bh=hyaTto0vhLOLi1EdfIsz4y+hFHMz QFqWvrz8hDPuqWk=; b=LU9t1kxUHRs1QboBaasw/0UDuOaVjuqwi/JeLMLsYuww E+3zKiVyIj3pDCMSZRwZ+xAYFON8cpol9ZfsnTsL8IuWHCV9ZrEq2MkENT/bM9IC SEfavlPvDWQtC88uOfGxJKavcN72row99raRAyGJDR7OdBTkdu+hJxyaHxo4U8Th 2JyaUUcuX7p0brPWBx9n7RoUERBzJIkXNoqZfUyV74EPhLjOdPgLdF686DkuyaSP Djb+m5QAIRhWSHeDNu8r6phnXpVhch/0VZlSK1udnT7bCqiShGjA2D60vEbmhJs9 SuwUdVo1rC0ZmU4+TImBuLfaAGAzTBf9HWdpNENc9w== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrvddtvddgfeejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertd ertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghnsehrvghtrhhoshhpvggtrdht vheqnecuggftrfgrthhtvghrnhephfeiveeliedukeffhefhleeijedtveelleetgefggf ehkeeljeehtdeguddvvefgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehm rghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 27 Apr 2024 20:31:40 -0400 (EDT) From: Ian Eure Date: Sat, 27 Apr 2024 17:31:21 -0700 Message-ID: X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Received-SPF: pass client-ip=103.168.172.148; envelope-from=ian@retrospec.tv; helo=fout5-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches New upstream release. A few things to note: - nss / nss-certs needs a bump from 3.98->3.99, as this is what LibreWolf wants in order to build. - Clang 13.x (the Guix default) segfaulted when building LibreWolf and suggested that I file a bug report. Switching to clang/LLVM 18 resolved the issue. LibreWolf 125.0.2-1 resolves: CVE-2024-3852 (high) CVE-2024-3853 (high) CVE-2024-3854 (high) CVE-2024-3855 (high) CVE-2024-3856 (high) CVE-2024-3857 (high) CVE-2024-3858 (high) CVE-2024-3859 (moderate) CVE-2024-3860 (moderate) CVE-2024-3861 (moderate) CVE-2024-3862 (moderate) CVE-2024-3302 (low) CVE-2024-3864 (high) CVE-2024-3865 (high) Ian Eure (3): gnu: nss/fixed: Update to 3.99. gnu: nss-certs: Update to 3.99. gnu: librewolf: Update to 125.0.2-1. gnu/packages/certs.scm | 6 +++--- gnu/packages/librewolf.scm | 15 ++++++++------- gnu/packages/nss.scm | 4 ++-- 3 files changed, 13 insertions(+), 12 deletions(-) base-commit: 8d29f416a9378d30f63c2a95f1bd1a420d9ccab4