From patchwork Thu May 15 14:15:58 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ian Eure X-Patchwork-Id: 42629 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 7930D27BC4B; Thu, 15 May 2025 15:17:39 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 8326127BC49 for ; Thu, 15 May 2025 15:17:38 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uFZOV-0003A1-93; Thu, 15 May 2025 10:17:07 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uFZOR-00038h-Ek for guix-patches@gnu.org; Thu, 15 May 2025 10:17:03 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uFZOR-0002Cg-4C for guix-patches@gnu.org; Thu, 15 May 2025 10:17:03 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:From:To:In-Reply-To:References:Subject; bh=rme3XHFYtHl35B5X5XoHAdJZFxGgI71f5XKddJ7fAXU=; b=CFHLkhuPIEB881QJJsphtumZ/zL1hHs9t9nY2pWifNmNs1mdHX3uLznymCiQemDQfHBHOug0mTW2REtJSzjBZEUuEAWT1UIdcsGISWPdSX00LzPsx+4NA39yQCi2hVp68YnSS/NKA66BA1tUANOh9xEAWDHH/gtwUc80iUJbMFPwSJX1h6UuyxrH9o5MrfQIpSXkjDcJkXT1+S7wQ/iL6H1FjegVa9DoSIdz4ZlcXDwAyePpB+9vvPNcASBrma/kjz1moQr89Gcq1tyq7ge0lUbhoSFASLZAzeMsDFArSaN0tD8XldTTjiOOw8FeZ0xpayekIAFOCHCRbsiBwdTC9A==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1uFZOQ-0003jE-S6 for guix-patches@gnu.org; Thu, 15 May 2025 10:17:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#78249] [PATCH v5 1/3] gnu: Add nspr-4.36. References: <20250504231831.20420-1-ian@retrospec.tv> In-Reply-To: <20250504231831.20420-1-ian@retrospec.tv> Resent-From: Ian Eure Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 15 May 2025 14:17:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 78249 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 78249@debbugs.gnu.org Cc: Ian Eure Received: via spool by 78249-submit@debbugs.gnu.org id=B78249.174731858014210 (code B ref 78249); Thu, 15 May 2025 14:17:02 +0000 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 14:16:20 +0000 Received: from localhost ([127.0.0.1]:54764 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFZNk-0003h7-6b for submit@debbugs.gnu.org; Thu, 15 May 2025 10:16:20 -0400 Received: from fhigh-b3-smtp.messagingengine.com ([202.12.124.154]:51103) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFZNa-0003gV-Tc for 78249@debbugs.gnu.org; Thu, 15 May 2025 10:16:12 -0400 Received: from phl-compute-09.internal (phl-compute-09.phl.internal [10.202.2.49]) by mailfhigh.stl.internal (Postfix) with ESMTP id 85AC925400C6; Thu, 15 May 2025 10:16:04 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-09.internal (MEProxy); Thu, 15 May 2025 10:16:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to; s=fm2; t=1747318564; x=1747404964; bh=rme3XHFYtHl35B5X5XoHA dJZFxGgI71f5XKddJ7fAXU=; b=nRbxe6k1fA45HBSeC4aYGFBYJ46DeUqYhA/Fi DXyGu6ZiuqrXUzPevuTgsgM70ysAuExef2wtw5DVEkTZPP2wzHOKsoEcz2QibgOi NVdtK60g+wPAfks9go3gypUv/7CXhsjQungrxo3iQ6E75Igx0fEZel9AYFsXHkHv QrRQpWkSUf8pvSok2neR6JnFPFYIgtSgDWWrpt8daf2X0gXyagVsGBOoimO6eoEd ob7yqvS0pZl5PvdZ32wpkkmmGlVbRljJfEAy22xY6UI996SIMc4mqABTtONNbHqH apf+HiUFYHe12G8h0GhVIVHtrXeiDQTRYFLCjC56ab9qrg7bw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1747318564; x=1747404964; bh=rme3XHFYtHl35B5X5XoHAdJZFxGgI71f5XK ddJ7fAXU=; b=lWRACFx98mLcMLwt29oFCUmYFFf3rl4InerGIQGTfSu3M8Wu0/9 m/LgyMiImSmlFm7W+UDvUtw4vFElwO3lbEMvpJ3I7nr8Cm7bKuUcnwCzf30YH3uU Fu2Z0OJQjwetf4pHfwzqQZb64Msz1jpMtzOICphX/tGkmMBbD92wCNsCefxAsHD9 muoEsddkftPfxMzwbiNg4pYh+oKmsirlUubVYlyXsuLT9xnuXeAdNLh2/jZoY6Li ykPnfNjl3Kjyh31iukxCm4BnGkWwjGfCjF9I2MO6l2YOOHgg0YhQ1fzfsBBohYWt Z9KRYYp0FMJ9VO/lt2k7+RaD/AND+HEgRMw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefuddttdekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehirghn sehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepgfdvjefhlefhfedtie elleefvdfhfeffteefueetlefgvdelffelvefgfeeukeejnecuffhomhgrihhnpehmohii ihhllhgrrdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopedvpdhm ohguvgepshhmthhpohhuthdprhgtphhtthhopeejkedvgeelseguvggssghughhsrdhgnh hurdhorhhgpdhrtghpthhtohepihgrnhesrhgvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 10:16:03 -0400 (EDT) From: Ian Eure Date: Thu, 15 May 2025 07:15:58 -0700 Message-ID: <20250515141600.4759-1-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/nss.scm (nspr-4.36): New variable. Change-Id: I5c7c4f5f96e3b9ed763c63c9b5b5996a63d45985 --- gnu/packages/nss.scm | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 8bcb593ed75..7a8c6b075d7 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -95,6 +95,19 @@ (define-public nspr in the Mozilla clients.") (license license:mpl2.0))) +(define-public nspr-4.36 + (package + (inherit nspr) + (version "4.36") + (source (origin + (method url-fetch) + (uri (string-append + "https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v" + version "/src/nspr-" version ".tar.gz")) + (sha256 + (base32 + "15b83ipjxrmw0909l5qqz13pbarhp50d6i58vgjx4720y4bw7pjm")))))) + (define-public nspr-4.32 (package (inherit nspr) From patchwork Thu May 15 14:15:59 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ian Eure X-Patchwork-Id: 42631 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 69B3327BC4B; Thu, 15 May 2025 15:17:47 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 7F95727BC49 for ; Thu, 15 May 2025 15:17:46 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uFZOZ-0003GE-Q1; Thu, 15 May 2025 10:17:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uFZOS-000395-EJ for guix-patches@gnu.org; Thu, 15 May 2025 10:17:05 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uFZOR-0002Cn-Sj for guix-patches@gnu.org; Thu, 15 May 2025 10:17:03 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=7u0av8IJDVDlm2tYtLJIaDV/yYqYO8uQSMaWwKsaycY=; b=bzpfP5P6102D2V/EeEftv/4iZpMlELZ/BvYO0xndD1b9OpWh6Nv7WQsevnJ2WVqtrvkPRVHv5e7YshDAV5lI8UYnh4dIgVsvmtXcDxdtfJHB9a1njKIqeylIXKUQ36J1FYldsRkAVos3ThCF79+YLYjp2Xe5e5bZcmGMpU2xwHEf+4/yQCRfp/DYQQO2jdaNM5lS14dcgVMjUM0EkLvBwr2tm1OvlFfGdPKFCh010gS4E6lnMKXvJnH8EVjmxnbUZQuRxtt/PuxtYWuG6q35MT75HDAtScSbWteRDLkTaoHTGaiWLf9w0SNaXLm9mVsQv8gZom6zxNBIdI/7AnBbNg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1uFZOR-0003jM-Gx for guix-patches@gnu.org; Thu, 15 May 2025 10:17:03 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#78249] [PATCH v5 2/3] gnu: nss-rapid: Update to 3.110. Resent-From: Ian Eure Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 15 May 2025 14:17:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 78249 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 78249@debbugs.gnu.org Cc: Ian Eure Received: via spool by 78249-submit@debbugs.gnu.org id=B78249.174731858114218 (code B ref 78249); Thu, 15 May 2025 14:17:03 +0000 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 14:16:21 +0000 Received: from localhost ([127.0.0.1]:54766 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFZNk-0003hF-TH for submit@debbugs.gnu.org; Thu, 15 May 2025 10:16:21 -0400 Received: from fout-b5-smtp.messagingengine.com ([202.12.124.148]:41385) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFZNc-0003gX-0G for 78249@debbugs.gnu.org; Thu, 15 May 2025 10:16:13 -0400 Received: from phl-compute-09.internal (phl-compute-09.phl.internal [10.202.2.49]) by mailfout.stl.internal (Postfix) with ESMTP id 40BDB1140163; Thu, 15 May 2025 10:16:06 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-09.internal (MEProxy); Thu, 15 May 2025 10:16:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747318566; x= 1747404966; bh=7u0av8IJDVDlm2tYtLJIaDV/yYqYO8uQSMaWwKsaycY=; b=K dwiPNenQhjjK04d22rSD0DO45ulhWppUBnS+NsRsc5toHqmryIH42qSkjZ2QJBSr S6PU3pxC5o30LIT1fHRiSziWQw9y4u8IbRgqTxc+FydBVtPYtgf+1Aq9gpQ6vhkr xf2OiUfuvBOtFb/3Nu94VWDl+efaiIhSy3dJ74tHGnciNQ4Egh3AQwlCTAydb51g awonuZsd8D63nfXoI6c4B3bFapcvEaIgLm1ld2jnwjeiHRo7EKNzYMnIVXnwpvwt l4hIA9xVHNHbGfaKKDqWOjLg3QceWpY4kQfjtSc0DwaercBY/mBj4wPJxh11fgEV YnSVVRUwwVBj3SojotyKw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747318566; x=1747404966; bh=7 u0av8IJDVDlm2tYtLJIaDV/yYqYO8uQSMaWwKsaycY=; b=XDhtF6i3yTMGsiBip EuznkrpLG9YxqrppwMp58o7SNLPL6fxwDVA7BSKBrrW6BpaDUiZpy1SoIuE76IyN 5NcLT2+kO6inEaEFWYmFguuRPVjSu/qmIVv7VRtXlPD8wjk3obUDyXTWsMh5wtG/ JI5SlhH8gT4grZucpR/TA10sq7kT7AsN6uCovJkBOkhbWjpLSwG7NkPzLVocd5Ll uJipG5pOk9ELbFJKGT3GJ9Cxs8m42z0+9vsFl+x9VVJvgufM8DW1bEaOuJbRWWuD sj01kIIvWyipGZIstccNEeTumlvUQDsHMQg/TuqSOTrKlAKY6trxn9RoB7NIyXTs cZhaw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefuddttdekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepvdfgveffvdekle dttdetjeektdevteegfefhvdefhfffffejudetkeduieekudelnecuffhomhgrihhnpegs rggushhslhdrtghomhdpmhhoiihilhhlrgdrohhrghenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdp nhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepjeekvd egleesuggvsggsuhhgshdrghhnuhdrohhrghdprhgtphhtthhopehirghnsehrvghtrhho shhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 10:16:05 -0400 (EDT) From: Ian Eure Date: Thu, 15 May 2025 07:15:59 -0700 Message-ID: <20250515141600.4759-2-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250515141600.4759-1-ian@retrospec.tv> References: <20250515141600.4759-1-ian@retrospec.tv> MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/nss.scm (nss-rapid): Update to 3.110. [phase 'check]: Use datefudge on 32-bit systems. Change-Id: Ibdae3c70066a70cdde560c5d8f9bac797cd2cd99 --- gnu/packages/nss.scm | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm index 7a8c6b075d7..80444e80386 100644 --- a/gnu/packages/nss.scm +++ b/gnu/packages/nss.scm @@ -347,7 +347,7 @@ (define-public nss-rapid (package (inherit nss) (name "nss-rapid") - (version "3.109") + (version "3.110") (source (origin (inherit (package-source nss)) (uri (let ((version-with-underscores @@ -358,11 +358,19 @@ (define-public nss-rapid "nss-" version ".tar.gz"))) (sha256 (base32 - "12y156frnhaqvwkla1c07gqr2lnp4yb3619g4088kk8qc4jnr95y")))) + "09xfndqj07wy28l7jnk01gqa4bh55nz6cldlp5qpg8120k211mlw")))) (arguments (substitute-keyword-arguments (package-arguments nss) ((#:phases phases) #~(modify-phases #$phases + (add-after 'unpack 'neutralize-network-test + ;; Test tries to resolve `wrong.host.badssl.com' which fails due + ;; to no networking in the build environment. + ;; Behavior changed as of 3.110. + (lambda _ + (substitute* "nss/tests/ssl/ssl.sh" + ((" ssl_policy_pkix_ocsp" all) + (string-append "#" all))))) (replace 'check (lambda* (#:key tests? #:allow-other-keys) (if tests? @@ -390,8 +398,12 @@ (define-public nss-rapid ;; leading to test failures: ;; . To ;; work around that, set the time to roughly the release date. - (invoke "faketime" "2025-03-01" "./nss/tests/all.sh")) + (invoke #$(if (target-64bit?) "faketime" "datefudge") + "2025-03-28" "./nss/tests/all.sh")) (format #t "test suite not run~%")))))))) + (propagated-inputs + (modify-inputs (package-propagated-inputs nss) + (replace "nspr" nspr-4.36))) (synopsis "Network Security Services (Rapid Release)") (description "Network Security Services (@dfn{NSS}) is a set of libraries designed to From patchwork Thu May 15 14:16:00 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ian Eure X-Patchwork-Id: 42630 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 5A7AC27BC4A; Thu, 15 May 2025 15:17:41 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id B781B27BC4B for ; Thu, 15 May 2025 15:17:40 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uFZOZ-0003GY-Ta; Thu, 15 May 2025 10:17:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uFZOU-0003Ah-1y for guix-patches@gnu.org; Thu, 15 May 2025 10:17:06 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uFZOT-0002Cv-M7 for guix-patches@gnu.org; Thu, 15 May 2025 10:17:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=uNZpeLIiKUKup4o08XEoA4RHUcRL+wp0x2RERJMcj5k=; b=MoJtXMkRPikfQCo0ZCSrF/9ADEeM82aJGlTkYki3QZN3AgCy/FSxSgJir689PErnHol9znR0JOUEEXeS3PaNHtQKFYJo6u65olOXVSDJCeBojBUByDmtGpg+t+zB+07g4vxNrkyQDz91FjkoM+l/wrr5KSHB242cICJ33ZXHQ8R+EAV75sI01B9qr2oSFP866A2N58XuLweuTYMQy/CAnx8ymgGAns9bPfWDrDhF1aIuabm3rcjQX2z3unvr8itigWTiIUAM2aOE+hLV4vLFXHO/0T/fayc+d01h8rCE8npvR5eG7fbBXqmvjr+fArzrrMabG+2YRgOU6sCxFG9SkA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1uFZOS-0003jU-2N for guix-patches@gnu.org; Thu, 15 May 2025 10:17:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#78249] [PATCH v5 3/3] gnu: librewolf: Update to 138.0.3-1 [security fixes]. Resent-From: Ian Eure Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 15 May 2025 14:17:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 78249 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 78249@debbugs.gnu.org Cc: Ian Eure Received: via spool by 78249-submit@debbugs.gnu.org id=B78249.174731859314253 (code B ref 78249); Thu, 15 May 2025 14:17:04 +0000 Received: (at 78249) by debbugs.gnu.org; 15 May 2025 14:16:33 +0000 Received: from localhost ([127.0.0.1]:54768 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uFZNw-0003hl-M7 for submit@debbugs.gnu.org; Thu, 15 May 2025 10:16:33 -0400 Received: from fhigh-b3-smtp.messagingengine.com ([202.12.124.154]:37633) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uFZNc-0003gZ-TY for 78249@debbugs.gnu.org; Thu, 15 May 2025 10:16:13 -0400 Received: from phl-compute-09.internal (phl-compute-09.phl.internal [10.202.2.49]) by mailfhigh.stl.internal (Postfix) with ESMTP id 5EC5425400E7; Thu, 15 May 2025 10:16:07 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-09.internal (MEProxy); Thu, 15 May 2025 10:16:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1747318567; x= 1747404967; bh=uNZpeLIiKUKup4o08XEoA4RHUcRL+wp0x2RERJMcj5k=; b=f HaWUqc/NOIV2dqd5cX3EyaXpZWdDixJ5lEjOPUMuSZmumJG0pWSgkymiZ7g2kwaQ C2/vyhJB4DfUuNvv9EP3QRyZ9quIGwenr2BVxt7Qrow1auF9KbVopA7a3k4ikK72 ym47QOR4H+1th+gibgehpwTgOeKK5J/9o6plB+StXBeqvtrDlH0S32m6hZDlAD2U PSK53EYnShkJETnYf6y1TvFisyUflIJWAKQ7+YZYhX6v2yAdZDjsFXhardNO5iMN hM4z2GAdpSupW2h9Cg2DTobgbHKamcZYh0m70Lp3QEMiV/42lAHWvAlo7EYNddrR iQivn8P7MnO198vwT8/iA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1747318567; x=1747404967; bh=u NZpeLIiKUKup4o08XEoA4RHUcRL+wp0x2RERJMcj5k=; b=VMHBIi3e3GsWvVdx6 XP0b2qbY7CT2+zPjDrLCMLSZsBWtJ/jGEnpSuCVqSc85tevZzfo4/g6dP5Y5x4oG AY4bWBHKNR/5pP6yubQxJIQ+nVCXUUcOSK7AkxGuz0HBXHXr/bQgixmY4t158e/m rtxi8WOX8gHI53WSNp9mNVJoQG8IzKmA6ZMNeMmzSTLqNSruEScJy7lrvsB0owLs SswZY8IGyi/77N/X8UoMufY9krfixP1A3gwv/42nJWB3PtZAHElfkGdELsro57XR a4q/DJa+Hg4UhJjmKvvA5nQyzGYGwcfd+I0eAu4YQ7Eb7Cg2H3uUiaGbG9VvMsQz a3aRg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdefuddttdekucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefhvf evufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefkrghnucfguhhrvgcuoehi rghnsehrvghtrhhoshhpvggtrdhtvheqnecuggftrfgrthhtvghrnhepveevjeffuddvte eiueetgfeukedvfeeiuedvveelfeeghfduleeftedvgfefgeejnecuvehluhhsthgvrhfu ihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepihgrnhesrhgvthhrohhsphgvtg drthhvpdhnsggprhgtphhtthhopedvpdhmohguvgepshhmthhpohhuthdprhgtphhtthho peejkedvgeelseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepihgrnhesrh gvthhrohhsphgvtgdrthhv X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 15 May 2025 10:16:06 -0400 (EDT) From: Ian Eure Date: Thu, 15 May 2025 07:16:00 -0700 Message-ID: <20250515141600.4759-3-ian@retrospec.tv> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250515141600.4759-1-ian@retrospec.tv> References: <20250515141600.4759-1-ian@retrospec.tv> MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches Contains fixes for: CVE-2025-2817: Privilege escalation in Firefox Updater CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor CVE-2025-4086: Specially crafted filename could be used to obscure download type CVE-2025-4087: Unsafe attribute access during XPath parsing CVE-2025-4088: Cross-site request forgery via storage access API redirects CVE-2025-4089: Potential local code execution in "copy as cURL" command CVE-2025-4090: Leaked library paths in Firefox for Android CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 * gnu/packages/librewolf.scm (librewolf): Update to 138.0.3-1. * gnu/packages/patches/librewolf-compare-paths.patch: New file. Change-Id: I2cc11b758dbc77f7ec3451faa89918b08c890729 --- gnu/packages/librewolf.scm | 14 +++++++------- .../patches/librewolf-compare-paths.patch | 15 +++++++++++++++ 2 files changed, 22 insertions(+), 7 deletions(-) create mode 100644 gnu/packages/patches/librewolf-compare-paths.patch diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm index bcacbf8dd15..063a89420fe 100644 --- a/gnu/packages/librewolf.scm +++ b/gnu/packages/librewolf.scm @@ -191,7 +191,7 @@ (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n) #$output))))) (patches (search-patches - "torbrowser-compare-paths.patch" + "librewolf-compare-paths.patch" "librewolf-use-system-wide-dir.patch" "librewolf-add-store-to-rdd-allowlist.patch"))))) @@ -207,17 +207,17 @@ (define rust-librewolf rust-1.82) ;; Update this id with every update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. ;; ex: date '+%Y%m%d%H%M%S' -(define %librewolf-build-id "20250416062358") +(define %librewolf-build-id "20250502155055") (define-public librewolf (package (name "librewolf") - (version "137.0.2-1") + (version "138.0.3-1") (source (make-librewolf-source #:version version - #:firefox-hash "01yd5cq6qgww6w2kq1bchy9j81blim15kdz7bvx8n512m2x3mz06" - #:librewolf-hash "0vy1xvjwgc4vd9q3laakx6lrsy4ghpdr98vm9lmx86amg9gak5ix" + #:firefox-hash "1r0kam26cz5rz39n6zcc2hrbav6dxlfrsa0qhhfjlnv33ns3lzx2" + #:librewolf-hash "1bf9sa5radjr7g6ng7kqy2ss13c0q6vkq9dfzj5y998ifxw19s4c" #:l10n firefox-l10n)) (build-system gnu-build-system) (arguments @@ -639,7 +639,7 @@ (define (runpaths-of-input label) libxt mesa mit-krb5 - nspr + nspr-4.36 nss-rapid pango pciutils @@ -665,7 +665,7 @@ (define (runpaths-of-input label) pkg-config python rust-librewolf - rust-cbindgen-0.26 + rust-cbindgen-0.28 which yasm)) (native-search-paths diff --git a/gnu/packages/patches/librewolf-compare-paths.patch b/gnu/packages/patches/librewolf-compare-paths.patch new file mode 100644 index 00000000000..8e880bf3908 --- /dev/null +++ b/gnu/packages/patches/librewolf-compare-paths.patch @@ -0,0 +1,15 @@ +See comment in gnu/build/icecat-extension.scm. +This is only needed while icecat and torbrowser remain on +different ESR versions as the patched file has changed its +name. + +--- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs ++++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +@@ -3753,6 +3753,7 @@ + if ( + newAddon || + oldAddon.updateDate != xpiState.mtime || ++ oldAddon.path != xpiState.path || + (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) || + // update addon metadata if the addon in bundled into + // the omni jar and version or the resource URI pointing