| Age | Commit message (Expand) | Author |
| 2025-04-03 | nongnu: firefox: Update to 137.0 [security fixes].•••Fixes CVE-2025-2857, CVE-2025-3028, CVE-2025-3029, CVE-2025-3030,
CVE-2025-3031, CVE-2025-3032, CVE-2025-3033, CVE-2025-3034,
CVE-2025-3035.
* nongnu/packages/mozilla.scm (firefox): Update to 137.0.
Signed-off-by: Hilton Chain <hako@ultrarare.space>
| Tomas Volf |
| 2025-04-03 | nongnu: firefox-esr: Update to 128.9.0esr [security fixes].•••Fixes CVE-2025-2857, CVE-2025-3028, CVE-2025-3029, CVE-2025-3030.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.9.0esr.
Signed-off-by: Hilton Chain <hako@ultrarare.space>
| Tomas Volf |
| 2025-03-19 | nongnu: firefox: Update to 136.0.2.•••* nongnu/packages/mozilla.scm (firefox): Update to 136.0.2.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2025-03-12 | nongnu: firefox: Update to 136.0.1.•••* nongnu/packages/mozilla.scm (firefox): Update to 136.0.1.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2025-03-12 | nongnu: firefox-esr: Use current rust.•••* nongnu/packages/mozilla.scm (rust-firefox-esr): Set to `rust'.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2025-03-12 | nongnu: firefox: Use current rust.•••* nongnu/packages/mozilla.scm (rust-firefox): Set to `rust'.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2025-03-06 | nongnu: firefox: Update to 136.0 [security fixes].•••Fixes CVE-2024-9956, CVE-2025-1930, CVE-2025-1931, CVE-2025-1932,
CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936,
CVE-2025-1937, CVE-2025-1938, CVE-2025-1939, CVE-2025-1940,
CVE-2025-1941, CVE-2025-1942, CVE-2025-1943.
* nongnu/packages/mozilla.scm (firefox): Update to 136.0.
[inputs]: Use icu4c-76.
[arguments]<#:phases>: Add 'patch-icu-lookup.
Signed-off-by: Jelle Licht <jlicht@fsfe.org>
| Tomas Volf |
| 2025-03-05 | nongnu: firefox-esr: Update to 128.8.0esr [security fixes].•••Fixes CVE-2024-43097, CVE-2025-1930, CVE-2025-1931, CVE-2025-1932,
CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936,
CVE-2025-1937, CVE-2025-1938.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.8.0esr.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2025-03-02 | nongnu: firefox-esr: Rename icu4c-73 to icu4c.•••* nongnu/packages/mozilla.scm (firefox-esr)[inputs]: Rename icu4c-73 to
icu4c. On gnome-team icu4c was updated to version 73.
| Jelle Licht |
| 2025-02-24 | nongnu: firefox: Use key for beaconDB API.•••This was proposed by Joel (beaconDB founder) at their Matrix chat room.
* nongnu/packages/mozilla.scm (firefox-esr)[arguments]: Set a key for
beaconDB API.
Co-authored-by: Tomas Volf <wolf@wolfsden.cz>
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Jonathan Brielmaier |
| 2025-02-24 | nongnu: firefox: Honor --cores build argument.•••* nongnu/packages/mozilla.scm (firefox)[arguments]{phases}: Honor
--cores build argument in 'build phase. Also removing comments that
are outdated by this change.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Nicolas Graves |
| 2025-02-24 | nongnu: firefox: Update to 135.0.1 [security fixes].•••Fixes CVE-2025-1414.
* nongnu/packages/mozilla.scm (firefox): Update to 135.0.1.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2025-02-06 | nongnu: firefox: Update to 135.0 [security fixes].•••Fixes CVE-2025-1009, CVE-2025-1010, CVE-2025-1011, CVE-2025-1012,
CVE-2025-1013, CVE-2025-1014, CVE-2025-1016, CVE-2025-1017,
CVE-2025-1018, CVE-2025-1019, CVE-2025-1020.
* nongnu/packages/mozilla.scm (firefox): Update to 135.0.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2025-02-06 | nongnu: firefox-esr: Update to 128.7.0esr [security fixes].•••Fixes CVE-2024-11704, CVE-2025-1009, CVE-2025-1010, CVE-2025-1011,
CVE-2025-1012, CVE-2025-1013, CVE-2025-1014, CVE-2025-1016,
CVE-2025-1017.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.7.0esr.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2025-02-06 | nongnu: firefox-esr: Use beaconDB as geolocation provider.•••* nongnu/packages/mozilla.scm (firefox-esr)[arguments]: Set beaconDB as
geolocation provider in 'fix-preferences phase.
| Jonathan Brielmaier |
| 2025-01-22 | nongnu: firefox: Update to 134.0.2.•••* nongnu/packages/mozilla.scm (firefox): Update to 134.0.2.
Signed-off-by: Hilton Chain <hako@ultrarare.space>
| Tomas Volf |
| 2025-01-16 | nongnu: firefox: Update to 134.0.1.•••* nongnu/packages/mozilla.scm (firefox): Update to 134.0.1.
Signed-off-by: Hilton Chain <hako@ultrarare.space>
| Tomas Volf |
| 2025-01-08 | nongnu: firefox: Update to 134.0 [security fixes].•••Fixes CVE-2025-0237, CVE-2025-0238, CVE-2025-0239, CVE-2025-0240,
CVE-2025-0241, CVE-2025-0242, CVE-2025-0243, CVE-2025-0244,
CVE-2025-0245, CVE-2025-0246, CVE-2025-0247.
* nongnu/packages/mozilla.scm (firefox): Update to 134.0.
[inputs]: Replace icu4c with icu4c-75.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2025-01-08 | nongnu: firefox-esr: Update to 128.6.0esr [security fixes].•••Fixes CVE-2025-0237, CVE-2025-0238, CVE-2025-0239, CVE-2025-0240,
CVE-2025-0241, CVE-2025-0242, CVE-2025-0243.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.6.0esr.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2024-12-13 | nongnu: firefox-esr: Update to 128.5.2esr.•••* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.5.2esr.
Signed-off-by: Hilton Chain <hako@ultrarare.space>
| Tomas Volf |
| 2024-12-13 | nongnu: firefox: Support Guix icecat browser extensions.•••* nongnu/packages/patches/firefox-use-system-wide-dir.patch: New file.
* nongnu/packages/mozilla.scm (firefox)[source]: Add it along with
firefox-esr-compare-paths.patch.
| Hilton Chain |
| 2024-12-13 | nongnu: firefox-esr: Support Guix icecat browser extensions.•••* nongnu/packages/patches/firefox-esr-compare-paths.patch: New file.
* nongnu/packages/patches/firefox-esr-use-system-wide-dir.patch: New file.
* nongnu/packages/mozilla.scm (firefox-esr)[source]: Add them.
[arguments]<#:configure-flags>: Allow unsigned system addons.
[native-search-paths]: Add ICECAT_SYSTEM_DIR.
| Hilton Chain |
| 2024-12-11 | nongnu: firefox: Update to 133.0.3.•••* nongnu/packages/mozilla.scm (firefox): Update to 133.0.3.
| Tomas Volf |
| 2024-11-29 | nongnu: firefox-esr: Update to 128.5.1esr.•••* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.5.1esr.
| Jonathan Brielmaier |
| 2024-11-27 | nongnu: firefox: Update to 133.0 [security fixes].•••Fixes CVE-2024-11691, CVE-2024-11692, CVE-2024-11693, CVE-2024-11694,
CVE-2024-11695, CVE-2024-11696, CVE-2024-11697, CVE-2024-11698,
CVE-2024-11699, CVE-2024-11700, CVE-2024-11701, CVE-2024-11702,
CVE-2024-11703, CVE-2024-11704, CVE-2024-11705, CVE-2024-11706
and CVE-2024-11708.
* nongnu/packages/mozilla.scm (firefox): Update to 133.0.
| Jonathan Brielmaier |
| 2024-11-26 | nongnu: firefox-esr: Update to 128.5.0esr [security fixes].•••Fixes CVE-2024-11691, CVE-2024-11692, CVE-2024-11693, CVE-2024-11694,
CVE-2024-11695, CVE-2024-11696, CVE-2024-11697, CVE-2024-11698,
CVE-2024-11699.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.5.0esr.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-11-10 | nongnu: firefox-esr: Wrap with pipewire.•••Firefox needs pipewire in LD_LIBRARY_PATH for screensharing on Wayland,
otherwise the screensharing just won't start.
* nongnu/packages/mozilla.scm (firefox-esr)[arguments]: Add pipewire
lib path to LD_LIBRARY_PATH variable in 'wrap-program phase.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Rutherther |
| 2024-10-31 | nongnu: firefox-esr: Update to 128.4.0esr [security fixes].•••Fixes CVE-2024-10458, CVE-2024-10459, CVE-2024-10460, CVE-2024-10461,
CVE-2024-10462, CVE-2024-10463, CVE-2024-10464, CVE-2024-10465,
CVE-2024-10466, CVE-2024-10467.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.4.0esr.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-10-19 | nongnu: firefox: Update to 131.0.3 [security fixes].•••Fixes CVE-2024-9936 and, in previous versions since 130.0.1, CVE-2024-9680,
CVE-2024-9391, CVE-2024-9392, CVE-2024-9393, CVE-2024-9394, CVE-2024-9395,
CVE-2024-9396, CVE-2024-9397, CVE-2024-9398, CVE-2024-9399, CVE-2024-9400,
CVE-2024-9401, CVE-2024-9402, and CVE-2024-9403.
Upstream removed firefox.desktop files which can be generated from their mach
tool. However, this will try to download various dependencies. So, for now
at least, use a patch which reverts that commit so we can use the included
desktop file. In Arch, for example, they include a separate pre-generated
desktop file rather than doing this at build time.
* nongnu/packages/mozilla.scm (firefox): Update to 131.0.3.
* nongnu/packages/patches/firefox-CVE-2024-9680.patch: Delete patch.
* nongnu/packages/patches/firefox-restore-desktop-files.patch: Add patch.
| John Kehayias |
| 2024-10-11 | nongnu: firefox: Fix CVE-2024-9680.•••* nongnu/packages/patches/firefox-CVE-2024-9680.patch: New file.
* nongnu/packages/mozilla.scm (firefox)[source]<patches>: Add it.
(%firefox-build-id): Update.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Hilton Chain |
| 2024-10-10 | nongnu: firefox-esr: Update to 128.3.1esr [security fixes].•••Fixes CVE-2024-9680.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.3.1esr.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-10-02 | nongnu: firefox-esr: Update to 128.3.0esr [security fixes].•••Fixes CVE-2024-8900, CVE-2024-9392, CVE-2024-9393, CVE-2024-9394,
CVE-2024-9396, CVE-2024-9397, CVE-2024-9398, CVE-2024-9399,
CVE-2024-9400, CVE-2024-9401, CVE-2024-9402.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.3.0esr.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-09-22 | nongnu: firefox: Update to 130.0.1.•••* nongnu/packages/mozilla.scm (firefox): Update to 130.0.1.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2024-09-04 | firefox-esr: Use %default-gnu-imported-modules.•••%gnu-build-system-modules is deprecated, so let us use
%default-gnu-imported-modules instead as the warning suggests.
* nongnu/packages/mozilla.scm (firefox-esr)[arguments]<#:modules>: Use
%default-gnu-imported-modules instead of %gnu-build-system-modules.
Signed-off-by: Jelle Licht <jlicht@fsfe.org>
| Tomas Volf |
| 2024-09-03 | nongnu: firefox-esr: Update to 128.2.0esr [security fixes].•••Fixes CVE-2024-8381, CVE-2024-8382, CVE-2024-8383, CVE-2024-8384,
CVE-2024-8385, CVE-2024-8386, CVE-2024-8387.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.2.0esr.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2024-09-03 | nongnu: firefox: Update to 130.0 [security fixes].•••Fixes CVE-2024-8381, CVE-2024-8382, CVE-2024-8383, CVE-2024-8384,
CVE-2024-8385, CVE-2024-8386, CVE-2024-8387, CVE-2024-8388,
CVE-2024-8389.
* nongnu/packages/mozilla.scm (firefox): Update to 130.0.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2024-08-29 | nongnu: Remove icu4c-73.•••This version of icu4c is in Guix and made public in
cf842e9b20b89ecb08ac3456a91780ec07b5a201. This also failed to build on the
core-updates nonguix build due to a test failure which should be fixed in Guix
with 7937c8827b8d23347a3159b4696335bd19fc17aa.
* nongnu/packages/mozilla.scm (icu4c-73): Delete variable.
| John Kehayias |
| 2024-08-21 | nongnu: firefox: Update to 129.0.2.•••* nongnu/packages/mozilla.scm (firefox): Update to 129.0.2.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-08-17 | nongnu: firefox: Update to 129.0.1.•••* nongnu/packages/mozilla.scm (firefox): Update to 129.0.1.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-08-08 | nongnu: firefox-esr: Update to 128.1.0esr [security fixes].•••Fixes CVE-2024-7518, CVE-2024-7519, CVE-2024-7520, CVE-2024-7521,
CVE-2024-7522, CVE-2024-7524, CVE-2024-7525, CVE-2024-7526,
CVE-2024-7527, CVE-2024-7528, CVE-2024-7529, CVE-2024-7531.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.1.0esr.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-08-08 | nongnu: firefox: Update to 129.0 [security fixes].•••Fixes CVE-2024-7518, CVE-2024-7519, CVE-2024-7520, CVE-2024-7521,
CVE-2024-7522, CVE-2024-7523, CVE-2024-7524, CVE-2024-7525,
CVE-2024-7526, CVE-2024-7527, CVE-2024-7528, CVE-2024-7529,
CVE-2024-7530, CVE-2024-7531.
* nongnu/packages/mozilla.scm (firefox): Update to 129.0.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-07-26 | nongnu: firefox: Update to 128.0.3.•••* nongnu/packages/mozilla.scm (firefox): Update to 128.0.3.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-07-24 | nongnu: firefox: Update to 128.0.2.•••* nongnu/packages/mozilla.scm (firefox): Update to 128.0.2.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-07-16 | nongnu: firefox: Fix WM Class.•••* nongnu/packages/mozilla.scm (firefox-esr)[arguments]: Set the
MOZ_APP_REMOTINGNAME environment variable and replace "Navigator" with
"Firefox" in firefox.desktop.
Fixes #325.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Brice Waegeneire |
| 2024-07-10 | nongnu: firefox: Update to 128.0 [security fixes].•••Fixes CVE-2024-6600, CVE-2024-6601, CVE-2024-6602, CVE-2024-6603,
CVE-2024-6604, CVE-2024-6605, CVE-2024-6606, CVE-2024-6607,
CVE-2024-6608, CVE-2024-6609, CVE-2024-6610, CVE-2024-6611,
CVE-2024-6612, CVE-2024-6613, CVE-2024-6614, CVE-2024-6615.
* nongnu/packages/mozilla.scm (firefox): Update to 128.0.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-07-10 | nongnu: firefox-esr: Update to 128.0esr [security fixes].•••Fixes CVE-2024-6600, CVE-2024-6601, CVE-2024-6602, CVE-2024-6603,
CVE-2024-6604.
* nongnu/packages/mozilla.scm (firefox-esr): Update to 128.0esr.
[arguments]<#:phases>: Update 'remove-cargo-frozen-flag.
[native-inputs]: Update rust-cbindgen-0.26.
(rust-firefox-esr): Use rust-1.77.
(firefox)[arguments]<#:phases>: Delete 'remove-cargo-frozen-flag.
[native-inputs]: Drop replace of rust-cbindgen. Use clang-18, the default
one (13) fails to compile this version of firefox.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-07-07 | nongnu: firefox: Use rust-1.77.•••Efraim was kind enough to add rust versions up to the current 1.79 into the
Guix, however the default version was not changed yet. That means we can drop
our firefox-rust-1.76 and just use regular rust-1.77.
* nongnu/packages/mozilla.scm (firefox-rust-1.76): Delete variable.
(rust-firefox): Define as `rust-1.77'.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-06-26 | nongnu: firefox: Update to 127.0.2.•••* nongnu/packages/mozilla.scm (firefox): Update to 127.0.2.
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
| Tomas Volf |
| 2024-06-20 | nongnu: firefox: Update to 127.0.1.•••* nongnu/packages/mozilla.scm (firefox): Update to 127.0.1.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |
| 2024-06-15 | nongnu: firefox: Update to 127.0 [security fixes].•••Fixes CVE-2024-5687, CVE-2024-5688, CVE-2024-5689, CVE-2024-5690,
CVE-2024-5691, CVE-2024-5692, CVE-2024-5693, CVE-2024-5694,
CVE-2024-5695, CVE-2024-5696, CVE-2024-5697, CVE-2024-5698,
CVE-2024-5699, CVE-2024-5700, CVE-2024-5701.
Firefox 127 requires rust >= 1.76 which is currently not in upstream Guix. So
lets bootstrap one.
I took the liberty of adjusting the comment above rust-firefox-esr to use
better link and properly explain why `rust' is used, since it did not really
match the original wording.
* nongnu/packages/mozilla.scm (firefox): Update to 127.0.
(firefox-rust-1.76): New variable.
(rust-firefox): Re-define to firefox-rust-1.76.
Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
| Tomas Volf |