From b9d3169772b45a2457def49318173f8353bb34f9 Mon Sep 17 00:00:00 2001 From: Tomas Volf <~@wolfsden.cz> Date: Tue, 29 Apr 2025 22:15:55 +0200 Subject: nongnu: firefox: Update to 138.0 [security fixes]. Fixes CVE-2025-2817, CVE-2025-4082, CVE-2025-4083, CVE-2025-4085, CVE-2025-4086, CVE-2025-4087, CVE-2025-4088, CVE-2025-4089, CVE-2025-4090, CVE-2025-4091, CVE-2025-4092. * nongnu/packages/patches/firefox-ge-138-compare-paths.patch: New file. * nongnu/packages/mozilla.scm (firefox): Update to 138.0. [source]: Use the new patch. [native-inputs]: Replace rust-cbindgen with rust-cbindgen-0.28. Signed-off-by: Hilton Chain --- .../patches/firefox-ge-138-compare-paths.patch | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 nongnu/packages/patches/firefox-ge-138-compare-paths.patch (limited to 'nongnu/packages/patches/firefox-ge-138-compare-paths.patch') diff --git a/nongnu/packages/patches/firefox-ge-138-compare-paths.patch b/nongnu/packages/patches/firefox-ge-138-compare-paths.patch new file mode 100644 index 0000000..b7d92d7 --- /dev/null +++ b/nongnu/packages/patches/firefox-ge-138-compare-paths.patch @@ -0,0 +1,21 @@ +diff --git a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +index 1b01851e2fff..7f3b8c200c2f 100644 +--- a/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs ++++ b/toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs +@@ -3753,6 +3753,7 @@ export const XPIDatabaseReconcile = { + if ( + newAddon || + oldAddon.updateDate != xpiState.mtime || ++ oldAddon.path != xpiState.path || + (aUpdateCompatibility && this.isAppBundledLocation(installLocation)) || + // update addon metadata if the addon in bundled into + // the omni jar and version or the resource URI pointing +@@ -3767,8 +3768,6 @@ export const XPIDatabaseReconcile = { + xpiState, + newAddon + ); +- } else if (oldAddon.path != xpiState.path) { +- newAddon = this.updatePath(installLocation, oldAddon, xpiState); + } else if (aUpdateCompatibility || aSchemaChange) { + newAddon = this.updateCompatibility( + installLocation, -- cgit v1.2.3