From 2b33a49a61a32e8c5d61dbee159907ac920495aa Mon Sep 17 00:00:00 2001 From: Tomas Volf <~@wolfsden.cz> Date: Tue, 13 Jan 2026 21:14:31 +0100 Subject: nongnu: firefox-esr: Update to 140.7.0esr [security fixes]. Fixes CVE-2025-14327, CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880, CVE-2026-0882, CVE-2026-0883, CVE-2026-0884, CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890, CVE-2026-0891. * nongnu/packages/mozilla.scm (firefox-esr): Update to 140.7.0esr. Signed-off-by: John Kehayias --- nongnu/packages/mozilla.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'nongnu') diff --git a/nongnu/packages/mozilla.scm b/nongnu/packages/mozilla.scm index 844abb8..ca8e0bc 100644 --- a/nongnu/packages/mozilla.scm +++ b/nongnu/packages/mozilla.scm @@ -87,19 +87,19 @@ ;; Update this id with every firefox update to its release date. ;; It's used for cache validation and therefore can lead to strange bugs. -(define %firefox-esr-build-id "20251208132959") +(define %firefox-esr-build-id "20260112140008") (define-public firefox-esr (package (name "firefox-esr") - (version "140.6.0esr") + (version "140.7.0esr") (source (origin (method url-fetch) (uri (string-append "https://archive.mozilla.org/pub/firefox/releases/" version "/source/firefox-" version ".source.tar.xz")) (sha256 - (base32 "1jadc0ynq49zcqd7ix9nxlrqy5gfhm61p7yliwy068bma2mwjdbc")) + (base32 "0a8mrc4pja4cjhayg4af5lsfrf7161gfq03idwik0vvjf68772k0")) (patches (map (lambda (patch) (search-path -- cgit v1.2.3