From ba91bc437dba367f98608658bb4a19fb0880ad24 Mon Sep 17 00:00:00 2001
From: Tomas Volf <~@wolfsden.cz>
Date: Fri, 19 Dec 2025 22:14:30 +0100
Subject: nongnu: firefox: Update to 146.0.1 [security fixes].

Fixes CVE-2025-14860, CVE-2025-14861.

* nongnu/packages/mozilla.scm (firefox): Update to 146.0.1.
[native-inputs]: Use official rust-cbindgen-0.29 package.

Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>
---
 nongnu/packages/mozilla.scm | 33 ++++-----------------------------
 1 file changed, 4 insertions(+), 29 deletions(-)

(limited to 'nongnu')

diff --git a/nongnu/packages/mozilla.scm b/nongnu/packages/mozilla.scm
index 6b138a4..844abb8 100644
--- a/nongnu/packages/mozilla.scm
+++ b/nongnu/packages/mozilla.scm
@@ -529,20 +529,20 @@ Release (ESR) version.")
 
 ;; Update this id with every firefox update to its release date.
 ;; It's used for cache validation and therefore can lead to strange bugs.
-(define %firefox-build-id "20251208134803")
+(define %firefox-build-id "20251217214444")
 
 (define-public firefox
   (package
     (inherit firefox-esr)
     (name "firefox")
-    (version "146.0")
+    (version "146.0.1")
     (source
      (origin
        (method url-fetch)
        (uri (string-append "https://archive.mozilla.org/pub/firefox/releases/"
                            version "/source/firefox-" version ".source.tar.xz"))
        (sha256
-        (base32 "05nz4b2063z7j1k80v5nsdi8xnl13xfil2blxw1idhxb23hcmm08"))
+        (base32 "1swih4jljq162vgdl2m2d8xn4s4hj4vjqcfww59kk4kkhh78lrz9"))
        (patches
         (map (lambda (patch)
                (search-path
@@ -568,32 +568,7 @@ Release (ESR) version.")
      (modify-inputs (package-native-inputs firefox-esr)
        (replace "rust" rust-firefox)
        (replace "rust:cargo" `(,rust-firefox "cargo"))
-       (replace "rust-cbindgen"
-         (package
-           (inherit rust-cbindgen-0.28)
-           (name "rust-cbindgen")
-           (version "0.29.2")
-           (inputs
-            (modify-inputs (package-inputs rust-cbindgen-0.28)
-              (append (@@ (gnu packages rust-crates) rust-heck-0.5.0))
-              (append (@@ (gnu packages rust-crates) rust-indexmap-2.11.4))
-              (append (@@ (gnu packages rust-crates) rust-serde-1.0.228))
-              (append (@@ (gnu packages rust-crates) rust-serde-core-1.0.228))
-              (append (@@ (gnu packages rust-crates) rust-serde-derive-1.0.228))
-              (append (@@ (gnu packages rust-crates) rust-serde-spanned-1.0.3))
-              (append (@@ (gnu packages rust-crates) rust-toml-0.9.8))
-              (append (@@ (gnu packages rust-crates) rust-toml-datetime-0.7.3))
-              (append (@@ (gnu packages rust-crates) rust-toml-parser-1.0.4))
-              (append (@@ (gnu packages rust-crates) rust-toml-writer-1.0.4))
-              (append (@@ (gnu packages rust-crates) rust-winnow-0.7.13))))
-           (source
-            (origin
-              (method url-fetch)
-              (uri (crate-uri "cbindgen" version))
-              (file-name (string-append name "-" version ".tar.gz"))
-              (sha256
-               (base32
-                "168pl7jrz6zw7yi4hggqa78fgr8z8g7fyyjhihpw10cf583zvyxy"))))))))
+       (replace "rust-cbindgen" rust-cbindgen-0.29)))
     (description
      "Full-featured browser client built from Firefox source tree, without
 the official icon and the name \"firefox\".")))
-- 
cgit v1.2.3