From 42968b582b52d98e7393370cb651c6188aa92ba4 Mon Sep 17 00:00:00 2001 From: Jonathan Brielmaier Date: Thu, 10 Feb 2022 21:52:31 +0100 Subject: [PATCH] nongnu: firefox: Update to 97.0 [security fixes]. This fixes CVE-2022-22753, CVE-2022-22754, CVE-2022-22755, CVE-2022-22756, CVE-2022-22757, CVE-2022-22758, CVE-2022-22759, CVE-2022-22760, CVE-2022-22761, CVE-2022-22762, CVE-2022-22764 and CVE-2022-0511. * nongnu/packages/mozilla.scm (firefox): Update to 97.0. [native-inputs]: Add now required alsa-lib. Use clang-12 and llvm-12 as older versions fail to build firefox. --- nongnu/packages/mozilla.scm | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/nongnu/packages/mozilla.scm b/nongnu/packages/mozilla.scm index 8c378cb..e613690 100644 --- a/nongnu/packages/mozilla.scm +++ b/nongnu/packages/mozilla.scm @@ -85,19 +85,19 @@ ;; Update this id with every firefox update to it's release date. ;; It's used for cache validation and therefor can lead to strange bugs. -(define %firefox-build-id "20220120000000") +(define %firefox-build-id "20220208000000") (define-public firefox (package (name "firefox") - (version "96.0.2") + (version "97.0") (source (origin (method url-fetch) (uri (string-append "https://archive.mozilla.org/pub/firefox/releases/" version "/source/firefox-" version ".source.tar.xz")) (sha256 - (base32 "1f0sldnn3rqmvc248qdr5ik0sb1pkvry05byv5p8x9vrj7x2lbfk")))) + (base32 "0a6z94kwgycgis4mgl13dh52kw7zmsya2qpxhcrh6b8j8z5pv2kc")))) (build-system gnu-build-system) (arguments `(#:configure-flags @@ -403,10 +403,11 @@ ("zip" ,zip) ("zlib" ,zlib))) (native-inputs - `(("autoconf" ,autoconf-2.13) + `(("alsa-lib" ,alsa-lib) + ("autoconf" ,autoconf-2.13) ("cargo" ,rust "cargo") - ("clang" ,clang-10) - ("llvm" ,llvm-10) + ("clang" ,clang-12) + ("llvm" ,llvm-12) ("wasm32-wasi-clang-toolchain" ,wasm32-wasi-clang-toolchain) ("m4" ,m4) ("nasm" ,nasm)