nongnu: firefox: Update to 147.0 [security fixes].

Fixes CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
CVE-2026-0881, CVE-2026-0882, CVE-2026-0883, CVE-2026-0884,
CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0888,
CVE-2026-0889, CVE-2026-0890, CVE-2026-0891, CVE-2026-0892.

* nongnu/packages/mozilla.scm (firefox): Update to 147.0.
[inputs]: Use icu4c-78.

Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
Modified-by: John Kehayias <john.kehayias@protonmail.com>
This commit is contained in:
Tomas Volf 2026-01-13 21:25:17 +01:00 committed by John Kehayias
parent 60d1e7b0f6
commit f5338f63fc
No known key found for this signature in database
GPG key ID: 499097AE5EA815D9

View file

@ -529,20 +529,20 @@ Release (ESR) version.")
;; Update this id with every firefox update to its release date.
;; It's used for cache validation and therefore can lead to strange bugs.
(define %firefox-build-id "20251217214444")
(define %firefox-build-id "20260112140453")
(define-public firefox
(package
(inherit firefox-esr)
(name "firefox")
(version "146.0.1")
(version "147.0")
(source
(origin
(method url-fetch)
(uri (string-append "https://archive.mozilla.org/pub/firefox/releases/"
version "/source/firefox-" version ".source.tar.xz"))
(sha256
(base32 "1swih4jljq162vgdl2m2d8xn4s4hj4vjqcfww59kk4kkhh78lrz9"))
(base32 "1znr9wp4f79b83mv0as9kj0nh09yjxzqv4nbi4bmn7jgfmiqwb92"))
(patches
(map (lambda (patch)
(search-path
@ -564,6 +564,9 @@ Release (ESR) version.")
(replace 'set-build-id
(lambda _
(setenv "MOZ_BUILD_DATE" #$%firefox-build-id)))))))
(inputs
(modify-inputs (package-inputs firefox-esr)
(replace "icu4c" icu4c-78)))
(native-inputs
(modify-inputs (package-native-inputs firefox-esr)
(replace "rust" rust-firefox)