branch master updated: gnu: icecat: Update to 115.18.0-guix2 [security fixes].

[guix-commits]

This is an automated email from the git hooks/post-receive script.

mhw pushed a commit to branch master
in repository guix.

The following commit(s) were added to refs/heads/master by this push:
     new 634b1e3f42 gnu: icecat: Update to 115.18.0-guix2 [security fixes].
634b1e3f42 is described below

commit 634b1e3f42f59472f70a724a2e1559f15e136e9d
Author: Mark H Weaver <mhw@netris.org>
AuthorDate: Thu Nov 28 13:04:52 2024 -0500

    gnu: icecat: Update to 115.18.0-guix2 [security fixes].
    
    Includes fixes for CVE-2024-11692, CVE-2024-11693, and CVE-2024-11697.
    
    * gnu/packages/gnuzilla.scm (%icecat-version, %icecat-build-id): Update.
    (icecat-source): Update gnuzilla commit and hash.
---
 gnu/packages/gnuzilla.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm
index 0ffc6f95c4..0b7523c934 100644
--- a/gnu/packages/gnuzilla.scm
+++ b/gnu/packages/gnuzilla.scm
@@ -534,8 +534,8 @@ variable defined below.  It requires guile-json to be 
installed."
 (define computed-origin-method (@@ (guix packages) computed-origin-method))
 
 (define %icecat-base-version "115.18.0")
-(define %icecat-version (string-append %icecat-base-version "-guix1"))
-(define %icecat-build-id "20241126000000") ;must be of the form YYYYMMDDhhmmss
+(define %icecat-version (string-append %icecat-base-version "-guix2"))
+(define %icecat-build-id "20241127000000") ;must be of the form YYYYMMDDhhmmss
 
 ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball
 ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat'
@@ -560,7 +560,7 @@ variable defined below.  It requires guile-json to be 
installed."
          ;; The upstream-icecat-base-version may be older than the
          ;; %icecat-base-version.
          (upstream-icecat-base-version "115.18.0")
-         (gnuzilla-commit "21732b4ee88ac55f266cc1e83f2c98514eba9ae9")
+         (gnuzilla-commit "dc99e15355412bc9b11b34d3fe5729bed1c251de")
          (gnuzilla-source
           (origin
             (method git-fetch)
@@ -572,7 +572,7 @@ variable defined below.  It requires guile-json to be 
installed."
                                       (string-take gnuzilla-commit 8)))
             (sha256
              (base32
-              "0qqwa0gpv0v61mf7rkrv2sn2z2jrfaa4akgdmf5blfsa9yv8xz79"))))
+              "0syzjvgc93mwxnqh5k2cr080r6932j7q7y6ar865f9z2d3lj2vg0"))))
 
          ;; 'search-patch' returns either a valid file name or #f, so wrap it
          ;; in 'assume-valid-file-name' to avoid 'local-file' warnings.