Commit graph

51 commits

Author SHA1 Message Date
Marius Bakke
adf323e0d7
gnu: ungoogled-chromium: Update to 80.0.3987.122-0.bb952f1 [security fixes].
This release fixes CVE-2020-6407 and CVE-2020-6418.

* gnu/packages/chromium.scm (%chromium-version): Set to 80.0.3987.122.
(%ungoogled-revision): Update to 6056988937eb.
(%chromium-origin): Update hash.
(%ungoogled-origin): Download from pull request, update hash.
2020-02-25 18:35:33 +01:00
Marius Bakke
bfce33cdff
gnu: ungoogled-chromium-wayland: Fix build.
* gnu/packages/chromium.scm (ungoogled-chromium/wayland)[arguments]: Add #:phases.
2020-02-25 18:35:33 +01:00
Marius Bakke
d64584cfb3
gnu: ungoogled-chromium: Add license information about preserved files.
This is a follow-up to commit f613d459be.

* gnu/packages/chromium.scm (%preserved-third-party-files): Annotate newly
added entries with license information.
2020-02-25 18:35:33 +01:00
Marius Bakke
f613d459be
gnu: ungoogled-chromium: Update to 80.0.3987.116-0.bb952f1.
* gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for
Chromium 80.
(%chromium-version): Set to 80.0.3987.116.
(%ungoogled-revision): Set to bb952f18c8c80c569583edd8dbb0b54443f49043.
(%debian-revision): Set to debian/80.0.3987.116-1.
(%chromium-origin, %ungoogled-origin, %debian-origin): Update hashes.
(ungoogled-chromium)[arguments]: In #:configure-flags, add "is_cfi=false".
Remove "is_clang", "enable_iterator_debugging", "exclude_unwind_tables",
"use_jumbo_build", "jumbo_file_merge_limit".  Adjust environment for building
with Clang.
[native-inputs]: Remove GCC-8.  Add CLANG-9 and LD-WRAPPER-NEXT.
2020-02-24 22:56:30 +01:00
Marius Bakke
25590118ad
gnu: Add ld wrapper variant that supports quotes in response files.
* gnu/packages/ld-wrapper-next.in: New file.
* gnu/local.mk (MISC_DISTRO_FILES): Adjust accordingly.
* gnu/packages/chromium.scm (ld-wrapper-next): New variable.
2020-02-24 22:47:15 +01:00
Marius Bakke
4cac557911
gnu: chromium.scm: Remove use of CADR.
...as per the style guidelines.

* gnu/packages/chromium.scm (%debian-origin)[file-name]: Use MATCH instead of
IF and CADR to compute the name.
2020-02-10 20:18:03 +01:00
Marius Bakke
a7d470e47d
gnu: ungoogled-chromium: Update to 79.0.3945.130-0.e2fae99.
* gnu/packages/chromium.scm (%chromium-version): Set to 79.0.3945.130.
(%ungoogled-revision): Set to e2fae99.
(%debian-revision): Set to debian/79.0.3945.130-2.
(%chromium-origin, %ungoogled-origin, %debian-origin): Update hashes.
(ungoogled-chromium-source): Ignore comments in debian/patches/series.
(libvpx/chromium, gentoo-patch): Remove variables.
(ungoogled-chromium)[inputs]: Change from LIBVPX/CHROMIUM to LIBVPX.
(ungoogled-chromium/wayland): Add 'ozone_platform="wayland"' in #:configure-flags.
2020-01-21 21:18:11 +01:00
Marius Bakke
07b10725da
gnu: ungoogled-chromium: Lower resource limits.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Decrease maximum
number of open files from 4096 to 2048.
2020-01-07 18:18:12 +01:00
Marius Bakke
f8157512a3
gnu: ungoogled-chromium: Do not set LD_LIBRARY_PATH in wrapper.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Add phase
'add-absolute-references'.  Don't wrap with LD_LIBRARY_PATH.
2020-01-07 18:18:12 +01:00
Marius Bakke
aadfcd1b6f
gnu: ungoogled-chromium: Update to 78.0.3904.108-0.8f06513 [security fixes].
This fixes CVE-2019-13723 and CVE-2019-13724.

* gnu/packages/chromium.scm (%chromium-version): Set to 78.0.3904.108.
(%ungoogled-revision): Set to 8f065138317a6152b20decc224027a5192ba76b1.
(%chromium-origin, %ungoogled-origin): Update hashes.
2019-11-21 22:41:44 +01:00
Marius Bakke
664fa4b162
gnu: ungoogled-chromium: Increase resource limits in separate phase.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Add phase
'increase-resource-limits'.
2019-11-21 22:41:44 +01:00
Marius Bakke
ba261f6318
gnu: ungoogled-chromium: Update to 78.0.3904.97-0.acaf163.
* gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for
Chromium 78.
(%chromium-version): Set to 78.0.3904.97.
(%ungoogled-revision): Set to acaf16383f264d8a2f24142ad054c9b4355771d3.
(%debian-revision): Set to e43d74632091324774a5049668782dba7b09cf72.
(%chromium-origin, %ungoogled-origin, %debian-origin): Update hashes.
(gentoo-patches, %auxiliary-patches): Remove variables.
(ungoogled-chromium-source): Adjust Debian patches for 78.  Don't apply
%AUXILIARY-PATCHES.
(libvpx/chromium): New variable.
(ungoogled-chromium)[arguments]: Add substitution for ICU headers.  Adjust
other substitutions for 78.  Remove obsolete workaround.  Increase ulimit in
'build' phase.  Don't install '22x22' icon, which no longer exists.
[inputs]: Change from LIBVPX to LIBVPX/CHROMIUM.
[properties]: Remove HIDDEN?.
(ungoogled-chromium-wayland)[inputs]: Don't remove inherited inputs.
(ungoogled-chromium-is-deprecated, ungoogled-chromium-wayland-is-deprecated):
Remove variables.
2019-11-15 19:09:13 +01:00
Marius Bakke
22c313eff8
gnu: Deprecate ungoogled-chromium.
This package has known security flaws that are being exploited in the wild.
See <https://lists.gnu.org/archive/html/guix-devel/2019-10/msg00576.html> for
why it has not been updated.

* gnu/packages/chromium.scm (ungoogled-chromium)[properties]: Set #:hidden? #t.
(ungoogled-chromium-is-deprecated, ungoogled-chromium-wayland-is-deprecated):
New public variables.
2019-11-03 19:40:33 +01:00
Mark H Weaver
0481289cbc
Merge branch 'master' into core-updates 2019-08-29 17:19:18 -04:00
Marius Bakke
7735c4bfef
gnu: ungoogled-chromium: Update to 76.0.3809.132-0.8eba5c0.
* gnu/packages/chromium.scm (%chromium-version): Set to 76.0.3809.132.
(%chromium-origin): Update hash.
2019-08-29 14:44:22 +02:00
Marius Bakke
462ad9f56b
Merge branch 'master' into core-updates 2019-08-13 20:42:06 +02:00
Marius Bakke
da7e59ac41
gnu: ungoogled-chromium: Update to 76.0.3809.100-0.8eba5c0 [security fixes].
This release fixes CVE-2019-5867 and CVE-2019-5868.

* gnu/packages/chromium.scm (%chromium-version): Set to 76.0.3809.100.
(%ungoogled-revision): Set to 8eba5c0.
(%chromium-origin, %ungoogled-origin): Update hashes.
2019-08-12 01:50:43 +02:00
Marius Bakke
7f2e852267
gnu: ungoogled-chromium: Update to 76.0.3809.87-0.6ea9390.
* gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for 76.
(%chromium-version): Set to 76.0.3809.87.
(%ungoogled-revision): Set to 6ea939002bae43a27910e03569d43519d07842e7.
(%debian-revision): Set to debian/76.0.3809.87-2.
(%chromium-origin, %ungoogled-origin, %debian-origin): Update hashes.
(gentoo-patch, gentoo-patches): New procedures.
(%auxiliary-patches): New variable.
(ungoogled-chromium-source): Ignore Ungoogleds bundled Debian patches, as well
as some of Debians build fixes.  Apply %AUXILIARY-PATCHES.
(ungoogled-chromium)[arguments]: Adjust unbundling substitutions.  Do not set
Blink symbol level.
2019-08-04 13:33:42 +02:00
Marius Bakke
ccad0e4d69
Merge branch 'master' into core-updates 2019-07-22 18:58:48 +02:00
Marius Bakke
6a489839a8
gnu: ungoogled-chromium: Enable parallel build.
...but limit the memory usage.  Tested with --cores=8 on a 16 GiB RAM machine.

* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Remove <#:parallel-build?>.
Add "jumbo_file_merge_limit=8" in <#:configure-flags>.
2019-07-22 16:22:21 +02:00
Marius Bakke
2ee70a5b11
Merge branch 'master' into core-updates 2019-07-19 01:15:59 +02:00
Marius Bakke
82ccfb1d94
gnu: ungoogled-chromium: Add native Wayland variant.
* gnu/packages/chromium.scm (%preserved-third-party-files): Preserve
"third_party/wayland/wayland_scanner_wrapper.py" and "third_party/wayland-protocols".
(ungoogled-chromium/wayland): New public variable.
2019-07-17 16:30:23 +02:00
Ludovic Courtès
64de896a71
Merge branch 'master' into core-updates 2019-07-17 15:51:10 +02:00
Marius Bakke
d4cafcaf30
gnu: ungoogled-chromium: Update to 75.0.3770.142 [security fixes].
This fixes CVE-2019-972921 and CVE-2019-951487.

* gnu/packages/chromium.scm (%chromium-version): Set to 75.0.3770.142.
(%chromium-origin): Update hash.
2019-07-16 17:06:41 +02:00
Marius Bakke
fb9a23a3f3
Merge branch 'master' into core-updates
Conflicts:
	gnu/local.mk
	gnu/packages/python-xyz.scm
	gnu/packages/xml.scm
	guix/gexp.scm
	po/guix/POTFILES.in
2019-07-12 01:03:53 +02:00
Marius Bakke
760d90cc6a
gnu: ungoogled-chromium: Increase build timeout.
* gnu/packages/chromium.scm (ungoogled-chromium)[properties]: Set TIMEOUT to
40 hours.
2019-07-10 00:54:29 +02:00
Marius Bakke
fb82d3472d
gnu: Remove redundant icu4c@64 package.
* gnu/packages/icu4c.scm (icu4c-64): Remove variable.
* gnu/packages/chromium.scm (ungoogled-chromium)[inputs]: Change ICU4C-64 to ICU4C.
2019-07-02 20:21:13 +02:00
Marius Bakke
ff68ddb032
gnu: ungoogled-chromium: Build against ICU 64.
* gnu/packages/icu4c.scm (icu4c-64): New public variable.
* gnu/packages/chromium.scm (ungoogled-chromium)[inputs]: Change ICU4C to ICU4C-64.
2019-06-30 14:11:00 +02:00
Marius Bakke
c94cc6de39
gnu: ungoogled-chromium: Increase build timeout.
* gnu/packages/chromium.scm (ungoogled-chromium)[properties]: New field.
2019-06-21 11:05:05 +02:00
Marius Bakke
9a2e5fe5fd
gnu: ungoogled-chromium: Disable parallel build.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Set
  #:parallel-build? #f.  Adjust 'build' phase to account for it.
2019-06-20 22:49:32 +02:00
Marius Bakke
cee835897b
gnu: ungoogled-chromium: Update to 75.0.3770.100-0.5d8abc3.
* gnu/packages/chromium.scm (%chromium-version): Set to 75.0.3770.100.
(%chromium-origin): Update hash.
2019-06-20 22:49:32 +02:00
Alex Griffin
3df7b15e6c
gnu: ungoogled-chromium: Install icons.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Install icons.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2019-06-20 22:49:32 +02:00
Marius Bakke
54200da4b3
gnu: ungoogled-chromium: Update to 75.0.3770.90-0.5d8abc3 [fixes CVE-2019-5842].
* gnu/packages/chromium.scm (%chromium-version): Update to 75.0.3770.90.
(%debian-revision): Update to 'debian/75.0.3770.90-1'.
(%chromium-origin): Update hashes.
2019-06-14 14:05:47 +02:00
Marius Bakke
136eeb0b49
gnu: ungoogled-chromium: Update to 75.0.3770.80-0.5d8abc3.
* gnu/packages/chromium.scm (%preserved-third-party-files): Update for 75.
(%chromium-version): Update to 75.0.3770.80.
(%ungoogled-revision): Update to 5d8abc38b43a62f379615a0dc972b29d9aebb4b4.
(%debian-revision): Update to debian/75.0.3770.80-1.
(%chromium-origin, %ungoogled-origin, %debian-origin): Update hashes.
(ungoogled-chromium-source): Include Debians GCC6 patches.
(ungoogled-chromium)[arguments]: Add "enable_vr=false" to #:configure-flags.
2019-06-12 13:29:45 +02:00
Marius Bakke
d0804ea0c6
gnu: chromium: Move origins into separate variables.
* gnu/packages/chromium.scm (%chromium-origin, %ungoogled-origin,
%debian-origin): New variables.
(ungoogled-chromium-source): Adjust accordingly.
2019-06-12 13:29:35 +02:00
Marius Bakke
ebd45195dd
gnu: ungoogled-chromium: Update to 74.0.3729.169-0.d2beaef.
* gnu/packages/chromium.scm (%chromium-version): Update to 74.0.3729.169.
(ungoogled-chromium-source): Update hash.
2019-05-22 15:05:43 +02:00
Marius Bakke
91057d9564
gnu: ungoogled-chromium: Update to 74.0.3729.157-0.d2beaef.
* gnu/packages/chromium.scm (%chromium-version): Update to 74.0.3729.157.
(%ungoogled-revision): Update to d2beaef.
(ungoogled-chromium-source): Update hashes.
2019-05-21 17:25:54 +02:00
Marius Bakke
f99418e3f3
gnu: ungoogled-chromium: Update to 74.0.3729.131-0.9e33022 [fixes CVE-2019-5824].
* gnu/packages/chromium.scm (%chromium-version): Update to 74.0.3729.131.
(ungoogled-chromium-source): Update Chromium hash.
2019-05-01 22:15:01 +02:00
Marius Bakke
ca86b0bae3
gnu: ungoogled-chromium: Unbundle openjpeg again.
This is a follow-up to commit 40594fdcb9e360d68e5444771b5467ba5bbbfcf2.

* gnu/packages/chromium.scm (%preserved-third-party-files): Remove
'third_party/pdfium/third_party/libopenjpeg20'.
(ungoogled-chromium)[arguments]: Fix typo in #:configure-flags.
2019-05-01 22:15:01 +02:00
Marius Bakke
af74e4350f
gnu: ungoogled-chromium: Update to 74.0.3729.108-0.9e33022.
* gnu/packages/chromium.scm (%preserved-third-party-files): Add four new
directories, delete three obsolete.
(%chromium-version, %ungoogled-revision, %debian-revision): Update for 74.
(ungoogled-chromium-source): Update hashes.  Ignore Debians GCC6 patches.
(ungoogled-chromium)[arguments]: Add "use_system_openjpeg" to #:configure-flags.
2019-05-01 01:31:31 +02:00
Marius Bakke
821222433a
gnu: ungoogled-chromium: Update to 73.0.3683.103-0.4c7fb6d.
* gnu/packages/chromium.scm (%chromium-version): Set to 73.0.3683.103.
(ungoogled-chromium-source): Adjust chromium hash.
2019-04-07 23:56:47 +02:00
Ludovic Courtès
aff0cce917
gnu: Move nss & co. to nss.scm.
* gnu/packages/gnuzilla.scm (nspr, nss): Move to...
* gnu/packages/nss.scm: ... here.  New file.
* gnu/packages/chromium.scm, gnu/packages/disk.scm,
gnu/packages/freedesktop.scm, gnu/packages/gnome.scm,
gnu/packages/gnunet.scm, gnu/packages/java.scm,
gnu/packages/libreoffice.scm, gnu/packages/linux.scm,
gnu/packages/mate.scm, gnu/packages/openldap.scm,
gnu/packages/package-management.scm, gnu/packages/password-utils.scm,
gnu/packages/polkit.scm, gnu/packages/qt.scm,
gnu/packages/sssd.scm, gnu/packages/storage.scm,
gnu/packages/vpn.scm, gnu/packages/web.scm, gnu/packages/xml.scm: Adjust
accordingly.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add nss.scm.
2019-04-04 17:47:02 +02:00
Marius Bakke
105fa9fcf7
gnu: ungoogled-chromium: Update to 73.0.3683.86-0.4c7fb6d [security fixes].
The update to Chromium 73 includes more than 60 security fixes.  See the
release announcement for more information:
<https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html>.

* gnu/packages/chromium.scm (%preserved-third-party-files): Drop
"net/third_party/http2" and "net/third_party/spdy".  Add "v8/src/third_party/siphash".
(%chromium-version): Update to 73.0.3683.86.
(%ungoogled-revision): Update to 4c7fb6d1a86602999f30b58ef8b331b2115c5ad8.
(%debian-revision): New variable.
(ungoogled-chromium-source): Add an origin for Debians packaging scripts.
Adjust for Ungoogled refactoring and add a procedure for applying Debian
patches.  Replace unneeded LET* for LET and reindent.
(ungoogled-chromium)[arguments]: Remove one obsolete substitution, add two others.
2019-03-31 21:26:17 +02:00
Marius Bakke
799aebd71f
gnu: ungoogled-chromium: Enable VA-API on x86_64-linux only.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Conditionally add
"use_vaapi" to #:configure-flags.
2019-03-31 21:26:17 +02:00
Marius Bakke
794e0664bd
gnu: ungoogled-chromium: Update to 72.0.3626.121-0.a80839c [fixes CVE-2019-5786].
* gnu/packages/chromium.scm (%chromium-version): Update to 72.0.3626.121.
(ungoogled-chromium-source): Update hash.
2019-03-02 22:21:16 +01:00
Marius Bakke
881155395d
gnu: chromium: Update to 72.0.3626.119-0.a80839c.
* gnu/packages/chromium.scm (%chromium-version): Update to 72.0.3626.119.
(package-revision): Reset.
(ungoogled-chromium-source): Update hash.
2019-02-23 18:31:18 +01:00
Marius Bakke
2a1ec7bcf4
gnu: icecat, ungoogled-chromium: Disable grafts on source derivation.
* gnu/packages/chromium.scm (computed-origin-method): Pass #:graft? #f to
GEXP->DERIVATION.
* gnu/packages/gnuzilla.scm (computed-origin-method): Likewise.
2019-02-22 17:10:24 +01:00
Marius Bakke
f2945c26a9
gnu: ungoogled-chromium: Update to 72.0.3626.109-1.a80839c.
* gnu/packages/chromium.scm (%ungoogled-revision): Update to a80839c.
(package-revision): Bump.
(ungoogled-chromium-source): Update hash.
2019-02-22 17:10:23 +01:00
Marius Bakke
718540d21b
gnu: ungoogled-chromium: Include Ungoogled revision in version string.
* gnu/packages/chromium.scm (package-revision, %package-version): New variables.
(ungoogled-chromium-source)[file-name]: Use %PACKAGE-VERSION.
(ungoogled-chromium)[version]: Likewise.
2019-02-22 17:10:23 +01:00
Marius Bakke
78a64543a9
gnu: ungoogled-chromium: Explicitly disable Widevine.
* gnu/packages/chromium.scm (ungoogled-chromium)[arguments]: Add
'enable_widevine=false' to #:configure-flags.
2019-02-21 08:43:46 +01:00