TakeV/guix
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

gnu: icecat: Remove the bundled Onion Browser Button [security].

Browse source 
Fixes <https://bugs.gnu.org/35728>.

The Onion Browser Button (tortm-browser-button@jeremybenthum) version 0.1.8,
available from addons.mozilla.org and bundled with IceCat, malfunctions with
both IceCat 68.9 and Firefox ESR 68.9.  It tells the user that it's connected
to Tor, but fails to route traffic through it.  The same happens on Debian 9
with its "firefox-esr" package.

Remove this extension from IceCat, pending further investigation.

* gnu/packages/gnuzilla.scm (icecat-source): Remove the "data/extensions/
tortm-browser-button@jeremybenthum" directory before running makeicecat.
This commit is contained in:
Mark H Weaver 2020-06-15 04:12:10 -04:00
parent 620796e66b
commit 416439263c
No known key found for this signature in database
GPG key ID: 7CEF29847562C516
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
gnu/packages/gnuzilla.scm
View file

@ -648,6 +648,12 @@ (define icecat-source
"-p1" "--input" #+makeicecat-patch)
(invoke "patch" "--force" "--no-backup-if-mismatch"
"-p1" "--input" #+gnuzilla-fixes-patch)
;; Remove the bundled tortm-browser-button extension,
;; which doesn't seem to be working properly.
(delete-file-recursively
"data/extensions/tortm-browser-button@jeremybenthum")
(patch-shebang "makeicecat")
(substitute* "makeicecat"
(("^FFMAJOR=(.*)" all ffmajor)