From 59bc7ee12b70acaa9bd5aa3be31d8dce2b53e9bc Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Thu, 22 Aug 2024 22:40:16 +0200 Subject: [PATCH] google-chrome: 127.0.6533.119 -> 128.0.6613.84/128.0.6613.85 https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html Fixes: * CVE-2024-7964 * CVE-2024-7965 * CVE-2024-7966 * CVE-2024-7967 * CVE-2024-7968 * CVE-2024-7969 * CVE-2024-7971 * CVE-2024-7972 * CVE-2024-7973 * CVE-2024-7974 * CVE-2024-7975 * CVE-2024-7976 * CVE-2024-7977 * CVE-2024-7978 * CVE-2024-7979 * CVE-2024-7980 * CVE-2024-7981 * CVE-2024-8033 * CVE-2024-8034 * CVE-2024-8035 (cherry picked from commit e57b3fa5593c7059ce1ee23b58ef64143cf389b8) --- pkgs/by-name/go/google-chrome/package.nix | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/by-name/go/google-chrome/package.nix b/pkgs/by-name/go/google-chrome/package.nix index 181ca3c8ff6dc..2749f748fb8f5 100644 --- a/pkgs/by-name/go/google-chrome/package.nix +++ b/pkgs/by-name/go/google-chrome/package.nix @@ -164,11 +164,11 @@ let linux = stdenv.mkDerivation (finalAttrs: { inherit pname meta passthru; - version = "127.0.6533.119"; + version = "128.0.6613.84"; src = fetchurl { url = "https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${finalAttrs.version}-1_amd64.deb"; - hash = "sha256-k9rsELAtOFdLSi1dOTV4Lr7E2Uu5sR1/GOL9BWDqZl4="; + hash = "sha256-4hABtHDq/8lIP6YbpU1VJdmgZNmLN2qb0VMPYw3dsBg="; }; # With strictDeps on, some shebangs were not being patched correctly @@ -256,11 +256,11 @@ let darwin = stdenvNoCC.mkDerivation (finalAttrs: { inherit pname meta passthru; - version = "127.0.6533.120"; + version = "128.0.6613.85"; src = fetchurl { - url = "http://dl.google.com/release2/chrome/adqui4t7hzlljw2m2mmu2dvb6tmq_127.0.6533.120/GoogleChrome-127.0.6533.120.dmg"; - hash = "sha256-kfUCTu8BIGcZTMaby0iylOCFxI+pLXcq9fKo2ow6HrM="; + url = "http://dl.google.com/release2/chrome/adnfqet5f4kxrux64zb25vwits5a_128.0.6613.85/GoogleChrome-128.0.6613.85.dmg"; + hash = "sha256-mWTNwfMfCLPV+w1VCMUdv7lFtYSEVr4mnDgKURlDV3Q="; }; dontPatch = true;