[PATCH] gnu: mullvadbrowser: Update to 14.0.4 [security fixes].

  • Done
  • quality assurance status badge
Details
2 participants
  • Hilton Chain
  • André Batista
Owner
unassigned
Submitted by
André Batista
Severity
normal
A
A
André Batista wrote on 13 Jan 23:52 +0100
(address . guix-patches@gnu.org)(name . André Batista)(address . nandre@riseup.net)
20250113225217.2498-1-nandre@riseup.net
Fixes CVEs 2025-0237, 2025-0238, 2025-0239, 2025-0240, 2025-0241,
2025-0242 and 2025-0243. See
details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250106125732
(%mullvadbrowser-version): Update to 14.0.4.
(%mullvadbrowser-firefox-version): Update to 128.6.0esr-14.0-1-build1.
(mullvadbrowser-translation-base): Update to
bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7.
(mullvadbrowser-translation-specific): Update to
6a1ef41c664a5185e25ca2c4bbf5d7447bd888a7.

Change-Id: I1c0b2290b89d59f9d21ac0be273ca686593ee002
---
gnu/packages/tor-browsers.scm | 18 +++++++++---------
1 file changed, 9 insertions(+), 9 deletions(-)

Toggle diff (75 lines)
diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 9608a9cb983..6d74a75f4b5 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -818,17 +818,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it"
;; We copy the official build id, which can be found there:
;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
-(define %mullvadbrowser-build-date "20241125154204")
+(define %mullvadbrowser-build-date "20250106125732")
;; To find the last version, look at
;; https://mullvad.net/en/download/browser/linux.
-(define %mullvadbrowser-version "14.0.3")
+(define %mullvadbrowser-version "14.0.4")
;; To find the last Firefox version, browse
;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
;; There should be only one archive that starts with
;; "src-firefox-mullvad-browser-".
-(define %mullvadbrowser-firefox-version "128.5.0esr-14.0-1-build2")
+(define %mullvadbrowser-firefox-version "128.6.0esr-14.0-1-build1")
;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-base
@@ -836,11 +836,11 @@ (define mullvadbrowser-translation-base
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
- (commit "caa431bbea1a76d7ad61eeda94086a1513762605")))
+ (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
(file-name "translation-base-browser")
(sha256
(base32
- "0zdkcykzh8m1rv6valx0mk6yvh2q4jrj2qxk0frh7nwxwc509b5c"))))
+ "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-specific
@@ -848,11 +848,11 @@ (define mullvadbrowser-translation-specific
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
- (commit "2f7d98b46ce480cdb4d7e9ddab912650c8673d6c")))
+ (commit "6a1ef41c664a5185e25ca2c4bbf5d7447bd888a7")))
(file-name "translation-mullvad-browser")
(sha256
(base32
- "08anwb45rxzsdcxwzjflqb1d0f78pi4fsgdvsdlc4fmp8kx10nsd"))))
+ "0jgxgynyzcph82j3bjkw0qfwkakmz8529lmx7v1ggbh3fvn7wa4l"))))
(define mullvadbrowser-assets
;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@@ -868,7 +868,7 @@ (define mullvadbrowser-assets
version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
(sha256
(base32
- "0jh35vsnyqjg6hhwdlw11pq7i1awr6fy8chgr2w0wnrzm91vvzia"))))
+ "0cycrxil9zbdqrkzzsfx7nlrhs4k5riwi0y7r0ah2snmpcla4nb3"))))
(arguments
(list
#:install-plan
@@ -911,7 +911,7 @@ (define-public mullvadbrowser
%mullvadbrowser-firefox-version ".tar.xz"))
(sha256
(base32
- "01mm8kxza5rfl4f78xb8n9x7y0p6mm205pxhqrvds0yyj3jvclsb"))))
+ "0x5q0g62ndy9r7qqrz0p35bq258sn26bdwhzs396v8mrzyf4jywh"))))
(arguments
(substitute-keyword-arguments (package-arguments mullvadbrowser-base)
((#:phases phases)

base-commit: 575dc58975281e8c2c779c9b3098746606cfc5dd
--
2.46.0
H
H
Hilton Chain wrote on 15 Jan 06:10 +0100
(name . André Batista)(address . nandre@riseup.net)
878qrcslun.wl-hako@ultrarare.space
On Tue, 14 Jan 2025 06:52:17 +0800,
André Batista wrote:
Toggle quote (20 lines)
>
> Fixes CVEs 2025-0237, 2025-0238, 2025-0239, 2025-0240, 2025-0241,
> 2025-0242 and 2025-0243. See
> <https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/> for
> details.
>
> * gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
> 20250106125732
> (%mullvadbrowser-version): Update to 14.0.4.
> (%mullvadbrowser-firefox-version): Update to 128.6.0esr-14.0-1-build1.
> (mullvadbrowser-translation-base): Update to
> bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7.
> (mullvadbrowser-translation-specific): Update to
> 6a1ef41c664a5185e25ca2c4bbf5d7447bd888a7.
>
> Change-Id: I1c0b2290b89d59f9d21ac0be273ca686593ee002
> ---
> gnu/packages/tor-browsers.scm | 18 +++++++++---------
> 1 file changed, 9 insertions(+), 9 deletions(-)

Applied as d4acdf0069, thanks!
Closed
?
Your comment

Commenting via the web interface is currently disabled.

To comment on this conversation send an email to 75548@debbugs.gnu.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 75548
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch