GNU bug report logs - #71498
[PATCH] gnu: torbrowser: Update to 13.0.16 [security fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 71498 in the body.
You can then email your comments to 71498 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: torbrowser: Update to 13.0.16 [security fixes].
Date: Tue, 11 Jun 2024 21:50:54 -0300

Fixes CVEs 2024-5702, 2024-5688, 2024-5690, 2024-5691, 2024-5692,
2024-5693, 2024-5696 and 2024-5700. See the Mozilla Foundation Security
advisory <https://www.mozilla.org/en-US/security/advisories/mfsa2024-26/>
for details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20240510190000. Change upstream reference to where this date is defined
as the previous URL reference can be missing.
(%torbrowser-version): Update to 13.0.16.
(%torbrowser-firefox-version): Update to 115.12.0esr-13.0-1-build1.
(torbrowser-translation-base): Update to
f28525699864f4e3d764c354130bd898ce5b20aa.
(torbrowser-translation-specific): Update to
b5d79336411e5a59c4861341ef9aa7353e0bcad9.
---
 gnu/packages/tor-browsers.scm | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 4d53d3fd76..07b7967404 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -148,18 +148,18 @@ (define %torbrowser-locales
    ("02ifa94jfii5f166rwdvv8si3bazm4bcf4qhi59c8f1hxbavb52h" "081aeb1aa308" "zh-CN")
    ("0qx9sh56pqc2x5qrh386cp1fi1gidhcmxxpvqkg9nh2jbizahznr" "9015a180602e" "zh-TW")))
 
-;; We copy the official build id, which can be found there:
-;; https://aus1.torproject.org/torbrowser/update_3/release/.
-(define %torbrowser-build-date "20240510150000")
+;; We copy the official build id, which is defined at
+;; tor-browser-build/rbm.conf (browser_release_date).
+(define %torbrowser-build-date "20240510190000")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "13.0.15")
+(define %torbrowser-version "13.0.16")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "115.11.0esr-13.0-1-build2")
+(define %torbrowser-firefox-version "115.12.0esr-13.0-1-build1")
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-base
@@ -167,11 +167,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "a28a8b2cb9e207d12fca11181818c0a0694b56af")))
+          (commit "f28525699864f4e3d764c354130bd898ce5b20aa")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "159wza7mvz53bjvdj8nnipz9ya5150pymjz5x3jz2qpkz8ansxws"))))
+      "1vf6nl7fdmlmg2gskf3w1xlsgcm0pxi54z2daz5nwr6q9gyi0lkf"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -179,11 +179,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "e03ffdea5b74ad280616dccd21744cba7b2d4565")))
+          (commit "b5d79336411e5a59c4861341ef9aa7353e0bcad9")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "0d8f9p36wfxbwhiprj6wrzjs4nz8mbaqnqz48rl57x5b82achjd0"))))
+      "0ahz69pxhgik7ynmdkbnx7v5l2v392i6dswjz057g4hwnd7d34fb"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -199,7 +199,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "1rd4m8bg359yj2w5dfvmnnjgr79bx1cc9bkziwzxnyz5zjn0arkv"))))
+         "1kffam66bsaahzx212hw9lb03jwfr24hivzg067iyzilsldpc9c1"))))
     (arguments
      (list
       #:install-plan
@@ -237,7 +237,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "0z2sz42jjfcd99zmysvz9k03zk9nccygba53rvkhbskcvil5zgjd"))))
+         "1b70zyjyai6kk4y1kkl8jvrs56gg7z31kkad6bmdpd8jw4n71grx"))))
     (build-system mozilla-build-system)
     (inputs
      (list go-gitlab-torproject-org-tpo-anti-censorship-pluggable-transports-lyrebird

base-commit: 9b851ade18bc00dc42607b3fcaf26c923d47c2eb
-- 
2.41.0

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.