From unknown Mon Aug 18 02:05:25 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#71498 <71498@debbugs.gnu.org> To: bug#71498 <71498@debbugs.gnu.org> Subject: Status: [PATCH] gnu: torbrowser: Update to 13.0.16 [security fixes]. Reply-To: bug#71498 <71498@debbugs.gnu.org> Date: Mon, 18 Aug 2025 09:05:25 +0000 retitle 71498 [PATCH] gnu: torbrowser: Update to 13.0.16 [security fixes]. reassign 71498 guix-patches submitter 71498 Andr=C3=A9 Batista severity 71498 normal tag 71498 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Jun 11 20:51:39 2024 Received: (at submit) by debbugs.gnu.org; 12 Jun 2024 00:51:39 +0000 Received: from localhost ([127.0.0.1]:37074 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sHCDD-0001fs-13 for submit@debbugs.gnu.org; Tue, 11 Jun 2024 20:51:39 -0400 Received: from lists.gnu.org ([209.51.188.17]:50614) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sHCDA-0001fk-OG for submit@debbugs.gnu.org; Tue, 11 Jun 2024 20:51:37 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sHCDB-0007xf-RR for guix-patches@gnu.org; Tue, 11 Jun 2024 20:51:37 -0400 Received: from mx1.riseup.net ([198.252.153.129]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sHCD9-000703-Kc for guix-patches@gnu.org; Tue, 11 Jun 2024 20:51:37 -0400 Received: from fews01-sea.riseup.net (fews01-sea-pn.riseup.net [10.0.1.109]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx1.riseup.net (Postfix) with ESMTPS id 4VzRnJ6SgPzDqfq for ; Wed, 12 Jun 2024 00:51:32 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1718153492; bh=F736aK00gR4Jlp8Jw2SFHxCnkB0bTbLXCdiG6pfZAOQ=; h=From:To:Cc:Subject:Date:From; b=oBq5piDiP8zj0PE02Zq6iI7fm1dsp3HY0/08+IUW1vRKogvt5sZcvVsGj1ugBd4yG xXGOz2pOZ7Ys02h/W+eVos+n59q+Bb+5vvpqlBeRFGy7NL2/QZPcAH3SWeIzzYxctp fEPWKQSOoT5NiTC2I9glYLgPpyQhXm9GCD+b+/0M= X-Riseup-User-ID: 63F52E00E4B481F3E8A26231A6583202AF5FDC16AB939D7169B768A62B617709 Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews01-sea.riseup.net (Postfix) with ESMTPSA id 4VzRnJ028MzJrgq; Wed, 12 Jun 2024 00:51:31 +0000 (UTC) From: =?UTF-8?q?Andr=C3=A9=20Batista?= To: guix-patches@gnu.org Subject: [PATCH] gnu: torbrowser: Update to 13.0.16 [security fixes]. Date: Tue, 11 Jun 2024 21:50:54 -0300 Message-ID: <20240612005054.5057-1-nandre@riseup.net> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=198.252.153.129; envelope-from=nandre@riseup.net; helo=mx1.riseup.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: =?UTF-8?q?Andr=C3=A9=20Batista?= X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Fixes CVEs 2024-5702, 2024-5688, 2024-5690, 2024-5691, 2024-5692, 2024-5693, 2024-5696 and 2024-5700. See the Mozilla Foundation Security advisory for details. * gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to 20240510190000. Change upstream reference to where this date is defined as the previous URL reference can be missing. (%torbrowser-version): Update to 13.0.16. (%torbrowser-firefox-version): Update to 115.12.0esr-13.0-1-build1. (torbrowser-translation-base): Update to f28525699864f4e3d764c354130bd898ce5b20aa. (torbrowser-translation-specific): Update to b5d79336411e5a59c4861341ef9aa7353e0bcad9. --- gnu/packages/tor-browsers.scm | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm index 4d53d3fd76..07b7967404 100644 --- a/gnu/packages/tor-browsers.scm +++ b/gnu/packages/tor-browsers.scm @@ -148,18 +148,18 @@ (define %torbrowser-locales ("02ifa94jfii5f166rwdvv8si3bazm4bcf4qhi59c8f1hxbavb52h" "081aeb1aa308" "zh-CN") ("0qx9sh56pqc2x5qrh386cp1fi1gidhcmxxpvqkg9nh2jbizahznr" "9015a180602e" "zh-TW"))) -;; We copy the official build id, which can be found there: -;; https://aus1.torproject.org/torbrowser/update_3/release/. -(define %torbrowser-build-date "20240510150000") +;; We copy the official build id, which is defined at +;; tor-browser-build/rbm.conf (browser_release_date). +(define %torbrowser-build-date "20240510190000") ;; To find the last version, look at https://www.torproject.org/download/. -(define %torbrowser-version "13.0.15") +(define %torbrowser-version "13.0.16") ;; To find the last Firefox version, browse ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version> ;; There should be only one archive that starts with ;; "src-firefox-tor-browser-". -(define %torbrowser-firefox-version "115.11.0esr-13.0-1-build2") +(define %torbrowser-firefox-version "115.12.0esr-13.0-1-build1") ;; See tor-browser-build/projects/translation/config. (define torbrowser-translation-base @@ -167,11 +167,11 @@ (define torbrowser-translation-base (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "a28a8b2cb9e207d12fca11181818c0a0694b56af"))) + (commit "f28525699864f4e3d764c354130bd898ce5b20aa"))) (file-name "translation-base-browser") (sha256 (base32 - "159wza7mvz53bjvdj8nnipz9ya5150pymjz5x3jz2qpkz8ansxws")))) + "1vf6nl7fdmlmg2gskf3w1xlsgcm0pxi54z2daz5nwr6q9gyi0lkf")))) ;; See tor-browser-build/projects/translation/config. (define torbrowser-translation-specific @@ -179,11 +179,11 @@ (define torbrowser-translation-specific (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "e03ffdea5b74ad280616dccd21744cba7b2d4565"))) + (commit "b5d79336411e5a59c4861341ef9aa7353e0bcad9"))) (file-name "translation-tor-browser") (sha256 (base32 - "0d8f9p36wfxbwhiprj6wrzjs4nz8mbaqnqz48rl57x5b82achjd0")))) + "0ahz69pxhgik7ynmdkbnx7v5l2v392i6dswjz057g4hwnd7d34fb")))) (define torbrowser-assets ;; This is a prebuilt Torbrowser from which we take the assets we need. @@ -199,7 +199,7 @@ (define torbrowser-assets version "/tor-browser-linux-x86_64-" version ".tar.xz")) (sha256 (base32 - "1rd4m8bg359yj2w5dfvmnnjgr79bx1cc9bkziwzxnyz5zjn0arkv")))) + "1kffam66bsaahzx212hw9lb03jwfr24hivzg067iyzilsldpc9c1")))) (arguments (list #:install-plan @@ -237,7 +237,7 @@ (define* (make-torbrowser #:key ".tar.xz")) (sha256 (base32 - "0z2sz42jjfcd99zmysvz9k03zk9nccygba53rvkhbskcvil5zgjd")))) + "1b70zyjyai6kk4y1kkl8jvrs56gg7z31kkad6bmdpd8jw4n71grx")))) (build-system mozilla-build-system) (inputs (list go-gitlab-torproject-org-tpo-anti-censorship-pluggable-transports-lyrebird base-commit: 9b851ade18bc00dc42607b3fcaf26c923d47c2eb -- 2.41.0 From debbugs-submit-bounces@debbugs.gnu.org Sun Jun 23 22:45:23 2024 Received: (at control) by debbugs.gnu.org; 24 Jun 2024 02:45:23 +0000 Received: from localhost ([127.0.0.1]:34558 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sLZhr-00031R-7W for submit@debbugs.gnu.org; Sun, 23 Jun 2024 22:45:23 -0400 Received: from mail-qk1-f181.google.com ([209.85.222.181]:60640) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sLZhp-0002gb-Cn for control@debbugs.gnu.org; Sun, 23 Jun 2024 22:45:21 -0400 Received: by mail-qk1-f181.google.com with SMTP id af79cd13be357-795ca45c54cso209045585a.0 for ; Sun, 23 Jun 2024 19:45:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1719197054; x=1719801854; darn=debbugs.gnu.org; h=subject:from:to:message-id:date:from:to:cc:subject:date:message-id :reply-to; bh=nAn5q+ORCvzHK0HgSnLeX77jFt7wOBd8e4peGULV8+k=; b=dLo8Lc6O48a9xoVs0yYlylaQXrNRPP4EY1VQxttJwQNtM3k1iLoPWOXgh998To7dYK 40xs1cUhucbD32P1GsNx/UoPp526ijYzibxLRJ7fVOfsL/SxUtcpq8Pte4pWu97wY6R6 L4GzVIC/4S7hxMdBtUP2L/C+yFfDGKboWCGKuLaKM65PTRLACzhH6UwE2wJ64pjxGkC7 56Hg32mZiI7GL8XSov2508gWcXYgIrl5MKcJNdkz0TovRDhjPBQj3w+avtuhIyl1JoPj nTG5BXkIhn5x2gADk/CozgIEXwBHQK1JRA14u3z9gW+80FZaXDojVtoVXYPvhjVwIW9o OMwA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1719197054; x=1719801854; h=subject:from:to:message-id:date:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=nAn5q+ORCvzHK0HgSnLeX77jFt7wOBd8e4peGULV8+k=; b=dExAxS/faY6nRrsQ+UnT82Z81omzPxc3lBygO/9CG7/3jErOhq/Y9wO9BgCyfE4qng rUDZX8jyqki+0XbABj1CKLT/Vpk/e7w8zPKVfHBb2tyvWiEa3KEGDxSl62QS5z8Q/Pnv nuWNjozvvMfRxgTjlwSYPdNzBjZ3ubveAenRc3Mcft1/6eEUL/KT9NmwskiNqYWcMSnL oSglBS61gqC1hGgE6VDWsAeYdAv7txZcmtmr5AbL+zh4MoCYFhWAqOfs0ouAhUuCNeiV W6fv9bY02ID9I6eAQvkk1d7LztY+CMdQ7qXAQbmLZXEnZXv/W1r5uAV4eDlnK/qu04fK rxFA== X-Gm-Message-State: AOJu0Yzq/W6AbLXOy3DxAJk/FBchd78KCTYx44Sna3t2CXz6k3K2ChwI j+a/EONHl/4uc+XE7cpZOMuoul0YR0wuer/fP9igkcCxMrquuaNcHx9PWvEOOoQ= X-Google-Smtp-Source: AGHT+IEu9SN//SFAxxnyTFJrS7ALhYbE7fJbc97BByMjPsZ8y0QitKcdDhWyi0FbsEGsXhr5rrMchg== X-Received: by 2002:a0c:dd10:0:b0:6b0:7a5a:a3f9 with SMTP id 6a1803df08f44-6b5409c4ed9mr40965096d6.22.1719197054207; Sun, 23 Jun 2024 19:44:14 -0700 (PDT) Received: from hurd (dsl-205-233-124-241.b2b2c.ca. [205.233.124.241]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6b51ef67842sm30031976d6.130.2024.06.23.19.44.13 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 23 Jun 2024 19:44:13 -0700 (PDT) Date: Sun, 23 Jun 2024 22:44:12 -0400 Message-Id: <87msnb6ow3.fsf@gmail.com> To: control@debbugs.gnu.org From: Maxim Cournoyer Subject: control message for bug #71498 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) close 71498 quit From unknown Mon Aug 18 02:05:25 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Mon, 22 Jul 2024 11:24:31 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator