From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 04 23:09:28 2024 Received: (at submit) by debbugs.gnu.org; 5 Oct 2024 03:09:28 +0000 Received: from localhost ([127.0.0.1]:37059 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1swvAd-0007Qi-Uw for submit@debbugs.gnu.org; Fri, 04 Oct 2024 23:09:28 -0400 Received: from lists.gnu.org ([209.51.188.17]:56786) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1swvAb-0007QZ-UO for submit@debbugs.gnu.org; Fri, 04 Oct 2024 23:09:26 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1swvAX-0006Iy-MZ for guix-patches@gnu.org; Fri, 04 Oct 2024 23:09:21 -0400 Received: from mx1.riseup.net ([198.252.153.129]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1swvAV-0007cn-Mq for guix-patches@gnu.org; Fri, 04 Oct 2024 23:09:21 -0400 Received: from fews02-sea.riseup.net (fews02-sea-pn.riseup.net [10.0.1.112]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx1.riseup.net (Postfix) with ESMTPS id 4XL9PB3ZdjzDqXv for ; Sat, 5 Oct 2024 03:09:18 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1728097758; bh=4FKTGAijIegLgbqFynv5AGoa0X4GRE6OaifFv84IqzE=; h=From:To:Cc:Subject:Date:From; b=MS+EJF/QluWN+JiOY5y+5d4Q28BSNGtdWhL/f7J5wCGYiXHyPcGRMsfZvl6sFMrBM xoFoKpTGLeifKRFgljW3737hdBR7JPxijym0hYMRvBeXeZ0kvE4KEkgPWWvDqeVWOt CwMxksQl9N15wRxfu+O0u4MOVyyIgAVws+khxz3c= X-Riseup-User-ID: 77AECD6288FC13967C66FA69BEA6325982A1502EFEA58409DB392207CBFD671A Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews02-sea.riseup.net (Postfix) with ESMTPSA id 4XL9Nw43KlzFsP6; Sat, 5 Oct 2024 03:09:04 +0000 (UTC) From: =?UTF-8?q?Andr=C3=A9=20Batista?= To: guix-patches@gnu.org Subject: [PATCH] gnu: mullvadbrowser: Update to 13.5.6 [security fixes]. Date: Sat, 5 Oct 2024 00:08:56 -0300 Message-ID: <20241005030856.1458-1-nandre@riseup.net> MIME-Version: 1.0 X-Debbugs-Cc: ian@retrospec.tv, jonathan.brielmaier@web.de, mhw@netris.org Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=198.252.153.129; envelope-from=nandre@riseup.net; helo=mx1.riseup.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: =?UTF-8?q?Andr=C3=A9=20Batista?= X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Fixes CVEs 2024-9392, 2024-9393, 2024-9394 and 2024-9401. See the Mozilla Foundation Security Advisory for details. * gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to 20240930230510. (%mullvadbrowser-version): Update to 13.5.6. (%mullvadbrowser-firefox-version): Update to 115.16.0esr-13.5-1-build2. (mullvadbrowser-translation-base): Update to a142f78af87f994913faa15fb4b0f34f0ce1a22b. (mullvadbrowser-translation-specific): Update to 78212a3da2439e436ac5f73d8e3eb908145c3ece. Change-Id: Id65315c9aa829815e00dcfe74098680654592f20 --- gnu/packages/tor-browsers.scm | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm index d234757e56..b0c5b0cba2 100644 --- a/gnu/packages/tor-browsers.scm +++ b/gnu/packages/tor-browsers.scm @@ -824,17 +824,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it" ;; We copy the official build id, which can be found there: ;; https://cdn.mullvad.net/browser/update_responses/update_1/release. -(define %mullvadbrowser-build-date "20240903073000") +(define %mullvadbrowser-build-date "20240930230510") ;; To find the last version, look at ;; https://mullvad.net/en/download/browser/linux. -(define %mullvadbrowser-version "13.5.3") +(define %mullvadbrowser-version "13.5.6") ;; To find the last Firefox version, browse ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version> ;; There should be only one archive that starts with ;; "src-firefox-mullvad-browser-". -(define %mullvadbrowser-firefox-version "115.15.0esr-13.5-1-build2") +(define %mullvadbrowser-firefox-version "115.16.0esr-13.5-1-build2") ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-base @@ -842,11 +842,11 @@ (define mullvadbrowser-translation-base (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "daed2afc487d1b20efc17feb153156524c6f714b"))) + (commit "a142f78af87f994913faa15fb4b0f34f0ce1a22b"))) (file-name "translation-base-browser") (sha256 (base32 - "0psmmgw9dnjwdhjbqkd69q5q7sdwyjcwagh93ffrjk0v7ybc79dq")))) + "15ahsyji6fk236sb28vqpi7ai70r3qblfypmc7r781zq7nw8f9bs")))) ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-specific @@ -854,11 +854,11 @@ (define mullvadbrowser-translation-specific (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "bff8092bbe5ae93b2c162ade300d739b2cd9e92d"))) + (commit "78212a3da2439e436ac5f73d8e3eb908145c3ece"))) (file-name "translation-mullvad-browser") (sha256 (base32 - "0742ylhz80445a28ssp2hpshy0dvr12h2c1mcv5pjdipzcwhgil8")))) + "00qmmfz7lz9fw7id7bj89byd4zd39nc4f2plf0v640yzl8fdwi72")))) (define mullvadbrowser-assets ;; This is a prebuilt Mullvad Browser from which we take the assets we need. @@ -874,7 +874,7 @@ (define mullvadbrowser-assets version "/mullvad-browser-linux-x86_64-" version ".tar.xz")) (sha256 (base32 - "17sqin4fnvq96plarv0iv8r801i19gh7v7szg2vrmcynay8qx4mc")))) + "0q55mk9zzzs7g2cng107gm16g74lx1qf42gf5ayh4x7caxc8db01")))) (arguments (list #:install-plan @@ -917,7 +917,7 @@ (define-public mullvadbrowser %mullvadbrowser-firefox-version ".tar.xz")) (sha256 (base32 - "1c6jjw0x8bjz74q15a7vskrd0ji5ic19mzr9f2laivhznjy0r12c")))) + "1mkssnr7vx4la4r31dy6fbwvj1h9gxzywwxa6z4310nr17vr3sxj")))) (arguments (substitute-keyword-arguments (package-arguments mullvadbrowser-base) ((#:phases phases) base-commit: 73ec844389e91cb0f5a2647070516fc8d19d8730 -- 2.45.2 From debbugs-submit-bounces@debbugs.gnu.org Fri Oct 11 09:24:55 2024 Received: (at 73634-done) by debbugs.gnu.org; 11 Oct 2024 13:24:56 +0000 Received: from localhost ([127.0.0.1]:33778 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1szFdX-00029h-Lt for submit@debbugs.gnu.org; Fri, 11 Oct 2024 09:24:55 -0400 Received: from mail-ej1-f52.google.com ([209.85.218.52]:60840) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1szFdV-00029T-3d for 73634-done@debbugs.gnu.org; Fri, 11 Oct 2024 09:24:54 -0400 Received: by mail-ej1-f52.google.com with SMTP id a640c23a62f3a-a993f6916daso349299566b.1 for <73634-done@debbugs.gnu.org>; Fri, 11 Oct 2024 06:24:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1728653014; x=1729257814; darn=debbugs.gnu.org; h=mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=gBPG+GbuaNzP/I1PFvF6J632aNqRepWxj+6pqPPkkgQ=; b=Vjfj8EWRgzTPFk5KrMzqKbJFOR6QyFq9QheY8MjrjXWSysCRe5ClWTy9S5hLO8+33H Nc+/KmHxm/NlGMqn8jIfQuiOi74m2zjdYSbBbrxoxR/TR8Ax2XTBndgfsV8pPiiTJUFK R4g8wZyifV1PUEZGZwFhVjYrTN2LIJA2TEPIYGHHQo9Lz0qXf7QkfICl97YdCAyohA0d HpJcg4ty8XnJlPRT6HWDPpfALC4MMohlF6xt2kOOH9kS1EJkMDbwO4ILFZLoO660eTro TRyasUqEMqooWstsrizRib5kt62BsyLpv9Q0XZhmppwhbbQgfDT9Gs6NQEQi7xBEKiuX NgkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1728653014; x=1729257814; h=mime-version:message-id:date:subject:to:from:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=gBPG+GbuaNzP/I1PFvF6J632aNqRepWxj+6pqPPkkgQ=; b=dzawYNeX0eH24TZD6ejE+27BtwTkfGgFpJreC+SXrf1xt1eSHZ/9ah5CvmoZG2cpuD CN/ue9laqxwIIQrV7ZprlV5VQt+A9I/TMIYiRrpyfxLZgJPBKxdWnKi6WbDhcs7Y+7qI QWZOfYu0X07ElIfdvEZTpwc/I2HG3tQvOvNibDQ/zY5tSyESHS8JaixopuMsUbbqz79a 4MCkIYYz00RQ3V+dFDl2Cx+nBXyu5hUfRCM5SpQ1ep5iUuxjKPCgm4iUwSff1dHz0q+u aOg8dtVwDKN+77m5fdxp2MWCIA1H4318KL60TdxKmLv92kvtnxTV6xzbHy3xKMWpuN0Q UGmQ== X-Gm-Message-State: AOJu0YzrK/oWfgLpV4pXomEULWchquto/9t59pmNJUUuJ83ubFqJUwmG 4sC6fXCTUmswgy70OFvrvBSVjJOGEDGcmGE/6rObtgSg2FUzs6IuXEM4+QzH X-Google-Smtp-Source: AGHT+IGNXSdsud3G61wv5rvn6QqAzu1jSEdk33DsPmUykVsoyyb7/96+EKeAPJc0oTmD54W0EwDViQ== X-Received: by 2002:a17:907:36ce:b0:a99:42e7:21f with SMTP id a640c23a62f3a-a99b93ca3aemr207392766b.37.1728653013879; Fri, 11 Oct 2024 06:23:33 -0700 (PDT) Received: from guxtil (cpc100684-bagu15-2-0-cust967.1-3.cable.virginm.net. [86.8.111.200]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-a99a7f05e61sm213169166b.21.2024.10.11.06.23.33 for <73634-done@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Oct 2024 06:23:33 -0700 (PDT) From: Sharlatan Hellseher To: 73634-done@debbugs.gnu.org Subject: gnu: mullvadbrowser: Update to 13.5.6 [security fixes]. Date: Fri, 11 Oct 2024 14:23:21 +0100 Message-ID: <87jzeercxi.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 73634-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain Pushed as 084d94289c6399174689f725853a54b2bce7a652 to master. Thanks, Oleg --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmEeB3micIcJkGAhndtcnv/Ys0rUFAmcJJskACgkQdtcnv/Ys 0rV+Lg//fpDsjNuUowAhEq6y94BIcrkabpgAPMGmAgZVdgMgMrZqVQAVc7gA+qHW biQbOIqYsdYo3GaLUMp0IuFzp1THgkJ9/QF3jksGBNFjZCCPud2tv4225oRDYIqv pV/WIt+itg70BdAhnFBCt/MzBQ+1atKdDCScguOqjww9pMWGweF2y9y+gdDXDuF5 s8AxDylC1/FayIkELIoQ/LwRGcGXwz5v8UrKXTdl2F9Pvnp4h1Zgy52MqBikWvUo aZxwGxuh8auSgILNY02cseFY31DSDmcIok11tgPmpecrfq/gE0JMNe0wbVVpydsY 4joPMJvyXtF6/gvQyeZFzCeovQ3DlPs6eqG4+sJqZ2nqXNojG0oKE3s5xXPfwyCZ MRw7KzJRPXXs4RCgyhUPbNBA+7LTkayn2NheNFtzQ6wkFBQcjulXb1yYvfnRBqCJ xfNZYQgZSBe9BAF9zfmRNvGE/1f+2l46PKTeCdXZ/1plnbq0efebRplT5XlH/7FC kKfaNt9c6q6cFz3ngrZjDfBjdrOrY6I1eUccYOvpNAF/N2uPZuKr8LawpUA+GYcd w1FELShwwOmtxaMH2v7C7QWoiRkJCPHJ7aNPluOtpKmm50wQucdQfbvmtWI7d/Wg T6wN6dci9CyUiRsWDveg+K7vQ4ckWn+NZ+j6X1ZBnLoUWsLDPW0= =OPvx -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 21 10:38:50 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sat, 09 Nov 2024 12:24:08 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator