GNU bug report logs - #73762
[PATCH] gnu: mullvadbrowser: Update to 13.5.7 [security fix].

Previous Next

Package: guix-patches;

Reported by: André Batista <nandre <at> riseup.net>

Date: Sat, 12 Oct 2024 04:12:02 UTC

Severity: normal

Tags: patch

Done: André Batista <nandre <at> riseup.net>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 73762 in the body.
You can then email your comments to 73762 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to ian <at> retrospec.tv, jonathan.brielmaier <at> web.de, mhw <at> netris.org, guix-patches <at> gnu.org:
bug#73762; Package guix-patches. (Sat, 12 Oct 2024 04:12:02 GMT) Full text and rfc822 format available.
Acknowledgement sent to André Batista <nandre <at> riseup.net>:
New bug report received and forwarded. Copy sent to ian <at> retrospec.tv, jonathan.brielmaier <at> web.de, mhw <at> netris.org, guix-patches <at> gnu.org. (Sat, 12 Oct 2024 04:12:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: mullvadbrowser: Update to 13.5.7 [security fix].
Date: Sat, 12 Oct 2024 01:10:57 -0300

Fixes CVE 2024-9680. See the Mozilla Foundation Security Advisory
<https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/> for details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20241008182800.
(%mullvadbrowser-version): Update to 13.5.7.
(%mullvadbrowser-firefox-version): Update to 115.16.0esr-13.5-1-build3.
(mullvadbrowser-translation-base): Update to
ceb66dd0937da14962cb535699242b2526e11f02.
(mullvadbrowser-translation-specific): Update to
2f7d98b46ce480cdb4d7e9ddab912650c8673d6c.

Change-Id: Ib6bd5c5463156526cefd26baa3c9a20402673b71
---
 gnu/packages/tor-browsers.scm | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index e517f9b214..36c17d588a 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -817,17 +817,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it"
 
 ;; We copy the official build id, which can be found there:
 ;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
-(define %mullvadbrowser-build-date "20240930230510")
+(define %mullvadbrowser-build-date "20241008182800")
 
 ;; To find the last version, look at
 ;; https://mullvad.net/en/download/browser/linux.
-(define %mullvadbrowser-version "13.5.6")
+(define %mullvadbrowser-version "13.5.7")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-mullvad-browser-".
-(define %mullvadbrowser-firefox-version "115.16.0esr-13.5-1-build2")
+(define %mullvadbrowser-firefox-version "115.16.0esr-13.5-1-build3")
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-base
@@ -835,11 +835,11 @@ (define mullvadbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "a142f78af87f994913faa15fb4b0f34f0ce1a22b")))
+          (commit "ceb66dd0937da14962cb535699242b2526e11f02")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "15ahsyji6fk236sb28vqpi7ai70r3qblfypmc7r781zq7nw8f9bs"))))
+      "04ciw4rnl0cj7vz4pqbs1aca8fhva346bp0vahfcxv3isn1nwyy4"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-specific
@@ -851,7 +851,7 @@ (define mullvadbrowser-translation-specific
     (file-name "translation-mullvad-browser")
     (sha256
      (base32
-      "00qmmfz7lz9fw7id7bj89byd4zd39nc4f2plf0v640yzl8fdwi72"))))
+      "08anwb45rxzsdcxwzjflqb1d0f78pi4fsgdvsdlc4fmp8kx10nsd"))))
 
 (define mullvadbrowser-assets
   ;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@@ -867,7 +867,7 @@ (define mullvadbrowser-assets
          version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "0q55mk9zzzs7g2cng107gm16g74lx1qf42gf5ayh4x7caxc8db01"))))
+         "11gyvpl1mmjn2s58dcmrh0fksi993fg2zrafrz38bcylfz1q5vjd"))))
     (arguments
      (list
       #:install-plan
@@ -910,7 +910,7 @@ (define-public mullvadbrowser
          %mullvadbrowser-firefox-version ".tar.xz"))
        (sha256
         (base32
-         "1mkssnr7vx4la4r31dy6fbwvj1h9gxzywwxa6z4310nr17vr3sxj"))))
+         "1qhbba8cmq5jmf1di5h59dbw3lpq779idf2k9wp0qwd99g8k23qm"))))
     (arguments
      (substitute-keyword-arguments (package-arguments mullvadbrowser-base)
        ((#:phases phases)

base-commit: b8fd792ea267cb920da0651074a533d8abf00488
-- 
2.45.2
Information forwarded to ian <at> retrospec.tv, jonathan.brielmaier <at> web.de, mhw <at> netris.org, guix-patches <at> gnu.org:
bug#73762; Package guix-patches. (Sat, 12 Oct 2024 13:09:01 GMT) Full text and rfc822 format available.

Message #8 received at 73762 <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: 73762 <at> debbugs.gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH v2] gnu: mullvadbrowser: Update to 13.5.7 [security fix].
Date: Sat, 12 Oct 2024 10:08:40 -0300

Fixes CVE 2024-9680. See the Mozilla Foundation Security Advisory
<https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/> for details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20241008182800.
(%mullvadbrowser-version): Update to 13.5.7.
(%mullvadbrowser-firefox-version): Update to 115.16.0esr-13.5-1-build3.
(mullvadbrowser-translation-base): Update to
ceb66dd0937da14962cb535699242b2526e11f02.
(mullvadbrowser-translation-specific): Update to
2f7d98b46ce480cdb4d7e9ddab912650c8673d6c.

Change-Id: I28872b45efc93858375ca1e377d689384c46812c
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index e517f9b214..24d6082b95 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -817,17 +817,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it"
 
 ;; We copy the official build id, which can be found there:
 ;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
-(define %mullvadbrowser-build-date "20240930230510")
+(define %mullvadbrowser-build-date "20241008182800")
 
 ;; To find the last version, look at
 ;; https://mullvad.net/en/download/browser/linux.
-(define %mullvadbrowser-version "13.5.6")
+(define %mullvadbrowser-version "13.5.7")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-mullvad-browser-".
-(define %mullvadbrowser-firefox-version "115.16.0esr-13.5-1-build2")
+(define %mullvadbrowser-firefox-version "115.16.0esr-13.5-1-build3")
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-base
@@ -835,11 +835,11 @@ (define mullvadbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "a142f78af87f994913faa15fb4b0f34f0ce1a22b")))
+          (commit "ceb66dd0937da14962cb535699242b2526e11f02")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "15ahsyji6fk236sb28vqpi7ai70r3qblfypmc7r781zq7nw8f9bs"))))
+      "04ciw4rnl0cj7vz4pqbs1aca8fhva346bp0vahfcxv3isn1nwyy4"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-specific
@@ -847,11 +847,11 @@ (define mullvadbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "78212a3da2439e436ac5f73d8e3eb908145c3ece")))
+          (commit "2f7d98b46ce480cdb4d7e9ddab912650c8673d6c")))
     (file-name "translation-mullvad-browser")
     (sha256
      (base32
-      "00qmmfz7lz9fw7id7bj89byd4zd39nc4f2plf0v640yzl8fdwi72"))))
+      "08anwb45rxzsdcxwzjflqb1d0f78pi4fsgdvsdlc4fmp8kx10nsd"))))
 
 (define mullvadbrowser-assets
   ;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@@ -867,7 +867,7 @@ (define mullvadbrowser-assets
          version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "0q55mk9zzzs7g2cng107gm16g74lx1qf42gf5ayh4x7caxc8db01"))))
+         "11gyvpl1mmjn2s58dcmrh0fksi993fg2zrafrz38bcylfz1q5vjd"))))
     (arguments
      (list
       #:install-plan
@@ -910,7 +910,7 @@ (define-public mullvadbrowser
          %mullvadbrowser-firefox-version ".tar.xz"))
        (sha256
         (base32
-         "1mkssnr7vx4la4r31dy6fbwvj1h9gxzywwxa6z4310nr17vr3sxj"))))
+         "1qhbba8cmq5jmf1di5h59dbw3lpq779idf2k9wp0qwd99g8k23qm"))))
     (arguments
      (substitute-keyword-arguments (package-arguments mullvadbrowser-base)
        ((#:phases phases)

base-commit: b8fd792ea267cb920da0651074a533d8abf00488
-- 
2.45.2
Reply sent to André Batista <nandre <at> riseup.net>:
You have taken responsibility. (Tue, 29 Oct 2024 23:02:02 GMT) Full text and rfc822 format available.
Notification sent to André Batista <nandre <at> riseup.net>:
bug acknowledged by developer. (Tue, 29 Oct 2024 23:02:02 GMT) Full text and rfc822 format available.

Message #13 received at 73762-done <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: 73762-done <at> debbugs.gnu.org
Subject: Re: Close.
Date: Tue, 29 Oct 2024 20:00:26 -0300

Superseded by #73998, closing.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Wed, 27 Nov 2024 12:24:07 GMT) Full text and rfc822 format available.
This bug report was last modified 297 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.