GNU bug report logs - #75546
[PATCH] gnu: torbrowser: Update to 14.0.4 [security-fixes].

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: André Batista <nandre <at> riseup.net>
Subject: bug#75546: closed (Re: [bug#75546] [PATCH] gnu: torbrowser:
 Update to 14.0.4 [security-fixes].)
Date: Wed, 15 Jan 2025 05:12:03 +0000

[Message part 1 (text/plain, inline)]

Your bug report

#75546: [PATCH] gnu: torbrowser: Update to 14.0.4 [security-fixes].

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 75546 <at> debbugs.gnu.org.

-- 
75546: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=75546
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Hilton Chain <hako <at> ultrarare.space>
To: André Batista <nandre <at> riseup.net>
Cc: 75546-done <at> debbugs.gnu.org, mhw <at> netris.org, jonathan.brielmaier <at> web.de,
 clement <at> lassieur.org, ian <at> retrospec.tv
Subject: Re: [bug#75546] [PATCH] gnu: torbrowser: Update to 14.0.4
 [security-fixes].
Date: Wed, 15 Jan 2025 13:10:31 +0800

On Tue, 14 Jan 2025 06:51:45 +0800,
André Batista wrote:
>
> Fixes CVEs 2025-0237, 2025-0238, 2025-0239, 2025-0240, 2025-0241,
> 2025-0242 and 2025-0243.  See
> <https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/> for
> details.
>
> * gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
> 20250106125732.
> (%torbrowser-version): Update to 14.0.4.
> (%torbrowser-firefox-version): Update to 128.6.0esr-14.0-1-build1.
> (torbrowser-translation-base): Update to
> bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7.
> (torbrowser-translation-specific): Update to
> ed3c2270e0a932596abb9fdb9a9f7151fb74d3a1.
>
> Change-Id: I913c052a401ca5a805b2c794e825cdaaacf6d09e
> ---
>  gnu/packages/tor-browsers.scm | 18 +++++++++---------
>  1 file changed, 9 insertions(+), 9 deletions(-)

Applied as b997fec7c9, thanks!

[Message part 3 (message/rfc822, inline)]

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: torbrowser: Update to 14.0.4 [security-fixes].
Date: Mon, 13 Jan 2025 19:51:45 -0300

Fixes CVEs 2025-0237, 2025-0238, 2025-0239, 2025-0240, 2025-0241,
2025-0242 and 2025-0243.  See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/> for
details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250106125732.
(%torbrowser-version): Update to 14.0.4.
(%torbrowser-firefox-version): Update to 128.6.0esr-14.0-1-build1.
(torbrowser-translation-base): Update to
bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7.
(torbrowser-translation-specific): Update to
ed3c2270e0a932596abb9fdb9a9f7151fb74d3a1.

Change-Id: I913c052a401ca5a805b2c794e825cdaaacf6d09e
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 32294e2bad5..9608a9cb983 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20241125154204")
+(define %torbrowser-build-date "20250106125732")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.3")
+(define %torbrowser-version "14.0.4")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.5.0esr-14.0-1-build2")
+(define %torbrowser-firefox-version "128.6.0esr-14.0-1-build1")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "caa431bbea1a76d7ad61eeda94086a1513762605")))
+          (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0zdkcykzh8m1rv6valx0mk6yvh2q4jrj2qxk0frh7nwxwc509b5c"))))
+      "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "4314d0a7ce780ffdf82b84e324bfbc437198f993")))
+          (commit "ed3c2270e0a932596abb9fdb9a9f7151fb74d3a1")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "04dx6mjcgfmarnaxxkmrlgwgxdr37frgz5j3wakp9wixys6p6cdv"))))
+      "143cfv29n0fvq547nk3ziidfib8s3f8k10qjvgv0zldsc3sdgw5h"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "01mzc1d3vad3i8mwqmk2s17ynfhr45sfxgqcy5g9f5ahk6rl7msr"))))
+         "1f4gkyszvpykwy0hp6hp5yrbxgnq4yb082f24m93ayfmhlcjb5dv"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "1nnsmz6v8xnp67ih0jgail27c4cg6zfdax8qkd6hcn8i7pscgc72"))))
+         "16zyixbddwaiw1bzsai5crdg58kmacshsr0rp37m85qk0a8vryg3"))))
     (build-system mozilla-build-system)
     (inputs
      (list go-gitlab-torproject-org-tpo-anti-censorship-pluggable-transports-lyrebird

base-commit: 575dc58975281e8c2c779c9b3098746606cfc5dd
-- 
2.46.0

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.