GNU bug report logs - #75548
[PATCH] gnu: mullvadbrowser: Update to 14.0.4 [security fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 75548 in the body.
You can then email your comments to 75548 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: mullvadbrowser: Update to 14.0.4 [security fixes].
Date: Mon, 13 Jan 2025 19:52:17 -0300

Fixes CVEs 2025-0237, 2025-0238, 2025-0239, 2025-0240, 2025-0241,
2025-0242 and 2025-0243.  See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/> for
details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250106125732
(%mullvadbrowser-version): Update to 14.0.4.
(%mullvadbrowser-firefox-version): Update to 128.6.0esr-14.0-1-build1.
(mullvadbrowser-translation-base): Update to
bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7.
(mullvadbrowser-translation-specific): Update to
6a1ef41c664a5185e25ca2c4bbf5d7447bd888a7.

Change-Id: I1c0b2290b89d59f9d21ac0be273ca686593ee002
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 9608a9cb983..6d74a75f4b5 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -818,17 +818,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it"
 
 ;; We copy the official build id, which can be found there:
 ;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
-(define %mullvadbrowser-build-date "20241125154204")
+(define %mullvadbrowser-build-date "20250106125732")
 
 ;; To find the last version, look at
 ;; https://mullvad.net/en/download/browser/linux.
-(define %mullvadbrowser-version "14.0.3")
+(define %mullvadbrowser-version "14.0.4")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-mullvad-browser-".
-(define %mullvadbrowser-firefox-version "128.5.0esr-14.0-1-build2")
+(define %mullvadbrowser-firefox-version "128.6.0esr-14.0-1-build1")
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-base
@@ -836,11 +836,11 @@ (define mullvadbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "caa431bbea1a76d7ad61eeda94086a1513762605")))
+          (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0zdkcykzh8m1rv6valx0mk6yvh2q4jrj2qxk0frh7nwxwc509b5c"))))
+      "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-specific
@@ -848,11 +848,11 @@ (define mullvadbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "2f7d98b46ce480cdb4d7e9ddab912650c8673d6c")))
+          (commit "6a1ef41c664a5185e25ca2c4bbf5d7447bd888a7")))
     (file-name "translation-mullvad-browser")
     (sha256
      (base32
-      "08anwb45rxzsdcxwzjflqb1d0f78pi4fsgdvsdlc4fmp8kx10nsd"))))
+      "0jgxgynyzcph82j3bjkw0qfwkakmz8529lmx7v1ggbh3fvn7wa4l"))))
 
 (define mullvadbrowser-assets
   ;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@@ -868,7 +868,7 @@ (define mullvadbrowser-assets
          version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "0jh35vsnyqjg6hhwdlw11pq7i1awr6fy8chgr2w0wnrzm91vvzia"))))
+         "0cycrxil9zbdqrkzzsfx7nlrhs4k5riwi0y7r0ah2snmpcla4nb3"))))
     (arguments
      (list
       #:install-plan
@@ -911,7 +911,7 @@ (define-public mullvadbrowser
          %mullvadbrowser-firefox-version ".tar.xz"))
        (sha256
         (base32
-         "01mm8kxza5rfl4f78xb8n9x7y0p6mm205pxhqrvds0yyj3jvclsb"))))
+         "0x5q0g62ndy9r7qqrz0p35bq258sn26bdwhzs396v8mrzyf4jywh"))))
     (arguments
      (substitute-keyword-arguments (package-arguments mullvadbrowser-base)
        ((#:phases phases)

base-commit: 575dc58975281e8c2c779c9b3098746606cfc5dd
-- 
2.46.0

Message #10 received at 75548-done <at> debbugs.gnu.org (full text, mbox):

From: Hilton Chain <hako <at> ultrarare.space>
To: André Batista <nandre <at> riseup.net>
Cc: jonathan.brielmaier <at> web.de, mhw <at> netris.org, clement <at> lassieur.org,
 75548-done <at> debbugs.gnu.org, ian <at> retrospec.tv
Subject: Re: [bug#75548] [PATCH] gnu: mullvadbrowser: Update to 14.0.4
 [security fixes].
Date: Wed, 15 Jan 2025 13:10:56 +0800

On Tue, 14 Jan 2025 06:52:17 +0800,
André Batista wrote:
>
> Fixes CVEs 2025-0237, 2025-0238, 2025-0239, 2025-0240, 2025-0241,
> 2025-0242 and 2025-0243.  See
> <https://www.mozilla.org/en-US/security/advisories/mfsa2025-02/> for
> details.
>
> * gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
> 20250106125732
> (%mullvadbrowser-version): Update to 14.0.4.
> (%mullvadbrowser-firefox-version): Update to 128.6.0esr-14.0-1-build1.
> (mullvadbrowser-translation-base): Update to
> bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7.
> (mullvadbrowser-translation-specific): Update to
> 6a1ef41c664a5185e25ca2c4bbf5d7447bd888a7.
>
> Change-Id: I1c0b2290b89d59f9d21ac0be273ca686593ee002
> ---
>  gnu/packages/tor-browsers.scm | 18 +++++++++---------
>  1 file changed, 9 insertions(+), 9 deletions(-)

Applied as d4acdf0069, thanks!

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.