GNU bug report logs - #76128
[PATCH] gnu: torbrowser: Update to 14.0.5 [security-fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 76128 in the body.
You can then email your comments to 76128 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: torbrowser: Update to 14.0.5 [security-fixes].
Date: Fri,  7 Feb 2025 17:26:58 -0300

Fixes CVEs 2024-11704, 2025-1009, 2025-1010, 2025-1011, 2025-1012,
2025-1013, 2025-1014, 2025-1016 and 2025-1017.  See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/> for
details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250203100000.
(%torbrowser-version): Update to 14.0.5.
(%torbrowser-firefox-version): Update to 128.7.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
93eddbd3888852c09e130d536fb3c9bd7e4e6f57.
(torbrowser-translation-specific): Update to
dd30508387040bf0a1217a1eb9edb80ac21926f2.

Change-Id: Iaf360be2be2c4dc5b5094d170e415ec7aaca282f
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 13a1b41f72..361acc7738 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250106125732")
+(define %torbrowser-build-date "20250203100000")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.4")
+(define %torbrowser-version "14.0.5")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.6.0esr-14.0-1-build1")
+(define %torbrowser-firefox-version "128.7.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
+          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
+      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "ed3c2270e0a932596abb9fdb9a9f7151fb74d3a1")))
+          (commit "dd30508387040bf0a1217a1eb9edb80ac21926f2")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "143cfv29n0fvq547nk3ziidfib8s3f8k10qjvgv0zldsc3sdgw5h"))))
+      "0bn495ppxwjrprwq22g2nv45mbb0scp1xpy6f2g4535s7dcs16a2"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "1f4gkyszvpykwy0hp6hp5yrbxgnq4yb082f24m93ayfmhlcjb5dv"))))
+         "073yrs2jsxgjvcqvqa8wdjrnxd7zgm121vw0cbrnkfacm71z9ssb"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "16zyixbddwaiw1bzsai5crdg58kmacshsr0rp37m85qk0a8vryg3"))))
+         "17a885c63mkvd0d3blis0fwhxizqj813rcaqrdpzg03yqmbfvn5d"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 70231fe7757f839f6ddd58d3c8a522b2e56fefe5
-- 
2.46.0

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.