Subject: [PATCH] gnu: torbrowser: Update to 14.0.5 [security-fixes].

From: André Batista <[email-masked]>
Date: Fri, 7 Feb 2025 17:26:58 -0300

Fixes CVEs 2024-11704, 2025-1009, 2025-1010, 2025-1011, 2025-1012,
2025-1013, 2025-1014, 2025-1016 and 2025-1017.  See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/> for
details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250203100000.
(%torbrowser-version): Update to 14.0.5.
(%torbrowser-firefox-version): Update to 128.7.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
93eddbd3888852c09e130d536fb3c9bd7e4e6f57.
(torbrowser-translation-specific): Update to
dd30508387040bf0a1217a1eb9edb80ac21926f2.

Change-Id: Iaf360be2be2c4dc5b5094d170e415ec7aaca282f
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 13a1b41f72..361acc7738 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250106125732")
+(define %torbrowser-build-date "20250203100000")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.4")
+(define %torbrowser-version "14.0.5")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.6.0esr-14.0-1-build1")
+(define %torbrowser-firefox-version "128.7.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
+          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
+      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "ed3c2270e0a932596abb9fdb9a9f7151fb74d3a1")))
+          (commit "dd30508387040bf0a1217a1eb9edb80ac21926f2")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "143cfv29n0fvq547nk3ziidfib8s3f8k10qjvgv0zldsc3sdgw5h"))))
+      "0bn495ppxwjrprwq22g2nv45mbb0scp1xpy6f2g4535s7dcs16a2"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "1f4gkyszvpykwy0hp6hp5yrbxgnq4yb082f24m93ayfmhlcjb5dv"))))
+         "073yrs2jsxgjvcqvqa8wdjrnxd7zgm121vw0cbrnkfacm71z9ssb"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "16zyixbddwaiw1bzsai5crdg58kmacshsr0rp37m85qk0a8vryg3"))))
+         "17a885c63mkvd0d3blis0fwhxizqj813rcaqrdpzg03yqmbfvn5d"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 70231fe7757f839f6ddd58d3c8a522b2e56fefe5
-- 
2.46.0