GNU bug report logs - #76865
[PATCH] gnu: torbrowser: Update to 14.0.7 [security-fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 76865 in the body.
You can then email your comments to 76865 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: torbrowser: Update to 14.0.7 [security-fixes].
Date: Sat,  8 Mar 2025 10:10:17 -0300

Fixes CVEs 2024-43097, 2025-1930, 2025-1931, 2025-1932, 2025-1933,
2025-1934, 2025-1935, 2025-1936, 2025-1937, 2025-1938 and 2025-1939.
See <https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/>
for details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250303093702.
(%torbrowser-version): Update to 14.0.7.
(%torbrowser-firefox-version): Update to 128.8.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
21fed48fc58df9e6c4d9f67b048fcae831df50c9.
(torbrowser-translation-specific): Update to
100908b702f92bc001b69cdd70f96a6e63134516.

Change-Id: Iccdba49d22dcc9877e874fe2f58169abfe981cd1
---
 gnu/packages/tor-browsers.scm | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index b1bba1d26e..a7ab98ca18 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -92,7 +92,7 @@ (define-module (gnu packages tor-browsers)
 
 ;; See browser/locales/l10n-changesets.json for the commit.
 (define firefox-locales
-  (let ((commit "f75c1e6a305e68161037337767ece88e9de940b9")
+  (let ((commit "fcd0300e8478d1ec4d1c097a073ddb8e1e0351e3")
         (revision "0"))
     (package
       (name "firefox-locales")
@@ -106,7 +106,7 @@ (define firefox-locales
           (file-name (git-file-name name version))
           (sha256
            (base32
-            "0ybi3n9mw9wnbi8dv01dllpvcdfwjmyn4q6njzhn8vg7jkmpha2s"))))
+            "1pzw65852ix6a6qb3wwhg5vrkz8337cs6lznk2vj0md5cvf2rrc4"))))
       (build-system copy-build-system)
       (home-page "https://github.com/mozilla-l10n/firefox-l10n")
       (synopsis "Firefox Locales")
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250203100000")
+(define %torbrowser-build-date "20250303093702")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.5")
+(define %torbrowser-version "14.0.7")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.7.0esr-14.0-1-build2")
+(define %torbrowser-firefox-version "128.8.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
+          (commit "21fed48fc58df9e6c4d9f67b048fcae831df50c9")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
+      "1gs2b9bak7rglpbswkm47jwj3yd76361xblvyxjfsbji9igjj7za"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "dd30508387040bf0a1217a1eb9edb80ac21926f2")))
+          (commit "100908b702f92bc001b69cdd70f96a6e63134516")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "0bn495ppxwjrprwq22g2nv45mbb0scp1xpy6f2g4535s7dcs16a2"))))
+      "0shlxk55rj9lfw3mrax84zsalrpsbrjc85287ah90cys2lw6d1dx"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "073yrs2jsxgjvcqvqa8wdjrnxd7zgm121vw0cbrnkfacm71z9ssb"))))
+         "0fmh2j6nwi5q7kw3grkwm2lrgig1m4sk6ai70zjy4dbaa3xmc6h9"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "17a885c63mkvd0d3blis0fwhxizqj813rcaqrdpzg03yqmbfvn5d"))))
+         "0h5cgwrdavcr4nbg8girdxcdfqd9vfmsjwmjdbrz9zv63dparhwp"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 535efb3c9add7e32530aa0dced40b18b12b8ed95
-- 
2.48.1

Message #8 received at 76865 <at> debbugs.gnu.org (full text, mbox):

From: Ian Eure <ian <at> retrospec.tv>
To: André Batista <nandre <at> riseup.net>
Cc: jonathan.brielmaier <at> web.de, mhw <at> netris.org, 76865 <at> debbugs.gnu.org,
 clement <at> lassieur.org
Subject: Re: [bug#76865] [PATCH] gnu: torbrowser: Update to 14.0.7
 [security-fixes].
Date: Sat, 08 Mar 2025 10:32:27 -0800

Hi André,

Pushed as cd704d29ce.

Thanks,
 -- Ian

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.