X-Loop: help-debbugs@HIDDEN
Subject: [bug#76128] [PATCH] gnu: torbrowser: Update to 14.0.5 [security-fixes].
Resent-From: =?UTF-8?Q?Andr=C3=A9?= Batista <nandre@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: nandre@HIDDEN, clement@HIDDEN, ian@HIDDEN, jonathan.brielmaier@HIDDEN, mhw@HIDDEN, guix-patches@HIDDEN
Resent-Date: Fri, 07 Feb 2025 20:28:02 +0000
Resent-Message-ID: <handler.76128.B.173896004613219 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: report 76128
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 76128 <at> debbugs.gnu.org
Cc: =?UTF-8?Q?Andr=C3=A9?= Batista <nandre@HIDDEN>, nandre@HIDDEN, clement@HIDDEN, ian@HIDDEN, jonathan.brielmaier@HIDDEN, mhw@HIDDEN
X-Debbugs-Original-To: guix-patches@HIDDEN
X-Debbugs-Original-Xcc: nandre@HIDDEN, clement@HIDDEN, ian@HIDDEN, jonathan.brielmaier@HIDDEN, mhw@HIDDEN
Received: via spool by submit <at> debbugs.gnu.org id=B.173896004613219
(code B ref -1); Fri, 07 Feb 2025 20:28:02 +0000
Received: (at submit) by debbugs.gnu.org; 7 Feb 2025 20:27:26 +0000
Received: from localhost ([127.0.0.1]:36815 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1tgUwg-0003R8-6i
for submit <at> debbugs.gnu.org; Fri, 07 Feb 2025 15:27:26 -0500
Received: from lists.gnu.org ([2001:470:142::17]:54066)
by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.84_2) (envelope-from <nandre@HIDDEN>) id 1tgUwe-0003Qu-ID
for submit <at> debbugs.gnu.org; Fri, 07 Feb 2025 15:27:25 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tgUwX-00054U-L7
for guix-patches@HIDDEN; Fri, 07 Feb 2025 15:27:18 -0500
Received: from mx0.riseup.net ([198.252.153.6])
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tgUwV-0003WK-Sc
for guix-patches@HIDDEN; Fri, 07 Feb 2025 15:27:17 -0500
Received: from fews02-sea.riseup.net (fews02-sea-pn.riseup.net [10.0.1.112])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by mx0.riseup.net (Postfix) with ESMTPS id 4YqQW66Gs0z9wg4
for <guix-patches@HIDDEN>; Fri, 7 Feb 2025 20:27:14 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
t=1738960034; bh=Qfdclbu77I0y7rKZ8kg77sHUxbdJPB5LFIUksaBAlBU=;
h=From:To:Cc:Subject:Date:From;
b=B+ErF21TFJQ7bnGrnU+wldoj/xlJfSipUga13k62bq2CR7M/K2YnI0kCLJwOT6z3q
CaiZ6U3W3TnoEAktWJVqViyTLLzLK5vupvyxF5E1gqNUYRsMJzbYYbLtcxw99hT1MB
gVbKooFvavCh5w38XyQY7uxAx8k06qf80fC0Nit8=
X-Riseup-User-ID: 3AE145BBDB504B78E0DE3EC564EDBBE4B62FCB1E5EFF63690552A3265535CF26
Received: from [127.0.0.1] (localhost [127.0.0.1])
by fews02-sea.riseup.net (Postfix) with ESMTPSA id 4YqQW54J4zzFtKC;
Fri, 7 Feb 2025 20:27:13 +0000 (UTC)
From: =?UTF-8?Q?Andr=C3=A9?= Batista <nandre@HIDDEN>
Date: Fri, 7 Feb 2025 17:26:58 -0300
Message-ID: <20250207202658.20877-1-nandre@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=198.252.153.6; envelope-from=nandre@HIDDEN;
helo=mx0.riseup.net
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
Fixes CVEs 2024-11704, 2025-1009, 2025-1010, 2025-1011, 2025-1012,
2025-1013, 2025-1014, 2025-1016 and 2025-1017. See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/> for
details.
* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250203100000.
(%torbrowser-version): Update to 14.0.5.
(%torbrowser-firefox-version): Update to 128.7.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
93eddbd3888852c09e130d536fb3c9bd7e4e6f57.
(torbrowser-translation-specific): Update to
dd30508387040bf0a1217a1eb9edb80ac21926f2.
Change-Id: Iaf360be2be2c4dc5b5094d170e415ec7aaca282f
---
gnu/packages/tor-browsers.scm | 18 +++++++++---------
1 file changed, 9 insertions(+), 9 deletions(-)
diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 13a1b41f72..361acc7738 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -116,16 +116,16 @@ (define firefox-locales
;; We copy the official build id, which is defined at
;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250106125732")
+(define %torbrowser-build-date "20250203100000")
;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.4")
+(define %torbrowser-version "14.0.5")
;; To find the last Firefox version, browse
;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
;; There should be only one archive that starts with
;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.6.0esr-14.0-1-build1")
+(define %torbrowser-firefox-version "128.7.0esr-14.0-1-build2")
;; See tor-browser-build/rbm.conf for the list.
(define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
- (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
+ (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
(file-name "translation-base-browser")
(sha256
(base32
- "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
+ "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
;; See tor-browser-build/projects/translation/config.
(define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
- (commit "ed3c2270e0a932596abb9fdb9a9f7151fb74d3a1")))
+ (commit "dd30508387040bf0a1217a1eb9edb80ac21926f2")))
(file-name "translation-tor-browser")
(sha256
(base32
- "143cfv29n0fvq547nk3ziidfib8s3f8k10qjvgv0zldsc3sdgw5h"))))
+ "0bn495ppxwjrprwq22g2nv45mbb0scp1xpy6f2g4535s7dcs16a2"))))
(define torbrowser-assets
;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
version "/tor-browser-linux-x86_64-" version ".tar.xz"))
(sha256
(base32
- "1f4gkyszvpykwy0hp6hp5yrbxgnq4yb082f24m93ayfmhlcjb5dv"))))
+ "073yrs2jsxgjvcqvqa8wdjrnxd7zgm121vw0cbrnkfacm71z9ssb"))))
(arguments
(list
#:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
".tar.xz"))
(sha256
(base32
- "16zyixbddwaiw1bzsai5crdg58kmacshsr0rp37m85qk0a8vryg3"))))
+ "17a885c63mkvd0d3blis0fwhxizqj813rcaqrdpzg03yqmbfvn5d"))))
(build-system mozilla-build-system)
(inputs
(list lyrebird
base-commit: 70231fe7757f839f6ddd58d3c8a522b2e56fefe5
--
2.46.0
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) Content-Type: text/plain; charset=utf-8 X-Loop: help-debbugs@HIDDEN From: help-debbugs@HIDDEN (GNU bug Tracking System) To: =?UTF-8?Q?Andr=C3=A9?= Batista <nandre@HIDDEN> Subject: bug#76128: Acknowledgement ([PATCH] gnu: torbrowser: Update to 14.0.5 [security-fixes].) Message-ID: <handler.76128.B.173896004613219.ack <at> debbugs.gnu.org> References: <20250207202658.20877-1-nandre@HIDDEN> X-Gnu-PR-Message: ack 76128 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 76128 <at> debbugs.gnu.org Date: Fri, 07 Feb 2025 20:28:02 +0000 Thank you for filing a new bug report with debbugs.gnu.org. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. As you requested using X-Debbugs-CC, your message was also forwarded to nandre@HIDDEN, clement@HIDDEN, ian@HIDDEN, jonathan.briel= maier@HIDDEN, mhw@HIDDEN (after having been given a bug report number, if it did not have one). Your message has been sent to the package maintainer(s): guix-patches@HIDDEN If you wish to submit further information on this problem, please send it to 76128 <at> debbugs.gnu.org. Please do not send mail to help-debbugs@HIDDEN unless you wish to report a problem with the Bug-tracking system. --=20 76128: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D76128 GNU Bug Tracking System Contact help-debbugs@HIDDEN with problems
Received: (at control) by debbugs.gnu.org; 11 Feb 2025 20:12:33 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Feb 11 15:12:33 2025 Received: from localhost ([127.0.0.1]:58944 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1thwcS-0006tK-O5 for submit <at> debbugs.gnu.org; Tue, 11 Feb 2025 15:12:32 -0500 Received: from fout-a8-smtp.messagingengine.com ([103.168.172.151]:60981) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <ian@HIDDEN>) id 1thwcQ-0006sm-0K for control <at> debbugs.gnu.org; Tue, 11 Feb 2025 15:12:31 -0500 Received: from phl-compute-01.internal (phl-compute-01.phl.internal [10.202.2.41]) by mailfout.phl.internal (Postfix) with ESMTP id 5B70713800E0 for <control <at> debbugs.gnu.org>; Tue, 11 Feb 2025 15:12:24 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-01.internal (MEProxy); Tue, 11 Feb 2025 15:12:24 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:content-type:date:date:from:from:in-reply-to:message-id :reply-to:subject:subject:to:to; s=fm2; t=1739304744; x= 1739391144; bh=Lqd2MVq3VW8zWZe5Yyu94u9+2Wgf3oq7wpunbjuspJg=; b=u 9ptuDillYuPb/SdnDLKoVqObFHVN6j3nUI9/5mQ16RrkQS5bcjl/+50U28r1QheP nGA1MSh2zFD3lMLF+UD/SOWXWT3gBJSMUNkrsjmbxRec7/bIQi3dFFt0tGlhlKt+ 6N0KuWsK0B5uQkT9OkPfd5cciVn4StVZPh3b/9m5rjVgGI+veqq5F7Wuu79dEPhT vGgBdRNmnsz0g1DVM3+88Z9yPO3Uw09KkqpV20+HLmWsu8xCI90Rw/9StC3DAYEX oIVsRvmSM1mvwZXcZ8AIHbOmy4H5xHNTeuIh3XcIwvM+v4w1zf/u6qFm7bFTRhaH J2qwkJgXVM6MCexkE9Erg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:message-id:reply-to:subject :subject:to:to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1739304744; x=1739391144; bh=Lqd2MVq3VW8zWZe5Yyu94u9+2Wgf 3oq7wpunbjuspJg=; b=i4QQ1dcDd6FHQdKIqVpcOH9QiUOrghPSNuESfrUht2t1 on965+FEtWVbhY5g8eoo1PWy8lJQNHRsMRbnSLCCkFwl5GWbaStn7z2oXwSqOmCm FrhsIRjeO7vEPtECg8uJaIiUrpzid7uc2H32a9P6wYki6fVbr+GS/SBY1miOf6VN E1YYGaQTKtF0+Y+vSTml8bVM/SitZWlMjRActfBs8jkOF1rBnGmx/KYq2BnoWvBz tRytZ7TiODQSdPUZuoVnWTvlVXSXed+Lq40DcIlLm032vFfA0iwWfgh+ai4yU8Us zaEwzdibb3m1FlXiST412MjbGtLjdOJVGJiaMqQcZg== X-ME-Sender: <xms:J6-rZwc66FN-NHM7kvlWZ4J-U42IpSt6hmEMgem8WDMx_q1zSNUp3w> <xme:J6-rZyMbbTYvldg5vUMwRphZJtdWNYsKFRjUh99Y94yeQqKyRcjCmcp8Yxvunvdyt MOaUdRrMK26ZVZrvg> X-ME-Received: <xmr:J6-rZxhYeoiYSQIRY-oQ-FGBvOvBeHb454LmhKA7ElA5WJBUoQ8iRf7UjtSd4TeBZZ9H0uouZJwnIs0mChItAmHpQx3KwK7k4MzbJHO2iA> X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdegudelvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecunecujfgurhepfffkvf fhufestddtredttddttdenucfhrhhomhepkfgrnhcugfhurhgvuceoihgrnhesrhgvthhr ohhsphgvtgdrthhvqeenucggtffrrghtthgvrhhnpeetkeejhfefhfetieegkeehheevvd efgffggeevffdtvddufeehiefgteeiueehkeenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvhdpnhgspg hrtghpthhtohepuddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtoheptghonhhtrhho lhesuggvsggsuhhgshdrghhnuhdrohhrgh X-ME-Proxy: <xmx:KK-rZ19-QFIY7CQt8kw8Qvd3dtcTdkkEmEmCIKjFIWpHWNg9NaFKaQ> <xmx:KK-rZ8vs1hQPjFfEr3gNMu1CSrV8-qslggmTOs74md4gX5sLWWWTAw> <xmx:KK-rZ8HQS84IxBzNe2cmDVE3e6NuYlSr5p4cyZJap6_DQjza3jeGZA> <xmx:KK-rZ7PZXjbfZ9UdBzjQOy7HXwYS2T5yyX3uYbrFbfUqhU0BT-JIYA> <xmx:KK-rZ5VW3wiuEqBaRvv83T6BYThUf_phrbWULcgDmt_OlYNCp0AC7boD> Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <control <at> debbugs.gnu.org>; Tue, 11 Feb 2025 15:12:23 -0500 (EST) Date: Tue, 11 Feb 2025 12:12:22 -0800 Message-Id: <87jz9wtf4p.fsf@HIDDEN> To: control <at> debbugs.gnu.org From: Ian Eure <ian@HIDDEN> Subject: control message for bug #76128 X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.7 (-) close 76128 quit
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.