GNU bug report logs - #76128
[PATCH] gnu: torbrowser: Update to 14.0.5 [security-fixes].

Message received at submit <at> debbugs.gnu.org:

Received: (at submit) by debbugs.gnu.org; 7 Feb 2025 20:27:26 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Feb 07 15:27:26 2025
Received: from localhost ([127.0.0.1]:36815 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tgUwg-0003R8-6i
	for submit <at> debbugs.gnu.org; Fri, 07 Feb 2025 15:27:26 -0500
Received: from lists.gnu.org ([2001:470:142::17]:54066)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <nandre@HIDDEN>) id 1tgUwe-0003Qu-ID
 for submit <at> debbugs.gnu.org; Fri, 07 Feb 2025 15:27:25 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tgUwX-00054U-L7
 for guix-patches@HIDDEN; Fri, 07 Feb 2025 15:27:18 -0500
Received: from mx0.riseup.net ([198.252.153.6])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tgUwV-0003WK-Sc
 for guix-patches@HIDDEN; Fri, 07 Feb 2025 15:27:17 -0500
Received: from fews02-sea.riseup.net (fews02-sea-pn.riseup.net [10.0.1.112])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by mx0.riseup.net (Postfix) with ESMTPS id 4YqQW66Gs0z9wg4
 for <guix-patches@HIDDEN>; Fri,  7 Feb 2025 20:27:14 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1738960034; bh=Qfdclbu77I0y7rKZ8kg77sHUxbdJPB5LFIUksaBAlBU=;
 h=From:To:Cc:Subject:Date:From;
 b=B+ErF21TFJQ7bnGrnU+wldoj/xlJfSipUga13k62bq2CR7M/K2YnI0kCLJwOT6z3q
 CaiZ6U3W3TnoEAktWJVqViyTLLzLK5vupvyxF5E1gqNUYRsMJzbYYbLtcxw99hT1MB
 gVbKooFvavCh5w38XyQY7uxAx8k06qf80fC0Nit8=
X-Riseup-User-ID: 3AE145BBDB504B78E0DE3EC564EDBBE4B62FCB1E5EFF63690552A3265535CF26
Received: from [127.0.0.1] (localhost [127.0.0.1])
 by fews02-sea.riseup.net (Postfix) with ESMTPSA id 4YqQW54J4zzFtKC;
 Fri,  7 Feb 2025 20:27:13 +0000 (UTC)
From: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
To: guix-patches@HIDDEN
Subject: [PATCH] gnu: torbrowser: Update to 14.0.5 [security-fixes].
Date: Fri,  7 Feb 2025 17:26:58 -0300
Message-ID: <20250207202658.20877-1-nandre@HIDDEN>
MIME-Version: 1.0
X-Debbugs-Cc: nandre@HIDDEN, clement@HIDDEN, ian@HIDDEN,
 jonathan.brielmaier@HIDDEN, mhw@HIDDEN
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=198.252.153.6; envelope-from=nandre@HIDDEN;
 helo=mx0.riseup.net
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
 RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: submit
Cc: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Fixes CVEs 2024-11704, 2025-1009, 2025-1010, 2025-1011, 2025-1012,
2025-1013, 2025-1014, 2025-1016 and 2025-1017.  See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/> for
details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250203100000.
(%torbrowser-version): Update to 14.0.5.
(%torbrowser-firefox-version): Update to 128.7.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
93eddbd3888852c09e130d536fb3c9bd7e4e6f57.
(torbrowser-translation-specific): Update to
dd30508387040bf0a1217a1eb9edb80ac21926f2.

Change-Id: Iaf360be2be2c4dc5b5094d170e415ec7aaca282f
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 13a1b41f72..361acc7738 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250106125732")
+(define %torbrowser-build-date "20250203100000")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.4")
+(define %torbrowser-version "14.0.5")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.6.0esr-14.0-1-build1")
+(define %torbrowser-firefox-version "128.7.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
+          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
+      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "ed3c2270e0a932596abb9fdb9a9f7151fb74d3a1")))
+          (commit "dd30508387040bf0a1217a1eb9edb80ac21926f2")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "143cfv29n0fvq547nk3ziidfib8s3f8k10qjvgv0zldsc3sdgw5h"))))
+      "0bn495ppxwjrprwq22g2nv45mbb0scp1xpy6f2g4535s7dcs16a2"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "1f4gkyszvpykwy0hp6hp5yrbxgnq4yb082f24m93ayfmhlcjb5dv"))))
+         "073yrs2jsxgjvcqvqa8wdjrnxd7zgm121vw0cbrnkfacm71z9ssb"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "16zyixbddwaiw1bzsai5crdg58kmacshsr0rp37m85qk0a8vryg3"))))
+         "17a885c63mkvd0d3blis0fwhxizqj813rcaqrdpzg03yqmbfvn5d"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 70231fe7757f839f6ddd58d3c8a522b2e56fefe5
-- 
2.46.0