GNU bug report logs - #76129
[PATCH] gnu: mullvadbrowser: Update to 14.0.5 [security fixes].

Message received at submit <at> debbugs.gnu.org:

Received: (at submit) by debbugs.gnu.org; 7 Feb 2025 20:27:55 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Feb 07 15:27:55 2025
Received: from localhost ([127.0.0.1]:36818 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tgUx8-0003Rx-Q9
	for submit <at> debbugs.gnu.org; Fri, 07 Feb 2025 15:27:55 -0500
Received: from lists.gnu.org ([2001:470:142::17]:42186)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <nandre@HIDDEN>) id 1tgUx5-0003Rh-Pk
 for submit <at> debbugs.gnu.org; Fri, 07 Feb 2025 15:27:52 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tgUx0-0005CV-Bt
 for guix-patches@HIDDEN; Fri, 07 Feb 2025 15:27:46 -0500
Received: from mx1.riseup.net ([198.252.153.129])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tgUww-0003im-LA
 for guix-patches@HIDDEN; Fri, 07 Feb 2025 15:27:46 -0500
Received: from fews02-sea.riseup.net (fews02-sea-pn.riseup.net [10.0.1.112])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by mx1.riseup.net (Postfix) with ESMTPS id 4YqQWX0djqzDrRK
 for <guix-patches@HIDDEN>; Fri,  7 Feb 2025 20:27:36 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1738960061; bh=pKPwW3wEzkrsBi++2XI+8Ui37KSXYlgv2T0HFX1ltL4=;
 h=From:To:Cc:Subject:Date:From;
 b=QtAWp+VjZIn1Kjtnk2G43R6rk+ALj2PUzmi6Ds22XP2u+dmox355d0j7t0vJzWR9F
 8hFsVeqsbfHYeT5a01VKCEl9kTtzlyUceurcfQg+w9qOK8DHzrL7md/rGqEG/iee5B
 ovqbQXlkkl+/oh7arywDNbor7WeBFZCEjAyXbnC8=
X-Riseup-User-ID: BB691C46D3F3C40D062F0032EB98D1B75A376B753F1BBD24346F7553289A9DB3
Received: from [127.0.0.1] (localhost [127.0.0.1])
 by fews02-sea.riseup.net (Postfix) with ESMTPSA id 4YqQWV72wLzFtKC;
 Fri,  7 Feb 2025 20:27:34 +0000 (UTC)
From: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
To: guix-patches@HIDDEN
Subject: [PATCH] gnu: mullvadbrowser: Update to 14.0.5 [security fixes].
Date: Fri,  7 Feb 2025 17:27:25 -0300
Message-ID: <20250207202725.20898-1-nandre@HIDDEN>
MIME-Version: 1.0
X-Debbugs-Cc: nandre@HIDDEN, clement@HIDDEN, ian@HIDDEN,
 jonathan.brielmaier@HIDDEN, mhw@HIDDEN
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=198.252.153.129; envelope-from=nandre@HIDDEN;
 helo=mx1.riseup.net
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: submit
Cc: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Fixes CVEs 2024-11704, 2025-1009, 2025-1010, 2025-1011, 2025-1012,
2025-1013, 2025-1014, 2025-1016 and 2025-1017.  See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/> for
details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250203100000.
(%mullvadbrowser-version): Update to 14.0.5.
(%mullvadbrowser-firefox-version): Update to 128.7.0esr-14.0-1-build2.
(mullvadbrowser-translation-base): Update to
93eddbd3888852c09e130d536fb3c9bd7e4e6f57.

Change-Id: I3932142356fd3e44d9a3220953df8ae236b90537
---
 gnu/packages/tor-browsers.scm | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index 361acc7738..2718622f79 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -818,17 +818,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it"
 
 ;; We copy the official build id, which can be found there:
 ;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
-(define %mullvadbrowser-build-date "20250106125732")
+(define %mullvadbrowser-build-date "20250203100000")
 
 ;; To find the last version, look at
 ;; https://mullvad.net/en/download/browser/linux.
-(define %mullvadbrowser-version "14.0.4")
+(define %mullvadbrowser-version "14.0.5")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-mullvad-browser-".
-(define %mullvadbrowser-firefox-version "128.6.0esr-14.0-1-build1")
+(define %mullvadbrowser-firefox-version "128.7.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-base
@@ -836,11 +836,11 @@ (define mullvadbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "bb1df34ec79d55dcd1e0ebc80cb2c72d27c462b7")))
+          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0mhfbmghvdd1rpvpr8ppkdpzwwb9v03a211qgi27j3iwaa04zh9m"))))
+      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-specific
@@ -868,7 +868,7 @@ (define mullvadbrowser-assets
          version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "0cycrxil9zbdqrkzzsfx7nlrhs4k5riwi0y7r0ah2snmpcla4nb3"))))
+         "0l544hl9kbashcx9qrih1qf1zz2cdny733ry1r1v13g85760ipyb"))))
     (arguments
      (list
       #:install-plan
@@ -911,7 +911,7 @@ (define-public mullvadbrowser
          %mullvadbrowser-firefox-version ".tar.xz"))
        (sha256
         (base32
-         "0x5q0g62ndy9r7qqrz0p35bq258sn26bdwhzs396v8mrzyf4jywh"))))
+         "04val15xsfl118d18xpnhhy5cshlgkdpp58y0ja306glx453kcpl"))))
     (arguments
      (substitute-keyword-arguments (package-arguments mullvadbrowser-base)
        ((#:phases phases)

base-commit: 70231fe7757f839f6ddd58d3c8a522b2e56fefe5
-- 
2.46.0