GNU bug report logs - #76865
[PATCH] gnu: torbrowser: Update to 14.0.7 [security-fixes].

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: guix-patches; Reported by: André Batista <nandre@HIDDEN>; Keywords: patch; Done: Ian Eure <ian@HIDDEN>; Maintainer for guix-patches is guix-patches@HIDDEN.
bug closed, send any further explanations to 76865 <at> debbugs.gnu.org and André Batista <nandre@HIDDEN> Request was from Ian Eure <ian@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 76865 <at> debbugs.gnu.org:


Received: (at 76865) by debbugs.gnu.org; 8 Mar 2025 18:32:40 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 08 13:32:40 2025
Received: from localhost ([127.0.0.1]:56782 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tqyyW-0005eo-Bf
	for submit <at> debbugs.gnu.org; Sat, 08 Mar 2025 13:32:40 -0500
Received: from fout-a8-smtp.messagingengine.com ([103.168.172.151]:50405)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <ian@HIDDEN>) id 1tqyyS-0005eW-FP
 for 76865 <at> debbugs.gnu.org; Sat, 08 Mar 2025 13:32:37 -0500
Received: from phl-compute-06.internal (phl-compute-06.phl.internal
 [10.202.2.46])
 by mailfout.phl.internal (Postfix) with ESMTP id 9A2471380A19;
 Sat,  8 Mar 2025 13:32:30 -0500 (EST)
Received: from phl-mailfrontend-01 ([10.202.2.162])
 by phl-compute-06.internal (MEProxy); Sat, 08 Mar 2025 13:32:30 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h=
 cc:cc:content-transfer-encoding:content-type:content-type:date
 :date:from:from:in-reply-to:message-id:mime-version:reply-to
 :subject:subject:to:to; s=fm3; t=1741458750; x=1741545150; bh=La
 aHKsdUsJb8y3ZlHSWG6kxeGSA5QDNCb9C/kv4WwlQ=; b=FIgBkp3byQwAXG62rq
 wnknYsSdtq7eJaBGvekvq9sgAdwVqKONAJ/0hB2dWNtadz7sSg1XSGhHmzO9vZPQ
 2J/HZxBdKLy6KjEWWSvCajfuEyNFSATsSG3/rO2MwuX5dprcA47G7mypdJgozaCA
 IrxBDzRyEq8lwuzjv6g6KpDtxcp/hHEwsnOB4uaIbYXodeYzHKJxsyTdfi56EQrt
 gJGFSsoyDdgp7GR3aehwR6J89HmGwZeAZkLYB2OOBFxXrilE0Xg2Svk2e4c1B01u
 McnXTN2XLFdLOt2IRGOpkfb7l9OlK2xJbbnsUPu+UA2CvXz7zA3XuT3OtmDLLSZ9
 ydSg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:content-type:date:date:feedback-id:feedback-id
 :from:from:in-reply-to:message-id:mime-version:reply-to:subject
 :subject:to:to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=
 fm1; t=1741458750; x=1741545150; bh=LaaHKsdUsJb8y3ZlHSWG6kxeGSA5
 QDNCb9C/kv4WwlQ=; b=dxkmUs+x7ZfyMGZB/SEM9p2UdgyQBs+2GFD6PCgQ1xr5
 Ka4o8cjHwux0fExc3txz88mh8Z3+42E3yqivk8LkIgN/C/pTKg9A8fgKpnzKBZjq
 GIH6DCykhXZxUF9G4/Yx9UtAHm5B0kXglF6dely6e+ffrZpc6hh5ySkCf3BSTpnQ
 RlNgevVAEv+uE983uNx2NvO+LeobwhYo51T74F4EnV9X6kAt1DFGba3BaydnENRW
 ho4hj9aQEnL64/c1zhBV/YxlCi3nnaw6Kx7cuPEYjoBUitjTPygur4cmwnGRvYjq
 oB6BGA2aK4GpvBeHnm9yyN+BR8q4jmenzWTlHrSKbQ==
X-ME-Sender: <xms:Po3MZ8BOLXfb1vUpAsdqXAp8-b_KXgYtRheJ7SLTRFGOV90qMGCkhw>
 <xme:Po3MZ-gjAdQlChH1Tiv7HCqXj3BqmmjmnyhoJCYbQKCJwlgzik-viRc9YtYQCJ-eW
 1SscmMpkllfWeL-lw>
X-ME-Received: <xmr:Po3MZ_kR_4txn8a22Fimp_PTfazJztQigfaV63RG60MIhrFucyaJZqbRpEDZ-RDxmznFz0z2uHLop9WVFG14qnRr0EgywqiJsKoFEf0>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduudegvdekucetufdoteggodetrf
 dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv
 pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpih
 gvnhhtshculddquddttddmnecujfgurhephffvvefufgffkfggtgfgsehtqhertddtreej
 necuhfhrohhmpefkrghnucfguhhrvgcuoehirghnsehrvghtrhhoshhpvggtrdhtvheqne
 cuggftrfgrthhtvghrnheptdetkeffffefiefhueekvdeiueegieegffdthfelveelgfdt
 vdfhtdduheffuedvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh
 hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopeehpdhm
 ohguvgepshhmthhpohhuthdprhgtphhtthhopehmhhifsehnvghtrhhishdrohhrghdprh
 gtphhtthhopehjohhnrghthhgrnhdrsghrihgvlhhmrghivghrseifvggsrdguvgdprhgt
 phhtthhopegtlhgvmhgvnhhtsehlrghsshhivghurhdrohhrghdprhgtphhtthhopeejie
 ekieehseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepnhgrnhgurhgvsehr
 ihhsvghuphdrnhgvth
X-ME-Proxy: <xmx:Po3MZyzJL4oQMvcOFW7Cmc9cnrHM1yYXOPK_Yiae1HZXdyJsr4d7pw>
 <xmx:Po3MZxT06Z06Yl5Ecil1UAyW-VsAkS2tQxHH1BrmgWCFTbBHWJNnrw>
 <xmx:Po3MZ9aAPUkEHfbErA5i4alnFJu4HEB6e4fcTao4N7aJg4Qd-FTIcg>
 <xmx:Po3MZ6Sw1TyQUSStW-LK0M9IKgEN1cjP6GDDcb70flMh-2mMdbeg_w>
 <xmx:Po3MZ6Ky0OHehKlaSSAQfyY1AGDoQi10ADvgE-fWGbGivh1nIhH6XgTs>
Feedback-ID: id9014242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat,
 8 Mar 2025 13:32:29 -0500 (EST)
From: Ian Eure <ian@HIDDEN>
To: =?utf-8?Q?Andr=C3=A9?= Batista <nandre@HIDDEN>
Subject: Re: [bug#76865] [PATCH] gnu: torbrowser: Update to 14.0.7
 [security-fixes].
User-Agent: mu4e 1.12.9; emacs 29.4
Date: Sat, 08 Mar 2025 10:32:27 -0800
Message-ID: <87plirmkzo.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 76865
Cc: jonathan.brielmaier@HIDDEN, mhw@HIDDEN, 76865 <at> debbugs.gnu.org,
 clement@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi Andr=C3=A9,

Pushed as cd704d29ce.

Thanks,
  -- Ian




Information forwarded to guix-patches@HIDDEN:
bug#76865; Package guix-patches. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 8 Mar 2025 13:10:47 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 08 08:10:47 2025
Received: from localhost ([127.0.0.1]:53306 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tqtx0-0004cW-Cf
	for submit <at> debbugs.gnu.org; Sat, 08 Mar 2025 08:10:46 -0500
Received: from lists.gnu.org ([2001:470:142::17]:32860)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <nandre@HIDDEN>) id 1tqtwt-0004c2-JR
 for submit <at> debbugs.gnu.org; Sat, 08 Mar 2025 08:10:41 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tqtwl-0003UK-8O
 for guix-patches@HIDDEN; Sat, 08 Mar 2025 08:10:33 -0500
Received: from mx0.riseup.net ([198.252.153.6])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tqtwj-0001Ss-9a
 for guix-patches@HIDDEN; Sat, 08 Mar 2025 08:10:30 -0500
Received: from fews02-sea.riseup.net (fews02-sea-pn.riseup.net [10.0.1.112])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by mx0.riseup.net (Postfix) with ESMTPS id 4Z93Rk3kQnz9tZN
 for <guix-patches@HIDDEN>; Sat,  8 Mar 2025 13:10:26 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1741439426; bh=tN0drF9umJiHIx3qf/UQkYxq/tISTmB+UcTeT20JU+w=;
 h=From:To:Cc:Subject:Date:From;
 b=E/waQlJnxXsH3sZDwMJ/cnoiAx9qjOIX050Pwh9SsXJxXEj0ouMq0tvvAXBV/hYxF
 W4gJv9XP7h2YiAgNaeHV5gwwVXdpE5qCswK2vZnE1Il4aZdOfx2M3BDRtobKqHtfNB
 mOoIST9DkSuYEAxiuvepdNjvHjPETv7lleL7svo8=
X-Riseup-User-ID: 407855696EB578B6C3568E052648B5F2D6C4B5F7CF28FFF5FF6FBE13DDB5E038
Received: from [127.0.0.1] (localhost [127.0.0.1])
 by fews02-sea.riseup.net (Postfix) with ESMTPSA id 4Z93Rj2TNSzFt8Q;
 Sat,  8 Mar 2025 13:10:25 +0000 (UTC)
From: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
To: guix-patches@HIDDEN
Subject: [PATCH] gnu: torbrowser: Update to 14.0.7 [security-fixes].
Date: Sat,  8 Mar 2025 10:10:17 -0300
Message-ID: <20250308131017.7873-1-nandre@HIDDEN>
MIME-Version: 1.0
X-Debbugs-Cc: clement@HIDDEN, ian@HIDDEN,
 jonathan.brielmaier@HIDDEN, mhw@HIDDEN
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=198.252.153.6; envelope-from=nandre@HIDDEN;
 helo=mx0.riseup.net
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
 RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: submit
Cc: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Fixes CVEs 2024-43097, 2025-1930, 2025-1931, 2025-1932, 2025-1933,
2025-1934, 2025-1935, 2025-1936, 2025-1937, 2025-1938 and 2025-1939.
See <https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/>
for details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250303093702.
(%torbrowser-version): Update to 14.0.7.
(%torbrowser-firefox-version): Update to 128.8.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
21fed48fc58df9e6c4d9f67b048fcae831df50c9.
(torbrowser-translation-specific): Update to
100908b702f92bc001b69cdd70f96a6e63134516.

Change-Id: Iccdba49d22dcc9877e874fe2f58169abfe981cd1
---
 gnu/packages/tor-browsers.scm | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index b1bba1d26e..a7ab98ca18 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -92,7 +92,7 @@ (define-module (gnu packages tor-browsers)
 
 ;; See browser/locales/l10n-changesets.json for the commit.
 (define firefox-locales
-  (let ((commit "f75c1e6a305e68161037337767ece88e9de940b9")
+  (let ((commit "fcd0300e8478d1ec4d1c097a073ddb8e1e0351e3")
         (revision "0"))
     (package
       (name "firefox-locales")
@@ -106,7 +106,7 @@ (define firefox-locales
           (file-name (git-file-name name version))
           (sha256
            (base32
-            "0ybi3n9mw9wnbi8dv01dllpvcdfwjmyn4q6njzhn8vg7jkmpha2s"))))
+            "1pzw65852ix6a6qb3wwhg5vrkz8337cs6lznk2vj0md5cvf2rrc4"))))
       (build-system copy-build-system)
       (home-page "https://github.com/mozilla-l10n/firefox-l10n")
       (synopsis "Firefox Locales")
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250203100000")
+(define %torbrowser-build-date "20250303093702")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.5")
+(define %torbrowser-version "14.0.7")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.7.0esr-14.0-1-build2")
+(define %torbrowser-firefox-version "128.8.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
+          (commit "21fed48fc58df9e6c4d9f67b048fcae831df50c9")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
+      "1gs2b9bak7rglpbswkm47jwj3yd76361xblvyxjfsbji9igjj7za"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "dd30508387040bf0a1217a1eb9edb80ac21926f2")))
+          (commit "100908b702f92bc001b69cdd70f96a6e63134516")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "0bn495ppxwjrprwq22g2nv45mbb0scp1xpy6f2g4535s7dcs16a2"))))
+      "0shlxk55rj9lfw3mrax84zsalrpsbrjc85287ah90cys2lw6d1dx"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "073yrs2jsxgjvcqvqa8wdjrnxd7zgm121vw0cbrnkfacm71z9ssb"))))
+         "0fmh2j6nwi5q7kw3grkwm2lrgig1m4sk6ai70zjy4dbaa3xmc6h9"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "17a885c63mkvd0d3blis0fwhxizqj813rcaqrdpzg03yqmbfvn5d"))))
+         "0h5cgwrdavcr4nbg8girdxcdfqd9vfmsjwmjdbrz9zv63dparhwp"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 535efb3c9add7e32530aa0dced40b18b12b8ed95
-- 
2.48.1





Acknowledgement sent to André Batista <nandre@HIDDEN>:
New bug report received and forwarded. Copy sent to clement@HIDDEN, ian@HIDDEN, jonathan.brielmaier@HIDDEN, mhw@HIDDEN, guix-patches@HIDDEN. Full text available.
Report forwarded to clement@HIDDEN, ian@HIDDEN, jonathan.brielmaier@HIDDEN, mhw@HIDDEN, guix-patches@HIDDEN:
bug#76865; Package guix-patches. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sat, 8 Mar 2025 18:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.