GNU bug report logs - #76866
[PATCH] gnu: mullvadbrowser: Update to 14.0.7 [security-fixes].

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: guix-patches; Reported by: André Batista <nandre@HIDDEN>; Keywords: patch; Done: Ian Eure <ian@HIDDEN>; Maintainer for guix-patches is guix-patches@HIDDEN.
bug closed, send any further explanations to 76866 <at> debbugs.gnu.org and André Batista <nandre@HIDDEN> Request was from Ian Eure <ian@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 76866 <at> debbugs.gnu.org:


Received: (at 76866) by debbugs.gnu.org; 8 Mar 2025 22:43:27 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 08 17:43:27 2025
Received: from localhost ([127.0.0.1]:57141 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tr2tD-0006iQ-7c
	for submit <at> debbugs.gnu.org; Sat, 08 Mar 2025 17:43:27 -0500
Received: from fhigh-a6-smtp.messagingengine.com ([103.168.172.157]:42007)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <ian@HIDDEN>) id 1tr2tA-0006i8-Fj
 for 76866 <at> debbugs.gnu.org; Sat, 08 Mar 2025 17:43:25 -0500
Received: from phl-compute-02.internal (phl-compute-02.phl.internal
 [10.202.2.42])
 by mailfhigh.phl.internal (Postfix) with ESMTP id DD090114011A;
 Sat,  8 Mar 2025 17:43:18 -0500 (EST)
Received: from phl-mailfrontend-02 ([10.202.2.163])
 by phl-compute-02.internal (MEProxy); Sat, 08 Mar 2025 17:43:18 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h=
 cc:cc:content-transfer-encoding:content-type:content-type:date
 :date:from:from:in-reply-to:message-id:mime-version:reply-to
 :subject:subject:to:to; s=fm3; t=1741473798; x=1741560198; bh=J9
 KD2eMak+nbVzLSQu3VgPAVD5EP3KNJ09Ftw1qqTbE=; b=WtCyTO7ENp7k/zQbHT
 0xf48IrWnma+amlKjbs5W47VvQPH5ZQrW0rHAlO5UX+3QvwBycJ62EbhUDPDr/0X
 Nie/spU+wTIZp8/lcxQhe0iAoFRpFo8xsHW1k3RAfvVuNWTe5zftdX0TB0WI79cF
 0aCWIARbP0mP2A2zD6wjFGxIRacPshrgpTfd39wjqymiE82MKUzNGF40CB4MqXJD
 piyY4BzOBKj+//jP741Gf+XOy30GUo8vHTaBg9jkDiKHXuTGj5gIp4K6nakBn6D5
 e6CEx3sRuOGoPfZLkDjfmVTooO4LsKBJ5YZmk5iQ+u0Jmp9skP+XNzNAtDVnQf7T
 DRoQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:content-type:date:date:feedback-id:feedback-id
 :from:from:in-reply-to:message-id:mime-version:reply-to:subject
 :subject:to:to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=
 fm1; t=1741473798; x=1741560198; bh=J9KD2eMak+nbVzLSQu3VgPAVD5EP
 3KNJ09Ftw1qqTbE=; b=0vd0axk464E2nmxQ2w+qfL+kOrFIButZXh6SWpud61To
 sxg+LVpTjtFToa57E7yvhblSs6ZAmobkTsB29a0V5vf/WLtnrNqwIwsnB2VxnP8e
 jj7r0R0zkayNyQHqbSiqnBVAhnA0FBhXm+O+KBGFdUgkyGrH7IsvWpNaqD8tc11B
 up1rcBDJwJckRvqFqcpsElnfc4VHD/2qleMTJlSChMWarzyLpZdYWAyAFV5hGt+W
 43+c1ed5U0Ze2AgKu0F2zwTTjlMvF2ycZWFIwNC+9NKcY1oodhzQESHDc9VuREsj
 yed7kIPB0yxMNtpQupHTzKGkuNloofdd9o4D/lPvAw==
X-ME-Sender: <xms:BcjMZwo2LI8OKKhYJB2R_as3UEzSLkjNcYOrXJ2IcuLn3TBeGfOWEw>
 <xme:BcjMZ2oajnMeYMgYOTMwFe9QGJsi2mxbbQm8hwukIoRgEq9UC7m9AKH4Pa0ElzxOS
 suLkUqQAeeFjdetOw>
X-ME-Received: <xmr:BcjMZ1PTVBzaampwf8wrUtSBDfvkXW2fH84O-5HYso6UbRw9e9VLvYE_U6rnz2gCxlVxT_BtMrvNSLLzBFbJ95Uc84izAGLno5Tf0Tg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdduudegjeekucetufdoteggodetrf
 dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv
 pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpih
 gvnhhtshculddquddttddmnecujfgurhephffvvefufgffkfggtgfgsehtqhertddtreej
 necuhfhrohhmpefkrghnucfguhhrvgcuoehirghnsehrvghtrhhoshhpvggtrdhtvheqne
 cuggftrfgrthhtvghrnheptdetkeffffefiefhueekvdeiueegieegffdthfelveelgfdt
 vdfhtdduheffuedvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh
 hfrhhomhepihgrnhesrhgvthhrohhsphgvtgdrthhvpdhnsggprhgtphhtthhopeehpdhm
 ohguvgepshhmthhpohhuthdprhgtphhtthhopehmhhifsehnvghtrhhishdrohhrghdprh
 gtphhtthhopehjohhnrghthhgrnhdrsghrihgvlhhmrghivghrseifvggsrdguvgdprhgt
 phhtthhopegtlhgvmhgvnhhtsehlrghsshhivghurhdrohhrghdprhgtphhtthhopeejie
 ekieeiseguvggssghughhsrdhgnhhurdhorhhgpdhrtghpthhtohepnhgrnhgurhgvsehr
 ihhsvghuphdrnhgvth
X-ME-Proxy: <xmx:BsjMZ374YVUc8MjX_Z9gjrQLIWLR31vrg8Keq9qacd0VmVA3UFGH9A>
 <xmx:BsjMZ_7FY_SH2Fczm_7Nws6lSNhYEUV_en1XP9SwvtOoX9I_FXV9jg>
 <xmx:BsjMZ3gdbP22p-S7f2Hpa-kbwLXCgacwNwcd4qyJ02mArbqB6D1vpA>
 <xmx:BsjMZ57tv7ZDZ7QAmYvC-gtNl-kNNTdkgAY9sHDJPwsHvb2Kt-yhiw>
 <xmx:BsjMZ1Rhztb7FVjOdi2TcQeJ1azJA4G1p1FJzB_i6TiHqDS3R9YRf5iI>
Feedback-ID: id9014242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat,
 8 Mar 2025 17:43:17 -0500 (EST)
From: Ian Eure <ian@HIDDEN>
To: =?utf-8?Q?Andr=C3=A9?= Batista <nandre@HIDDEN>
Subject: Re: [bug#76866] [PATCH] gnu: mullvadbrowser: Update to 14.0.7
 [security-fixes].
User-Agent: mu4e 1.12.9; emacs 29.4
Date: Sat, 08 Mar 2025 14:43:15 -0800
Message-ID: <87ikojm9do.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 76866
Cc: jonathan.brielmaier@HIDDEN, mhw@HIDDEN, clement@HIDDEN,
 76866 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi Andr=C3=A9,

Pushed as 016456866c.

Thanks,
  -- Ian




Information forwarded to guix-patches@HIDDEN:
bug#76866; Package guix-patches. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 8 Mar 2025 13:12:34 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 08 08:12:34 2025
Received: from localhost ([127.0.0.1]:53315 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tqtyj-0004gW-Es
	for submit <at> debbugs.gnu.org; Sat, 08 Mar 2025 08:12:33 -0500
Received: from lists.gnu.org ([2001:470:142::17]:56600)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <nandre@HIDDEN>) id 1tqtyf-0004gC-Hs
 for submit <at> debbugs.gnu.org; Sat, 08 Mar 2025 08:12:30 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tqtyY-0004tx-Co
 for guix-patches@HIDDEN; Sat, 08 Mar 2025 08:12:23 -0500
Received: from mx1.riseup.net ([198.252.153.129])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nandre@HIDDEN>) id 1tqtyV-0001Zw-AH
 for guix-patches@HIDDEN; Sat, 08 Mar 2025 08:12:21 -0500
Received: from fews02-sea.riseup.net (fews02-sea-pn.riseup.net [10.0.1.112])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by mx1.riseup.net (Postfix) with ESMTPS id 4Z93Ts3wRpzDqVC
 for <guix-patches@HIDDEN>; Sat,  8 Mar 2025 13:12:17 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1741439537; bh=BAwf690SBEExmv09LB/FbdxnO+p8WIHf/EUxc3Mw9fM=;
 h=From:To:Cc:Subject:Date:From;
 b=c/JnhJtr0bBtNjmWtwNJl4P2R5Twi4335jY4nDBz/5eVx46nFSjQosYczRUU0FhJK
 czSNgICOsylrfDPdfG+2PqH0QUWlP3rvBhCgxbxID4tPu8GhisWuk3IcHiNm1DQ13K
 cJQFoNi4f/dTmCcUrSgw5M8P7XrvWcj68L55RJLw=
X-Riseup-User-ID: 889204D6CAD7D1A4633A97515CDB9C34E387368AFD6B76FC3BCA6FC3CF3132AE
Received: from [127.0.0.1] (localhost [127.0.0.1])
 by fews02-sea.riseup.net (Postfix) with ESMTPSA id 4Z93Td2Hn1zFsxZ;
 Sat,  8 Mar 2025 13:12:05 +0000 (UTC)
From: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
To: guix-patches@HIDDEN
Subject: [PATCH] gnu: mullvadbrowser: Update to 14.0.7 [security-fixes].
Date: Sat,  8 Mar 2025 10:11:59 -0300
Message-ID: <20250308131159.7962-1-nandre@HIDDEN>
MIME-Version: 1.0
X-Debbugs-Cc: clement@HIDDEN, ian@HIDDEN,
 jonathan.brielmaier@HIDDEN, mhw@HIDDEN
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=198.252.153.129; envelope-from=nandre@HIDDEN;
 helo=mx1.riseup.net
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: submit
Cc: =?UTF-8?q?Andr=C3=A9=20Batista?= <nandre@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Fixes CVEs 2024-43097, 2025-1930, 2025-1931, 2025-1932, 2025-1933,
2025-1934, 2025-1935, 2025-1936, 2025-1937, 2025-1938 and 2025-1939.
See <https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/>
for details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250303093702.
(%mullvadbrowser-version): Update to 14.0.7.
(%mullvadbrowser-firefox-version): Update to 128.8.0esr-14.0-1-build2.
(mullvadbrowser-translation-base): Update to
21fed48fc58df9e6c4d9f67b048fcae831df50c9.
(mullvadbrowser-translation-specific): Update to
d279ce2add9a5bb3fc71f24b55679e3e0706f0eb.

Change-Id: Ia6645d75daaf9feba51215eb1ba6c6294a3a2cfd
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index a7ab98ca18..b9197c0892 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -818,17 +818,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it"
 
 ;; We copy the official build id, which can be found there:
 ;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
-(define %mullvadbrowser-build-date "20250203100000")
+(define %mullvadbrowser-build-date "20250303093702")
 
 ;; To find the last version, look at
 ;; https://mullvad.net/en/download/browser/linux.
-(define %mullvadbrowser-version "14.0.5")
+(define %mullvadbrowser-version "14.0.7")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-mullvad-browser-".
-(define %mullvadbrowser-firefox-version "128.7.0esr-14.0-1-build2")
+(define %mullvadbrowser-firefox-version "128.8.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-base
@@ -836,11 +836,11 @@ (define mullvadbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
+          (commit "21fed48fc58df9e6c4d9f67b048fcae831df50c9")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
+      "1gs2b9bak7rglpbswkm47jwj3yd76361xblvyxjfsbji9igjj7za"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-specific
@@ -848,11 +848,11 @@ (define mullvadbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "6a1ef41c664a5185e25ca2c4bbf5d7447bd888a7")))
+          (commit "d279ce2add9a5bb3fc71f24b55679e3e0706f0eb")))
     (file-name "translation-mullvad-browser")
     (sha256
      (base32
-      "0jgxgynyzcph82j3bjkw0qfwkakmz8529lmx7v1ggbh3fvn7wa4l"))))
+      "1bnclgln8ibxslnqs2lmmlww7q0qgar7lkhc69dkr1w1cpxjcrr9"))))
 
 (define mullvadbrowser-assets
   ;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@@ -868,7 +868,7 @@ (define mullvadbrowser-assets
          version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "0l544hl9kbashcx9qrih1qf1zz2cdny733ry1r1v13g85760ipyb"))))
+         "0z9wvhprn8w6lfi3vsd9qk8fdl6gxq9z07awx7r5vrk1813mj0ry"))))
     (arguments
      (list
       #:install-plan
@@ -911,7 +911,7 @@ (define-public mullvadbrowser
          %mullvadbrowser-firefox-version ".tar.xz"))
        (sha256
         (base32
-         "04val15xsfl118d18xpnhhy5cshlgkdpp58y0ja306glx453kcpl"))))
+         "0w6r13wli2z4hpww4gb8hy99grvmcffpp4nkn1jljcxk316jcrcy"))))
     (arguments
      (substitute-keyword-arguments (package-arguments mullvadbrowser-base)
        ((#:phases phases)

base-commit: 535efb3c9add7e32530aa0dced40b18b12b8ed95
-- 
2.48.1





Acknowledgement sent to André Batista <nandre@HIDDEN>:
New bug report received and forwarded. Copy sent to clement@HIDDEN, ian@HIDDEN, jonathan.brielmaier@HIDDEN, mhw@HIDDEN, guix-patches@HIDDEN. Full text available.
Report forwarded to clement@HIDDEN, ian@HIDDEN, jonathan.brielmaier@HIDDEN, mhw@HIDDEN, guix-patches@HIDDEN:
bug#76866; Package guix-patches. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sat, 8 Mar 2025 22:45:01 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.