GNU bug report logs - #78191
[PATCH] gnu: torbrowser: Update to 14.5.1 [security-fixes].

Previous Next

To reply to this bug, email your comments to 78191 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: torbrowser: Update to 14.5.1 [security-fixes].
Date: Thu,  1 May 2025 11:55:12 -0300

Fixes CVEs 2025-2817, 2025-4082, 2025-4083, 2025-4084, 2025-4087,
2025-4091 and 2025-4093.  See:
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/> for
details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250428205842.
(%torbrowser-version): Update to 14.5.1.
(%torbrowser-firefox-version): Update to 128.10.0esr-14.5-1-build2.
(torbrowser-translation-base): Update to
04331f4c8177a09f0785f8cf2604dcebde139be5.
(torbrowser-translation-specific): Update to
5f4849f6d050316f9d7fe90018d1a83a3d191341.

Change-Id: I4192dc53ea2f67ca127c61cfc98b4a057954942a
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index f24c5e381bb..e88c967dc61 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250414190325")
+(define %torbrowser-build-date "20250428205842")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.5")
+(define %torbrowser-version "14.5.1")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.9.0esr-14.5-1-build4")
+(define %torbrowser-firefox-version "128.10.0esr-14.5-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "be" "bg" "ca" "cs" "da" "de" "el" "es-ES" "fa"
@@ -140,11 +140,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "86442427facf038d5706644221de7e2fb733550b")))
+          (commit "04331f4c8177a09f0785f8cf2604dcebde139be5")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0s3zyz3hx88accvs31pnia4pq218hc8wvcyrym0525624iyqbld1"))))
+      "1a8nv1w024lj6i0xcmvni69wv52bzm7clypjf3p4cjagcgmswzrp"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -152,11 +152,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "2c0b448503d52c3b512d1e7a55ccc78ac19db146")))
+          (commit "5f4849f6d050316f9d7fe90018d1a83a3d191341")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "08rdykhf98vcp5xflmkf15ax0zfn0nicdhp3zijjhfd0238rdjb9"))))
+      "0vr4qg5ywhb2x3h2v69bi2byba9wmlp8srzcl565h6cybff25p1l"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -172,7 +172,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "0v2nbw3glfp5597jpz190qi5rc6nd5j779jq1miv9c69ycs6cb61"))))
+         "1138110sx3mglmxzc8wkcxh3rsrpi9nl13mpsjjb9fzkz4f6qqjy"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "1wns37fr9kbs2p2is3gc21r0ff69awryxwl25isr1fc2glksdlv7"))))
+         "1h7d4s1xygwywdq8bfffv0yxnnrgwb1icfjsysjfdmm3pf16bslj"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 051e1c511a36b20c9ad5cdb955f3dc2e5df6981f
-- 
2.49.0

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.