GNU bug report logs - #78191
[PATCH] gnu: torbrowser: Update to 14.5.1 [security-fixes].

Previous Next

To reply to this bug, email your comments to 78191 AT debbugs.gnu.org.
There is no need to reopen the bug first.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: torbrowser: Update to 14.5.1 [security-fixes].
Date: Thu,  1 May 2025 11:55:12 -0300

Fixes CVEs 2025-2817, 2025-4082, 2025-4083, 2025-4084, 2025-4087,
2025-4091 and 2025-4093.  See:
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/> for
details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250428205842.
(%torbrowser-version): Update to 14.5.1.
(%torbrowser-firefox-version): Update to 128.10.0esr-14.5-1-build2.
(torbrowser-translation-base): Update to
04331f4c8177a09f0785f8cf2604dcebde139be5.
(torbrowser-translation-specific): Update to
5f4849f6d050316f9d7fe90018d1a83a3d191341.

Change-Id: I4192dc53ea2f67ca127c61cfc98b4a057954942a
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index f24c5e381bb..e88c967dc61 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250414190325")
+(define %torbrowser-build-date "20250428205842")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.5")
+(define %torbrowser-version "14.5.1")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.9.0esr-14.5-1-build4")
+(define %torbrowser-firefox-version "128.10.0esr-14.5-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "be" "bg" "ca" "cs" "da" "de" "el" "es-ES" "fa"
@@ -140,11 +140,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "86442427facf038d5706644221de7e2fb733550b")))
+          (commit "04331f4c8177a09f0785f8cf2604dcebde139be5")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0s3zyz3hx88accvs31pnia4pq218hc8wvcyrym0525624iyqbld1"))))
+      "1a8nv1w024lj6i0xcmvni69wv52bzm7clypjf3p4cjagcgmswzrp"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -152,11 +152,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "2c0b448503d52c3b512d1e7a55ccc78ac19db146")))
+          (commit "5f4849f6d050316f9d7fe90018d1a83a3d191341")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "08rdykhf98vcp5xflmkf15ax0zfn0nicdhp3zijjhfd0238rdjb9"))))
+      "0vr4qg5ywhb2x3h2v69bi2byba9wmlp8srzcl565h6cybff25p1l"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -172,7 +172,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "0v2nbw3glfp5597jpz190qi5rc6nd5j779jq1miv9c69ycs6cb61"))))
+         "1138110sx3mglmxzc8wkcxh3rsrpi9nl13mpsjjb9fzkz4f6qqjy"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "1wns37fr9kbs2p2is3gc21r0ff69awryxwl25isr1fc2glksdlv7"))))
+         "1h7d4s1xygwywdq8bfffv0yxnnrgwb1icfjsysjfdmm3pf16bslj"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 051e1c511a36b20c9ad5cdb955f3dc2e5df6981f
-- 
2.49.0

Message #10 received at 78191-done <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: André Batista <nandre <at> riseup.net>
Cc: 78191-done <at> debbugs.gnu.org
Subject: Re: [PATCH] gnu: torbrowser: Update to 14.5.1 [security-fixes].
Date: Mon, 5 May 2025 16:23:08 +0200

Pushed, thanks!

Andreas

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.