GNU bug report logs - #78192
[PATCH] gnu: mullvadbrowser: Update to 14.5.1 [security-fixes]

Previous Next

To reply to this bug, email your comments to 78192 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: mullvadbrowser: Update to 14.5.1 [security-fixes]
Date: Thu,  1 May 2025 11:55:30 -0300

Fixes CVEs 2025-2817, 2025-4082, 2025-4083, 2025-4084, 2025-4087,
2025-4091 and 2025-4093.  See:
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/> for
details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250428205842.
(%mullvadbrowser-version): Update to 14.5.1.
(%mullvadbrowser-firefox-version): Update to 128.10.0esr-14.5-1-build2.
(mullvadbrowser-translation-base): Update to
04331f4c8177a09f0785f8cf2604dcebde139be5.
(mullvadbrowser-translation-specific): Update to
88915281a11105bef03e638336b2852bd806ef78.

Change-Id: I8d71343b86b41318e7f4c7906cd4d2cf7c60e52e
---
 gnu/packages/tor-browsers.scm | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index e88c967dc61..d59d123182f 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -834,17 +834,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it"
 
 ;; We copy the official build id, which can be found there:
 ;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
-(define %mullvadbrowser-build-date "20250414190325")
+(define %mullvadbrowser-build-date "20250428205842")
 
 ;; To find the last version, look at
 ;; https://mullvad.net/en/download/browser/linux.
-(define %mullvadbrowser-version "14.5")
+(define %mullvadbrowser-version "14.5.1")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-mullvad-browser-".
-(define %mullvadbrowser-firefox-version "128.9.0esr-14.5-1-build4")
+(define %mullvadbrowser-firefox-version "128.10.0esr-14.5-1-build2")
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-base
@@ -852,11 +852,11 @@ (define mullvadbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "86442427facf038d5706644221de7e2fb733550b")))
+          (commit "04331f4c8177a09f0785f8cf2604dcebde139be5")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "0s3zyz3hx88accvs31pnia4pq218hc8wvcyrym0525624iyqbld1"))))
+      "1a8nv1w024lj6i0xcmvni69wv52bzm7clypjf3p4cjagcgmswzrp"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define mullvadbrowser-translation-specific
@@ -864,11 +864,11 @@ (define mullvadbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "34b45a7417145b1f26784825ef6c873497cbda0a")))
+          (commit "88915281a11105bef03e638336b2852bd806ef78")))
     (file-name "translation-mullvad-browser")
     (sha256
      (base32
-      "0x7w4g3ba3fgm9fq86hj5jaiap9b60hlk3pwapcc15d231j2x50a"))))
+      "10888n2mk68x6922d3vbqg3bb7sabz56fyykbmn2xg32600y9jkv"))))
 
 (define mullvadbrowser-assets
   ;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@@ -884,7 +884,7 @@ (define mullvadbrowser-assets
          version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "1saq1mvvc4n4f48cmck12mrg78w9vnml04xqzp3dgwnjfq6jrb5s"))))
+         "08f5p7lhq6j9h51q18vsxsz959njzmadmdg0i6q1zihx55s4y1qm"))))
     (arguments
      (list
       #:install-plan
@@ -927,7 +927,7 @@ (define-public mullvadbrowser
          %mullvadbrowser-firefox-version ".tar.xz"))
        (sha256
         (base32
-         "02mpr1p0vxqkirvvxg7yjh6hgzfhdqgnfw87x27mvwqrwlf9j8pr"))))
+         "0wc4ly6a66d90rinixdqy69931ypxlvzh2rk72mxin7ff816xlvm"))))
     (arguments
      (substitute-keyword-arguments (package-arguments mullvadbrowser-base)
        ((#:phases phases)
-- 
2.49.0

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.