#76865 [PATCH] gnu: torbrowser: Update to 14.0.7 [security-fixes].

Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

From: André Batista <nandre@riseup.net>

To: guix-patches@gnu.org

Cc: André Batista <nandre@riseup.net>

Subject: [PATCH] gnu: torbrowser: Update to 14.0.7 [security-fixes].

Date: Sat, 8 Mar 2025 10:10:17 -0300

Fixes CVEs 2024-43097, 2025-1930, 2025-1931, 2025-1932, 2025-1933,
2025-1934, 2025-1935, 2025-1936, 2025-1937, 2025-1938 and 2025-1939.
See <https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/>
for details.

* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250303093702.
(%torbrowser-version): Update to 14.0.7.
(%torbrowser-firefox-version): Update to 128.8.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
21fed48fc58df9e6c4d9f67b048fcae831df50c9.
(torbrowser-translation-specific): Update to
100908b702f92bc001b69cdd70f96a6e63134516.

Change-Id: Iccdba49d22dcc9877e874fe2f58169abfe981cd1
---
 gnu/packages/tor-browsers.scm | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm
index b1bba1d26e..a7ab98ca18 100644
--- a/gnu/packages/tor-browsers.scm
+++ b/gnu/packages/tor-browsers.scm
@@ -92,7 +92,7 @@ (define-module (gnu packages tor-browsers)
 
 ;; See browser/locales/l10n-changesets.json for the commit.
 (define firefox-locales
-  (let ((commit "f75c1e6a305e68161037337767ece88e9de940b9")
+  (let ((commit "fcd0300e8478d1ec4d1c097a073ddb8e1e0351e3")
         (revision "0"))
     (package
       (name "firefox-locales")
@@ -106,7 +106,7 @@ (define firefox-locales
           (file-name (git-file-name name version))
           (sha256
            (base32
-            "0ybi3n9mw9wnbi8dv01dllpvcdfwjmyn4q6njzhn8vg7jkmpha2s"))))
+            "1pzw65852ix6a6qb3wwhg5vrkz8337cs6lznk2vj0md5cvf2rrc4"))))
       (build-system copy-build-system)
       (home-page "https://github.com/mozilla-l10n/firefox-l10n")
       (synopsis "Firefox Locales")
@@ -116,16 +116,16 @@ (define firefox-locales
 
 ;; We copy the official build id, which is defined at
 ;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250203100000")
+(define %torbrowser-build-date "20250303093702")
 
 ;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.5")
+(define %torbrowser-version "14.0.7")
 
 ;; To find the last Firefox version, browse
 ;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
 ;; There should be only one archive that starts with
 ;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.7.0esr-14.0-1-build2")
+(define %torbrowser-firefox-version "128.8.0esr-14.0-1-build2")
 
 ;; See tor-browser-build/rbm.conf for the list.
 (define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "93eddbd3888852c09e130d536fb3c9bd7e4e6f57")))
+          (commit "21fed48fc58df9e6c4d9f67b048fcae831df50c9")))
     (file-name "translation-base-browser")
     (sha256
      (base32
-      "1s0lys5kzdgd1vk8la4vd5kkfpb5kvaf2rhd0vgzq4fva7gflm94"))))
+      "1gs2b9bak7rglpbswkm47jwj3yd76361xblvyxjfsbji9igjj7za"))))
 
 ;; See tor-browser-build/projects/translation/config.
 (define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
     (method git-fetch)
     (uri (git-reference
           (url "https://gitlab.torproject.org/tpo/translation.git")
-          (commit "dd30508387040bf0a1217a1eb9edb80ac21926f2")))
+          (commit "100908b702f92bc001b69cdd70f96a6e63134516")))
     (file-name "translation-tor-browser")
     (sha256
      (base32
-      "0bn495ppxwjrprwq22g2nv45mbb0scp1xpy6f2g4535s7dcs16a2"))))
+      "0shlxk55rj9lfw3mrax84zsalrpsbrjc85287ah90cys2lw6d1dx"))))
 
 (define torbrowser-assets
   ;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
          version "/tor-browser-linux-x86_64-" version ".tar.xz"))
        (sha256
         (base32
-         "073yrs2jsxgjvcqvqa8wdjrnxd7zgm121vw0cbrnkfacm71z9ssb"))))
+         "0fmh2j6nwi5q7kw3grkwm2lrgig1m4sk6ai70zjy4dbaa3xmc6h9"))))
     (arguments
      (list
       #:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
          ".tar.xz"))
        (sha256
         (base32
-         "17a885c63mkvd0d3blis0fwhxizqj813rcaqrdpzg03yqmbfvn5d"))))
+         "0h5cgwrdavcr4nbg8girdxcdfqd9vfmsjwmjdbrz9zv63dparhwp"))))
     (build-system mozilla-build-system)
     (inputs
      (list lyrebird

base-commit: 535efb3c9add7e32530aa0dced40b18b12b8ed95
-- 
2.48.1

Message #8 received at 76865@debbugs.gnu.org (full text, mbox, reply):

From: Ian Eure <ian@retrospec.tv>

To: André Batista <nandre@riseup.net>

Cc: jonathan.brielmaier@web.de, mhw@netris.org, 76865@debbugs.gnu.org, clement@lassieur.org

Subject: Re: [bug#76865] [PATCH] gnu: torbrowser: Update to 14.0.7 [security-fixes].

Date: Sat, 08 Mar 2025 10:32:27 -0800

Hi André,

Pushed as cd704d29ce.

Thanks,
 -- Ian

Send a report that this bug log contains spam.