From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id qsP2KSSKTGcJOQEA62LTzQ:P1 (envelope-from ) for ; Sun, 01 Dec 2024 16:09:08 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id qsP2KSSKTGcJOQEA62LTzQ (envelope-from ) for ; Sun, 01 Dec 2024 17:09:08 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=PYPA9vOo; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b=Iw+NdlHV; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1733069348; a=rsa-sha256; cv=none; b=AHRHdaRtoFBB+e/y0OMbido3e9StgeMnLgkq346SrE6DEZEaFycTD+8I0WY+UpMLRJ8TwM zNvcRUpObRoMkkuo8Wa6se6jzzOpUva6Jt9jmk2/s/wPrZPOxAIDjn2Ez2mMNXH1/BN178 SayP/JHxx+aEM5FwDP5yvky6efa6GIsCPjmbQboNSVZba+rk3DlgHlOSiiY/d7p8q+s17i uiLqhRW3UWn5TetVdNnXlgldAKQ1xf5x4/M5POd/KfE/xRwz50fGdpxMfI6kvG80+WYjFB +RY/IlEcTE+chOybKuwEQGqeSLAPsg76/ANIkPDGLR+o4cF5WGoO0YCCIpNaew== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=PYPA9vOo; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b=Iw+NdlHV; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1733069348; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=V1ql07imDjGY7jr56PsauII0bFrWLioUlVP+mp2U6w0=; b=SkMbZp7yD4fEii/jrUV1nWxFq4irg4ycSIzQhKrmdyCnfeBu2jWoCtavLrxT3IqXypkOTf 2+3eeQVf6XppSqA64qKkE4gZuBrWXmwzD1+WINuo0vWsPg2KHb3yVxplC8MGHOG/kJhnBI vYY168afOmIhL+JNQmkFgrWiFwsQPBK983sn5N9Rdfa+uzlc9ldjg3ManuTtQk5eeuuK0C UNhmHsaD9Obv9nvWB5vVmfH+qBsvSQl6jVnRJZ7W+9uu9o08quMWk4Ey+wyIJGVjjCLedo SG83UmINrb+YYqhCr4ksiPgIOrHLDs4QTVZd334N2AIl5oLk2pfaMMyZH0gkXA== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4C0605F053 for ; Sun, 01 Dec 2024 17:09:08 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tHmVL-0004ON-Sl; Sun, 01 Dec 2024 11:09:03 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tHmVK-0004O4-SG for guix-patches@gnu.org; Sun, 01 Dec 2024 11:09:02 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tHmVK-00009j-Jl for guix-patches@gnu.org; Sun, 01 Dec 2024 11:09:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=V1ql07imDjGY7jr56PsauII0bFrWLioUlVP+mp2U6w0=; b=PYPA9vOoKNly6OxJRYk9T3wdJhJ4KKAizJtJVBdgTpBdE72v8GI2yV4ep1WvjxUTJx+5CvhnCvN5Rw0fM5GKq0y6ory3iuIxbj67jPZaryBwjR5XZJFxty6o1FEJJJO7ARJduHvO1/9yNmPrTde0pfDBOwhMJPOcV7Tv92jbKCuuvP97o4n07GUDnze39ALwhRjMHe48ornjMblommEAK/4fFBw4vOd8H+EU1RMpustdNo5vHuvw3/Y7KSFzBUpWBtmnXUXKqIuS3CJlKL5ymvHU9sneRN1/NKjimaMdboFz2kli6XCloMrkS9moSADbasQdS40qj3Dq0PHd6X1ZnQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1tHmVK-0001VA-9w; Sun, 01 Dec 2024 11:09:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#73998] [PATCH v2 2/2] gnu: mullvadbrowser: Update to 14.0.3 [security fixes]. Resent-From: =?UTF-8?Q?Andr=C3=A9?= Batista Original-Sender: "Debbugs-submit" Resent-CC: jonathan.brielmaier@web.de, mhw@netris.org, guix-patches@gnu.org Resent-Date: Sun, 01 Dec 2024 16:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 73998 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 73998@debbugs.gnu.org Cc: =?UTF-8?Q?Andr=C3=A9?= Batista , jonathan.brielmaier@web.de, mhw@netris.org X-Debbugs-Original-Xcc: jonathan.brielmaier@web.de, mhw@netris.org Received: via spool by 73998-submit@debbugs.gnu.org id=B73998.17330693335742 (code B ref 73998); Sun, 01 Dec 2024 16:09:02 +0000 Received: (at 73998) by debbugs.gnu.org; 1 Dec 2024 16:08:53 +0000 Received: from localhost ([127.0.0.1]:52761 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tHmVB-0001UX-2T for submit@debbugs.gnu.org; Sun, 01 Dec 2024 11:08:53 -0500 Received: from mx1.riseup.net ([198.252.153.129]:52548) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tHmV9-0001UE-5H for 73998@debbugs.gnu.org; Sun, 01 Dec 2024 11:08:52 -0500 Received: from fews02-sea.riseup.net (fews02-sea-pn.riseup.net [10.0.1.112]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx1.riseup.net (Postfix) with ESMTPS id 4Y1X025mLwzDqqn for <73998@debbugs.gnu.org>; Sun, 1 Dec 2024 16:08:34 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1733069325; bh=awuuYtbfO/azCDDVuczVe1Cysw56ZOgl+psB/GNyJrI=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=Iw+NdlHVWaANqOtQmojTmuHM6rUcFIESiD2wME7KBW6LWLEKCW3CL4AhEx69QRYmE u6/MzabqlqRMjfO04qUGiv7pW59KEF6ehyaAEXICSLR8np9EibRmedqZFTYWP1/xBq OR8OuYNjHkHXAuVI8UA/7ES+TPuXT+F+7Fc2G9o8= X-Riseup-User-ID: F0FF852F6F082B9B00A5CB33A8E17513B1BCB21E5C5D30210503D9EBBD71440A Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews02-sea.riseup.net (Postfix) with ESMTPSA id 4Y1X014xwQzFvrs; Sun, 1 Dec 2024 16:08:33 +0000 (UTC) From: =?UTF-8?Q?Andr=C3=A9?= Batista Date: Sun, 1 Dec 2024 13:08:19 -0300 Message-ID: <20241201160819.1852-1-nandre@riseup.net> In-Reply-To: <20241201160554.1800-1-nandre@riseup.net> References: <20241201160554.1800-1-nandre@riseup.net> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: 4C0605F053 X-Migadu-Scanner: mx13.migadu.com X-Migadu-Spam-Score: -7.18 X-Spam-Score: -7.18 X-TUID: T5Cbz7YXluf/ Fixes CVE 2024-9680, 2024-10458, 2024-10459, 2024-10460, 2024-10461, 2024-10462, 2024-10463, 2024-10464, 2024-10465, 2024-10466, 2024-10467, 2024-11691, 2024-11692, 2024-11693, 2024-11694, 2024-11695, 2024-11696, 2024-11697, 2024-11698 and 2024-11699. See the Mozilla Foundation Security Advisories , and for details. * gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to 20241125154204. (%mullvadbrowser-version): Update to 14.0.3. (%mullvadbrowser-firefox-version): Update to 128.5.0esr-14.0-1-build2. (mullvadbrowser-translation-base): Update to caa431bbea1a76d7ad61eeda94086a1513762605. (mullvadbrowser-translation-specific): Update to 2f7d98b46ce480cdb4d7e9ddab912650c8673d6c. Change-Id: Ia5d445e387351b3d5d08ecb14c2f31bf4cc81396 --- gnu/packages/tor-browsers.scm | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm index 3a23f8ab65..58a147f39b 100644 --- a/gnu/packages/tor-browsers.scm +++ b/gnu/packages/tor-browsers.scm @@ -817,17 +817,17 @@ (define %mullvadbrowser-locales (list "ar" "da" "de" "es-ES" "fa" "fi" "fr" "it" ;; We copy the official build id, which can be found there: ;; https://cdn.mullvad.net/browser/update_responses/update_1/release. -(define %mullvadbrowser-build-date "20240930230510") +(define %mullvadbrowser-build-date "20241125154204") ;; To find the last version, look at ;; https://mullvad.net/en/download/browser/linux. -(define %mullvadbrowser-version "13.5.6") +(define %mullvadbrowser-version "14.0.3") ;; To find the last Firefox version, browse ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version> ;; There should be only one archive that starts with ;; "src-firefox-mullvad-browser-". -(define %mullvadbrowser-firefox-version "115.16.0esr-13.5-1-build2") +(define %mullvadbrowser-firefox-version "128.5.0esr-14.0-1-build2") ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-base @@ -835,11 +835,11 @@ (define mullvadbrowser-translation-base (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "a142f78af87f994913faa15fb4b0f34f0ce1a22b"))) + (commit "caa431bbea1a76d7ad61eeda94086a1513762605"))) (file-name "translation-base-browser") (sha256 (base32 - "15ahsyji6fk236sb28vqpi7ai70r3qblfypmc7r781zq7nw8f9bs")))) + "0zdkcykzh8m1rv6valx0mk6yvh2q4jrj2qxk0frh7nwxwc509b5c")))) ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-specific @@ -847,11 +847,11 @@ (define mullvadbrowser-translation-specific (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "78212a3da2439e436ac5f73d8e3eb908145c3ece"))) + (commit "2f7d98b46ce480cdb4d7e9ddab912650c8673d6c"))) (file-name "translation-mullvad-browser") (sha256 (base32 - "00qmmfz7lz9fw7id7bj89byd4zd39nc4f2plf0v640yzl8fdwi72")))) + "08anwb45rxzsdcxwzjflqb1d0f78pi4fsgdvsdlc4fmp8kx10nsd")))) (define mullvadbrowser-assets ;; This is a prebuilt Mullvad Browser from which we take the assets we need. @@ -867,7 +867,7 @@ (define mullvadbrowser-assets version "/mullvad-browser-linux-x86_64-" version ".tar.xz")) (sha256 (base32 - "0q55mk9zzzs7g2cng107gm16g74lx1qf42gf5ayh4x7caxc8db01")))) + "0jh35vsnyqjg6hhwdlw11pq7i1awr6fy8chgr2w0wnrzm91vvzia")))) (arguments (list #:install-plan @@ -910,7 +910,7 @@ (define-public mullvadbrowser %mullvadbrowser-firefox-version ".tar.xz")) (sha256 (base32 - "1mkssnr7vx4la4r31dy6fbwvj1h9gxzywwxa6z4310nr17vr3sxj")))) + "01mm8kxza5rfl4f78xb8n9x7y0p6mm205pxhqrvds0yyj3jvclsb")))) (arguments (substitute-keyword-arguments (package-arguments mullvadbrowser-base) ((#:phases phases) -- 2.46.0