From 465d9c70770c773655eb1f2223b89f26a6d07246 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9=20Batista?= Date: Fri, 27 Jun 2025 12:00:04 -0300 Subject: [PATCH] gnu: mullvadbrowser: Update to 14.5.4 [security-fixes]. Fixes CVEs 2025-6424, 2025-6425, 2025-6426, 2025-6429, 2025-6430. See for details. * gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to 20250623181100. (%mullvadbrowser-version): Update to 14.5.4. (%mullvadbrowser-firefox-version): Update to 128.12.0esr-14.5-1-build1. (mullvadbrowser-translation-base): Update to 9f6043e1a5. (mullvadbrowser-translation-specific): Update to bf09d9c070. Change Id: Idc3330dc457c4b5dc32eea90c6c7798998303f34 Signed-off-by: Hilton Chain --- gnu/packages/tor-browsers.scm | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm index bfe3967275a89ca22b110610cb1d6edcc69f0e15..c3826c703797970a403852ac86e6852a6a647359 100644 --- a/gnu/packages/tor-browsers.scm +++ b/gnu/packages/tor-browsers.scm @@ -836,17 +836,17 @@ attacks on the privacy of Tor users.") ;; We copy the official build id, which can be found there: ;; https://cdn.mullvad.net/browser/update_responses/update_1/release. -(define %mullvadbrowser-build-date "20250526202532") +(define %mullvadbrowser-build-date "20250623181100") ;; To find the last version, look at ;; https://mullvad.net/en/download/browser/linux. -(define %mullvadbrowser-version "14.5.3") +(define %mullvadbrowser-version "14.5.4") ;; To find the last Firefox version, browse ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version> ;; There should be only one archive that starts with ;; "src-firefox-mullvad-browser-". -(define %mullvadbrowser-firefox-version "128.11.0esr-14.5-1-build3") +(define %mullvadbrowser-firefox-version "128.12.0esr-14.5-1-build1") ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-base @@ -854,11 +854,11 @@ attacks on the privacy of Tor users.") (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "90dbac96420394aa35ce29385814742ac4942b26"))) + (commit "9f6043e1a51d04f9f6f00ade10e410691fe41f66"))) (file-name "translation-base-browser") (sha256 (base32 - "00i9q2qsdnl4azw1wxlgjwgha2c1z0k4n7f00cl2gl9zgffc095s")))) + "0hg3pihvdk91kmrg5f9173j5m28jw9bzi7pr1sg3711llp8ybzp5")))) ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-specific @@ -866,11 +866,11 @@ attacks on the privacy of Tor users.") (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "111ba9020215431c58d6382c08c57557d6ca50ba"))) + (commit "bf09d9c070f72ad3aee24c54cb154bab2570247b"))) (file-name "translation-mullvad-browser") (sha256 (base32 - "1lf4b0hwda9xjiqmspw0551082mmx5gz8gc1aw7h810z3whcizqf")))) + "1jbq2jb6rcbrzhgv1c19clr8z8fm63k4kwq4g94b619fynxz5jqm")))) (define mullvadbrowser-assets ;; This is a prebuilt Mullvad Browser from which we take the assets we need. @@ -886,7 +886,7 @@ attacks on the privacy of Tor users.") version "/mullvad-browser-linux-x86_64-" version ".tar.xz")) (sha256 (base32 - "0k90ghxarjpdsxdz7rh22d3zxgp97c8jqz70n4capxrh90p3jkav")))) + "182xpn6ln1cms4d7sml33shqpz47zh0sg5gbynw127w9c7xir48c")))) (arguments (list #:install-plan @@ -929,7 +929,7 @@ Mullvad Browser.") %mullvadbrowser-firefox-version ".tar.xz")) (sha256 (base32 - "029frd9bgzy4zmylgv8pz4w5zxliwf1vxyljvx4fmvslfa61ni1x")))) + "1wv5s5x907aw15nhm4w0x2wriyylrzjgw103f350mqwrhckmqhc0")))) (arguments (substitute-keyword-arguments (package-arguments mullvadbrowser-base) ((#:phases phases)