~ruther/guix-local

c6b40dd9ceb7d12ddbbc3491403b884b6dafbc0c — AndrĂ© Batista 1 year, 1 month ago 3993d19
gnu: mullvadbrowser: Update to 14.5.1 [security-fixes].

Fixes CVEs 2025-2817, 2025-4082, 2025-4083, 2025-4084, 2025-4087,
2025-4091 and 2025-4093.  See:
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/> for
details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250428205842.
(%mullvadbrowser-version): Update to 14.5.1.
(%mullvadbrowser-firefox-version): Update to 128.10.0esr-14.5-1-build2.
(mullvadbrowser-translation-base): Update to
04331f4c8177a09f0785f8cf2604dcebde139be5.
(mullvadbrowser-translation-specific): Update to
88915281a11105bef03e638336b2852bd806ef78.

Change-Id: I8d71343b86b41318e7f4c7906cd4d2cf7c60e52e
Signed-off-by: Andreas Enge <andreas@enge.fr>
1 files changed, 9 insertions(+), 9 deletions(-)

M gnu/packages/tor-browsers.scm
M gnu/packages/tor-browsers.scm => gnu/packages/tor-browsers.scm +9 -9
@@ 834,17 834,17 @@ attacks on the privacy of Tor users.")

;; We copy the official build id, which can be found there:
;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
(define %mullvadbrowser-build-date "20250414190325")
(define %mullvadbrowser-build-date "20250428205842")

;; To find the last version, look at
;; https://mullvad.net/en/download/browser/linux.
(define %mullvadbrowser-version "14.5")
(define %mullvadbrowser-version "14.5.1")

;; To find the last Firefox version, browse
;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
;; There should be only one archive that starts with
;; "src-firefox-mullvad-browser-".
(define %mullvadbrowser-firefox-version "128.9.0esr-14.5-1-build4")
(define %mullvadbrowser-firefox-version "128.10.0esr-14.5-1-build2")

;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-base


@@ 852,11 852,11 @@ attacks on the privacy of Tor users.")
    (method git-fetch)
    (uri (git-reference
          (url "https://gitlab.torproject.org/tpo/translation.git")
          (commit "86442427facf038d5706644221de7e2fb733550b")))
          (commit "04331f4c8177a09f0785f8cf2604dcebde139be5")))
    (file-name "translation-base-browser")
    (sha256
     (base32
      "0s3zyz3hx88accvs31pnia4pq218hc8wvcyrym0525624iyqbld1"))))
      "1a8nv1w024lj6i0xcmvni69wv52bzm7clypjf3p4cjagcgmswzrp"))))

;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-specific


@@ 864,11 864,11 @@ attacks on the privacy of Tor users.")
    (method git-fetch)
    (uri (git-reference
          (url "https://gitlab.torproject.org/tpo/translation.git")
          (commit "34b45a7417145b1f26784825ef6c873497cbda0a")))
          (commit "88915281a11105bef03e638336b2852bd806ef78")))
    (file-name "translation-mullvad-browser")
    (sha256
     (base32
      "0x7w4g3ba3fgm9fq86hj5jaiap9b60hlk3pwapcc15d231j2x50a"))))
      "10888n2mk68x6922d3vbqg3bb7sabz56fyykbmn2xg32600y9jkv"))))

(define mullvadbrowser-assets
  ;; This is a prebuilt Mullvad Browser from which we take the assets we need.


@@ 884,7 884,7 @@ attacks on the privacy of Tor users.")
         version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
       (sha256
        (base32
         "1saq1mvvc4n4f48cmck12mrg78w9vnml04xqzp3dgwnjfq6jrb5s"))))
         "08f5p7lhq6j9h51q18vsxsz959njzmadmdg0i6q1zihx55s4y1qm"))))
    (arguments
     (list
      #:install-plan


@@ 927,7 927,7 @@ Mullvad Browser.")
         %mullvadbrowser-firefox-version ".tar.xz"))
       (sha256
        (base32
         "02mpr1p0vxqkirvvxg7yjh6hgzfhdqgnfw87x27mvwqrwlf9j8pr"))))
         "0wc4ly6a66d90rinixdqy69931ypxlvzh2rk72mxin7ff816xlvm"))))
    (arguments
     (substitute-keyword-arguments (package-arguments mullvadbrowser-base)
       ((#:phases phases)