1
Fork 0
mirror of https://https.git.savannah.gnu.org/git/guix.git/ synced 2025-07-10 16:50:43 +02:00

gnu: mullvadbrowser: Update to 14.5.3 [security-fixes].

Fixes CVEs 2025-4918, 2025-4919, 2025-5263, 2025-5264, 2025-5265,
2025-5266, 2025-5267, 2025-5268 and 2025-5269.

<https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/> and
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/>
for details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250526202532.
(%mullvadbrowser-version): Update to 14.5.3.
(%mullvadbrowser-firefox-version): Update to 128.11.0esr-14.5-1-build3.
(mullvadbrowser-translation-base): Update to 90dbac9642.
(mullvadbrowser-translation-specific): Update to 111ba90202.

Change Id: Ibfab3560f7106db1293b7ab928dd5af444ceb035

Signed-off-by: Hilton Chain <hako@ultrarare.space>
This commit is contained in:
André Batista 2025-05-27 14:35:42 -03:00 committed by Hilton Chain
parent 016a8a71eb
commit 01efda56ea
No known key found for this signature in database
GPG key ID: ACC66D09CA528292

View file

@ -836,17 +836,17 @@ attacks on the privacy of Tor users.")
;; We copy the official build id, which can be found there:
;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
(define %mullvadbrowser-build-date "20250428205842")
(define %mullvadbrowser-build-date "20250526202532")
;; To find the last version, look at
;; https://mullvad.net/en/download/browser/linux.
(define %mullvadbrowser-version "14.5.1")
(define %mullvadbrowser-version "14.5.3")
;; To find the last Firefox version, browse
;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
;; There should be only one archive that starts with
;; "src-firefox-mullvad-browser-".
(define %mullvadbrowser-firefox-version "128.10.0esr-14.5-1-build2")
(define %mullvadbrowser-firefox-version "128.11.0esr-14.5-1-build3")
;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-base
@ -854,11 +854,11 @@ attacks on the privacy of Tor users.")
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
(commit "04331f4c8177a09f0785f8cf2604dcebde139be5")))
(commit "90dbac96420394aa35ce29385814742ac4942b26")))
(file-name "translation-base-browser")
(sha256
(base32
"1a8nv1w024lj6i0xcmvni69wv52bzm7clypjf3p4cjagcgmswzrp"))))
"00i9q2qsdnl4azw1wxlgjwgha2c1z0k4n7f00cl2gl9zgffc095s"))))
;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-specific
@ -866,11 +866,11 @@ attacks on the privacy of Tor users.")
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
(commit "88915281a11105bef03e638336b2852bd806ef78")))
(commit "111ba9020215431c58d6382c08c57557d6ca50ba")))
(file-name "translation-mullvad-browser")
(sha256
(base32
"10888n2mk68x6922d3vbqg3bb7sabz56fyykbmn2xg32600y9jkv"))))
"1lf4b0hwda9xjiqmspw0551082mmx5gz8gc1aw7h810z3whcizqf"))))
(define mullvadbrowser-assets
;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@ -886,7 +886,7 @@ attacks on the privacy of Tor users.")
version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
(sha256
(base32
"08f5p7lhq6j9h51q18vsxsz959njzmadmdg0i6q1zihx55s4y1qm"))))
"0k90ghxarjpdsxdz7rh22d3zxgp97c8jqz70n4capxrh90p3jkav"))))
(arguments
(list
#:install-plan
@ -929,7 +929,7 @@ Mullvad Browser.")
%mullvadbrowser-firefox-version ".tar.xz"))
(sha256
(base32
"0wc4ly6a66d90rinixdqy69931ypxlvzh2rk72mxin7ff816xlvm"))))
"029frd9bgzy4zmylgv8pz4w5zxliwf1vxyljvx4fmvslfa61ni1x"))))
(arguments
(substitute-keyword-arguments (package-arguments mullvadbrowser-base)
((#:phases phases)