[bug#77460] gnu: torbrowser: Update to 14.0.9 [security-fixes].
Commit Message
Fixes CVEs 2025-3028, 2025-3029, 2025-3030. See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-22/>
for details.
* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250331180000.
(%torbrowser-version): Update to 14.0.9.
(%torbrowser-firefox-version): Update to 128.9.0esr-14.0-2-build2.
(torbrowser-translation-base): Update to
d687be19490caa48a46a3e2193bda95d57cbb96d.
(torbrowser-translation-specific): Update to
95b60f2679611d39b035f2e45555c2c3d64d991f.
Change-Id: Ia943ebe3f84e06e1c9aa85012ab0a2bf184784ab
---
gnu/packages/tor-browsers.scm | 18 +++++++++---------
1 file changed, 9 insertions(+), 9 deletions(-)
base-commit: 5735c278e16517d9be5e26235fe68dea9bae3527
Comments
Hi André,
Pushed as 57afbf0bd8.
Thanks!
-- Ian
@@ -116,16 +116,16 @@ (define firefox-locales
;; We copy the official build id, which is defined at
;; tor-browser-build/rbm.conf (browser_release_date).
-(define %torbrowser-build-date "20250303093702")
+(define %torbrowser-build-date "20250331180000")
;; To find the last version, look at https://www.torproject.org/download/.
-(define %torbrowser-version "14.0.7")
+(define %torbrowser-version "14.0.9")
;; To find the last Firefox version, browse
;; https://archive.torproject.org/tor-package-archive/torbrowser/<%torbrowser-version>
;; There should be only one archive that starts with
;; "src-firefox-tor-browser-".
-(define %torbrowser-firefox-version "128.8.0esr-14.0-1-build2")
+(define %torbrowser-firefox-version "128.9.0esr-14.0-2-build2")
;; See tor-browser-build/rbm.conf for the list.
(define %torbrowser-locales (list "ar" "ca" "cs" "da" "de" "el" "es-ES" "fa" "fi" "fr"
@@ -139,11 +139,11 @@ (define torbrowser-translation-base
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
- (commit "21fed48fc58df9e6c4d9f67b048fcae831df50c9")))
+ (commit "d687be19490caa48a46a3e2193bda95d57cbb96d")))
(file-name "translation-base-browser")
(sha256
(base32
- "1gs2b9bak7rglpbswkm47jwj3yd76361xblvyxjfsbji9igjj7za"))))
+ "0hb4v0d898h7zxg9iwjvxjzh776wa65inysh4wdla51r0ib91w1b"))))
;; See tor-browser-build/projects/translation/config.
(define torbrowser-translation-specific
@@ -151,11 +151,11 @@ (define torbrowser-translation-specific
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
- (commit "100908b702f92bc001b69cdd70f96a6e63134516")))
+ (commit "95b60f2679611d39b035f2e45555c2c3d64d991f")))
(file-name "translation-tor-browser")
(sha256
(base32
- "0shlxk55rj9lfw3mrax84zsalrpsbrjc85287ah90cys2lw6d1dx"))))
+ "1lvdy586v0p84lilvx1z0x5y6ng1yy6aw12lg3xphfh0kr1ygi16"))))
(define torbrowser-assets
;; This is a prebuilt Torbrowser from which we take the assets we need.
@@ -171,7 +171,7 @@ (define torbrowser-assets
version "/tor-browser-linux-x86_64-" version ".tar.xz"))
(sha256
(base32
- "0fmh2j6nwi5q7kw3grkwm2lrgig1m4sk6ai70zjy4dbaa3xmc6h9"))))
+ "1s65fr8crhlmgx449686f0s5k28gjia9wdq6d5rhif3d3r696cx1"))))
(arguments
(list
#:install-plan
@@ -213,7 +213,7 @@ (define* (make-torbrowser #:key
".tar.xz"))
(sha256
(base32
- "0h5cgwrdavcr4nbg8girdxcdfqd9vfmsjwmjdbrz9zv63dparhwp"))))
+ "1jq6jaiwr2jk7ayylnaha7rqk9g14ryybld817zhcqpldr0xmvyr"))))
(build-system mozilla-build-system)
(inputs
(list lyrebird