gnu: mullvadbrowser: Update to 14.5.1 [security-fixes].

Fixes CVEs 2025-2817, 2025-4082, 2025-4083, 2025-4084, 2025-4087,
2025-4091 and 2025-4093.  See:
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/> for
details.

* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250428205842.
(%mullvadbrowser-version): Update to 14.5.1.
(%mullvadbrowser-firefox-version): Update to 128.10.0esr-14.5-1-build2.
(mullvadbrowser-translation-base): Update to
04331f4c8177a09f0785f8cf2604dcebde139be5.
(mullvadbrowser-translation-specific): Update to
88915281a11105bef03e638336b2852bd806ef78.

Change-Id: I8d71343b86b41318e7f4c7906cd4d2cf7c60e52e
Signed-off-by: Andreas Enge <andreas@enge.fr>
This commit is contained in:
André Batista 2025-05-01 11:55:30 -03:00 committed by Andreas Enge
parent 3993d1961a
commit c6b40dd9ce
No known key found for this signature in database
GPG key ID: F7D5C9BF765C61E3

View file

@ -834,17 +834,17 @@ attacks on the privacy of Tor users.")
;; We copy the official build id, which can be found there:
;; https://cdn.mullvad.net/browser/update_responses/update_1/release.
(define %mullvadbrowser-build-date "20250414190325")
(define %mullvadbrowser-build-date "20250428205842")
;; To find the last version, look at
;; https://mullvad.net/en/download/browser/linux.
(define %mullvadbrowser-version "14.5")
(define %mullvadbrowser-version "14.5.1")
;; To find the last Firefox version, browse
;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version>
;; There should be only one archive that starts with
;; "src-firefox-mullvad-browser-".
(define %mullvadbrowser-firefox-version "128.9.0esr-14.5-1-build4")
(define %mullvadbrowser-firefox-version "128.10.0esr-14.5-1-build2")
;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-base
@ -852,11 +852,11 @@ attacks on the privacy of Tor users.")
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
(commit "86442427facf038d5706644221de7e2fb733550b")))
(commit "04331f4c8177a09f0785f8cf2604dcebde139be5")))
(file-name "translation-base-browser")
(sha256
(base32
"0s3zyz3hx88accvs31pnia4pq218hc8wvcyrym0525624iyqbld1"))))
"1a8nv1w024lj6i0xcmvni69wv52bzm7clypjf3p4cjagcgmswzrp"))))
;; See tor-browser-build/projects/translation/config.
(define mullvadbrowser-translation-specific
@ -864,11 +864,11 @@ attacks on the privacy of Tor users.")
(method git-fetch)
(uri (git-reference
(url "https://gitlab.torproject.org/tpo/translation.git")
(commit "34b45a7417145b1f26784825ef6c873497cbda0a")))
(commit "88915281a11105bef03e638336b2852bd806ef78")))
(file-name "translation-mullvad-browser")
(sha256
(base32
"0x7w4g3ba3fgm9fq86hj5jaiap9b60hlk3pwapcc15d231j2x50a"))))
"10888n2mk68x6922d3vbqg3bb7sabz56fyykbmn2xg32600y9jkv"))))
(define mullvadbrowser-assets
;; This is a prebuilt Mullvad Browser from which we take the assets we need.
@ -884,7 +884,7 @@ attacks on the privacy of Tor users.")
version "/mullvad-browser-linux-x86_64-" version ".tar.xz"))
(sha256
(base32
"1saq1mvvc4n4f48cmck12mrg78w9vnml04xqzp3dgwnjfq6jrb5s"))))
"08f5p7lhq6j9h51q18vsxsz959njzmadmdg0i6q1zihx55s4y1qm"))))
(arguments
(list
#:install-plan
@ -927,7 +927,7 @@ Mullvad Browser.")
%mullvadbrowser-firefox-version ".tar.xz"))
(sha256
(base32
"02mpr1p0vxqkirvvxg7yjh6hgzfhdqgnfw87x27mvwqrwlf9j8pr"))))
"0wc4ly6a66d90rinixdqy69931ypxlvzh2rk72mxin7ff816xlvm"))))
(arguments
(substitute-keyword-arguments (package-arguments mullvadbrowser-base)
((#:phases phases)