Fixes still undisclosed security issues described at
<https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44199>.
* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250915185538.
(%mullvadbrowser-version): Update to 14.5.7.
(%mullvadbrowser-firefox-version): Update to 128.14.0esr-14.5-1-build5.
(mullvadbrowser-translation-base): Update to 0605fd89b5.
Change Id: Ib25ce00633fc43a5e47446ae7bdfd69aeae7baf3
Change-Id: I2e80e0b3a5d2f0c69cd8f73b78a81fa43940c3ec
Signed-off-by: Andreas Enge <andreas@enge.fr>
This reverts commit a7db92d9b3, this time with
the more careful command, to avoid a world rebuild:
grep -rl --exclude-dir=build --exclude-dir=patches --exclude=ld-wrapper.in \
--exclude=sitecustomize.py --exclude=guix-emacs.el maxim.cournoyer@gmail.com |
xargs sed -i 's/maxim.cournoyer@gmail.com/maxim@guixotic.coop/g'
Change-Id: I0871f5cf9ace79e34e78e24154d0da6ea95a3a91
The change was automated via:
git grep -l maxim.cournoyer@gmail.com |
xargs sed -i 's/maxim.cournoyer@gmail.com/maxim@guixotic.coop/g'
* .mailmap: New entry.
Change-Id: Iaa88b1e51c94159c49138fb43910badb990eb169
Fixes still undisclosed security issues described at
<https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44199>.
* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250915185538.
(%torbrowser-version): Update to 14.5.7.
(%torbrowser-firefox-version): Update to 128.14.0esr-14.5-1-build5.
(torbrowser-translation-base): Update to 0605fd89b5.
(torbrowser-translation-specific): Update to 0513af0592.
Change Id: Iddd399ae1420a5f9eebecef58d62491d75711fa5
Signed-off-by: Andreas Enge <andreas@enge.fr>
As of 4918534be1 we can build with guix default nss library.
* gnu/packages/tor-browsers.scm (make-torbrowser) [inputs]: Use nss
instead of nss-rapid.
Change-Id: I205447df98d57a91765a53032ca67c0e928c4c64
Signed-off-by: Hilton Chain <hako@ultrarare.space>
Upstream has removed support for building with system harfbuzz, graphite
and sqlite libraries. Clean up comments and input.
* gnu/packages/tor-browsers.scm: Remove sqlite module import.
(make-torbrowser)[inputs]: Remove sqlite and comments;
[arguments]<#:configure-flags>: Clean up commented out flags;
<#:phases>: Same.
Change-Id: Ib9c6f3081456e169d7ae1842032e08ca8b2ae2fd
Signed-off-by: Hilton Chain <hako@ultrarare.space>
Fixes MFSA-RESERVEs 2025-1979527, 2025-1979782, 2025-1977130 and 2025-2.
See <https://www.mozilla.org/en-US/security/advisories/mfsa2025-66/> for
details.
* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250818110000.
(%torbrowser-version): Update to 14.5.6.
(%torbrowser-firefox-version): Update to 128.14.0esr-14.5-1-build2.
(torbrowser-translation-base): Update to 9896e5765c.
(torbrowser-translation-specific): Update to a58fb6a60d.
Change Id: I186e3993e67402f390fd94c09d7666d49eedbd01
Signed-off-by: Hilton Chain <hako@ultrarare.space>
Follow up to commit 6ee9cd170b which added
torbrowsers-add-store-to-rdd-allowlist.patch and implicitly made
'build-sandbox-whitelist phase unnecessary.
Users are encouraged to use Guix Containers if they want to restrict
browsers' access to their file systems.
* gnu/packages/tor-browsers.scm (make-torbrowser) [arguments] <#:phases>
'build-sandbox-whitelist: Remove it;
'autoconfig: Remove step that adds the forementioned list to browser
default preferences.
* gnu/packages/patches/torbrowsers-add-store-to-rdd-allowlist.patch: Add
explanatory comment and refer to issues this patch addresses.
Change-Id: Icc0ea4c2470e8bc82e3a2bf57966b46fd47a7cf8
Signed-off-by: Hilton Chain <hako@ultrarare.space>
Upstream has removed support for building with system libogg, libvorbis
and libtheora. Clean up comments and commented out code related to them.
* gnu/packages/tor-browsers.scm (make-torbrowser)[inputs]: Clean up here;
[arguments] <#:configure-flags>: here;
<#:phases> 'remove-bundled-libraries: and here.
Change-Id: I945faa0bcf13ec1c35b81f9880384694fd63b410
Signed-off-by: Hilton Chain <hako@ultrarare.space>
Re-apply 8ee7a32782, which was reverted by
897f1f03e7.
With 'torbrowsers-add-store-to-rdd-allowlist.patch', codeberg issue #546
does not occur.
* gnu/packages/tor-browsers.scm (make-torbrowser)[inputs]: Add nss-rapid.
[arguments]<#:configure-flags>: Uncomment '--with-system-nss'.
<#:phases>: Adjust comment.
Change-Id: I34b619bc5573e8744df9085576ee4743adde7012
Without this patch, some extensions break when the browsers are built with
system nss and livestreams are broken on these browsers due to a default
deny sandboxing rule.
See commit ab24e2ebe5 and issues #546 on
codeberg and #77559 on debbugs.
* gnu/packages/tor-browsers.scm (make-torbrowser) [arguments] <#:phases>
'apply-guix-specific-patches: Add torbrowsers-add-store-to-rdd-allowlist.patch.
* gnu/packages/patches/torbrowsers-add-store-to-rdd-allowlist.patch: Add it.
* gnu/local.mk: Register it.
Change-Id: I4c9cb514131eae35db6149492e0ee1c4916bcfde
* gnu/packages/tor-browsers.scm (make-torbrowser) [arguments] <#:phases>
'setenv: Set environment variables corresponding to Clang (AR, NM, CC and CXX).
Change-Id: Ib67e2eb7669147a6a304769c9f36b4a90eb35b59
This reverts commit 8ee7a32782,
which caused mullvadbrowser (and also torbrowser if uBlock Origin
was installed) to hang at times, becoming unable to load webpages
for the rest of the session. See #546.
Change-Id: I98efc8831813b17882a837c45b9f05deeac2d1c2
Reviewed-by: Mark H Weaver <mhw@netris.org>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
* gnu/packages/tor-browsers.scm (make-torbrowser): Delete
testing/web-platform. This frees more than 800M of RAM during the
build. Removing it seems to be enough to allow build on some
machines.
Signed-off-by: Ian Eure <ian@retrospec.tv>
* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250414190325.
(%mullvadbrowser-version): Update to 14.5.
(%mullvadbrowser-firefox-version): Update to 128.9.0esr-14.5-1-build4.
(mullvadbrowser-translation-base): Update to
86442427facf038d5706644221de7e2fb733550b.
Change-Id: Ic12454eaafceda993339efae55984f86749cec75
Signed-off-by: Christopher Baines <mail@cbaines.net>
* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250414190325.
(%torbrowser-version): Update to 14.5.
(%torbrowser-firefox-version): Update to 128.9.0esr-14.5-1-build4.
(%torbrowser-locales): Add be, bg and pt-PT.
(torbrowser-translation-base): Update to
86442427facf038d5706644221de7e2fb733550b.
(torbrowser-translation-specific): Update to
2c0b448503d52c3b512d1e7a55ccc78ac19db146.
(torbrowser-assets)[arguments]<#:install-plan>: Remove
fontconfig/fonts.conf, as fonts.conf was moved to fonts directory.
(make-torbrowser)[native-inputs]: Update llvm, clang and lld to v18.
[arguments]<#:phases> 'copy-basebrowser-locales &
'copy-torbrowser-locales: Adjust to follow upstream changes.
'deploy-fonts: Adjust to new fonts.conf location.
Change-Id: I81768c1680d8a3200fb360f1e7a45d7d16aca91d
Signed-off-by: Christopher Baines <mail@cbaines.net>
Fixes CVEs 2025-3028, 2025-3029, 2025-3030. See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-22/>
for details.
* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250331180000.
(%mullvadbrowser-version): Update to 14.0.9.
(%mullvadbrowser-firefox-version): Update to 128.9.0esr-14.0-2-build2.
(mullvadbrowser-translation-base): Update to
d687be19490caa48a46a3e2193bda95d57cbb96d.
(mullvadbrowser-translation-specific): Update to
34b45a7417145b1f26784825ef6c873497cbda0a.
Change-Id: Ic12454eaafceda993339efae55984f86749cec75
Signed-off-by: Ian Eure <ian@retrospec.tv>
Fixes CVEs 2025-3028, 2025-3029, 2025-3030. See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-22/>
for details.
* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250331180000.
(%torbrowser-version): Update to 14.0.9.
(%torbrowser-firefox-version): Update to 128.9.0esr-14.0-2-build2.
(torbrowser-translation-base): Update to
d687be19490caa48a46a3e2193bda95d57cbb96d.
(torbrowser-translation-specific): Update to
95b60f2679611d39b035f2e45555c2c3d64d991f.
Change-Id: Ia943ebe3f84e06e1c9aa85012ab0a2bf184784ab
Signed-off-by: Ian Eure <ian@retrospec.tv>
Fixes CVEs 2024-11704, 2025-1009, 2025-1010, 2025-1011, 2025-1012,
2025-1013, 2025-1014, 2025-1016 and 2025-1017. See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/> for
details.
* gnu/packages/tor-browsers.scm (%torbrowser-build-date): Update to
20250203100000.
(%torbrowser-version): Update to 14.0.5.
(%torbrowser-firefox-version): Update to 128.7.0esr-14.0-1-build2.
(torbrowser-translation-base): Update to
93eddbd3888852c09e130d536fb3c9bd7e4e6f57.
(torbrowser-translation-specific): Update to
dd30508387040bf0a1217a1eb9edb80ac21926f2.
Change-Id: Iaf360be2be2c4dc5b5094d170e415ec7aaca282f
Signed-off-by: Ian Eure <ian@retrospec.tv>
Fixes CVEs 2024-11704, 2025-1009, 2025-1010, 2025-1011, 2025-1012,
2025-1013, 2025-1014, 2025-1016 and 2025-1017. See
<https://www.mozilla.org/en-US/security/advisories/mfsa2025-09/> for
details.
* gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to
20250203100000.
(%mullvadbrowser-version): Update to 14.0.5.
(%mullvadbrowser-firefox-version): Update to 128.7.0esr-14.0-1-build2.
(mullvadbrowser-translation-base): Update to
93eddbd3888852c09e130d536fb3c9bd7e4e6f57.
Change-Id: I3932142356fd3e44d9a3220953df8ae236b90537
Signed-off-by: Ian Eure <ian@retrospec.tv>
This reverts commit 981ac81dac, as both browsers
are now based on ESR 128.
* gnu/packages/tor-browsers.scm (make-torbrowser)[arguments]
<#:configure-flags>: Enable rust SIMD optimizations.
Change-Id: I8a5c6cf3295d2ed277734ae96a2aa8a9e6d2d0f3
Signed-off-by: Hilton Chain <hako@ultrarare.space>
