From 084d94289c6399174689f725853a54b2bce7a652 Mon Sep 17 00:00:00 2001 From: André Batista Date: Sat, 5 Oct 2024 00:08:56 -0300 Subject: gnu: mullvadbrowser: Update to 13.5.6 [security fixes]. Fixes CVEs 2024-9392, 2024-9393, 2024-9394 and 2024-9401. See the Mozilla Foundation Security Advisory for details. * gnu/packages/tor-browsers.scm (%mullvadbrowser-build-date): Update to 20240930230510. (%mullvadbrowser-version): Update to 13.5.6. (%mullvadbrowser-firefox-version): Update to 115.16.0esr-13.5-1-build2. (mullvadbrowser-translation-base): Update to a142f78af87f994913faa15fb4b0f34f0ce1a22b. (mullvadbrowser-translation-specific): Update to 78212a3da2439e436ac5f73d8e3eb908145c3ece. Change-Id: Id65315c9aa829815e00dcfe74098680654592f20 Signed-off-by: Sharlatan Hellseher --- gnu/packages/tor-browsers.scm | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/gnu/packages/tor-browsers.scm b/gnu/packages/tor-browsers.scm index 7f601737b1..6bc1ef5328 100644 --- a/gnu/packages/tor-browsers.scm +++ b/gnu/packages/tor-browsers.scm @@ -824,17 +824,17 @@ attacks on the privacy of Tor users.") ;; We copy the official build id, which can be found there: ;; https://cdn.mullvad.net/browser/update_responses/update_1/release. -(define %mullvadbrowser-build-date "20240903073000") +(define %mullvadbrowser-build-date "20240930230510") ;; To find the last version, look at ;; https://mullvad.net/en/download/browser/linux. -(define %mullvadbrowser-version "13.5.3") +(define %mullvadbrowser-version "13.5.6") ;; To find the last Firefox version, browse ;; https://archive.torproject.org/tor-package-archive/mullvadbrowser/<%mullvadbrowser-version> ;; There should be only one archive that starts with ;; "src-firefox-mullvad-browser-". -(define %mullvadbrowser-firefox-version "115.15.0esr-13.5-1-build2") +(define %mullvadbrowser-firefox-version "115.16.0esr-13.5-1-build2") ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-base @@ -842,11 +842,11 @@ attacks on the privacy of Tor users.") (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "daed2afc487d1b20efc17feb153156524c6f714b"))) + (commit "a142f78af87f994913faa15fb4b0f34f0ce1a22b"))) (file-name "translation-base-browser") (sha256 (base32 - "0psmmgw9dnjwdhjbqkd69q5q7sdwyjcwagh93ffrjk0v7ybc79dq")))) + "15ahsyji6fk236sb28vqpi7ai70r3qblfypmc7r781zq7nw8f9bs")))) ;; See tor-browser-build/projects/translation/config. (define mullvadbrowser-translation-specific @@ -854,11 +854,11 @@ attacks on the privacy of Tor users.") (method git-fetch) (uri (git-reference (url "https://gitlab.torproject.org/tpo/translation.git") - (commit "bff8092bbe5ae93b2c162ade300d739b2cd9e92d"))) + (commit "78212a3da2439e436ac5f73d8e3eb908145c3ece"))) (file-name "translation-mullvad-browser") (sha256 (base32 - "0742ylhz80445a28ssp2hpshy0dvr12h2c1mcv5pjdipzcwhgil8")))) + "00qmmfz7lz9fw7id7bj89byd4zd39nc4f2plf0v640yzl8fdwi72")))) (define mullvadbrowser-assets ;; This is a prebuilt Mullvad Browser from which we take the assets we need. @@ -874,7 +874,7 @@ attacks on the privacy of Tor users.") version "/mullvad-browser-linux-x86_64-" version ".tar.xz")) (sha256 (base32 - "17sqin4fnvq96plarv0iv8r801i19gh7v7szg2vrmcynay8qx4mc")))) + "0q55mk9zzzs7g2cng107gm16g74lx1qf42gf5ayh4x7caxc8db01")))) (arguments (list #:install-plan @@ -917,7 +917,7 @@ Mullvad Browser.") %mullvadbrowser-firefox-version ".tar.xz")) (sha256 (base32 - "1c6jjw0x8bjz74q15a7vskrd0ji5ic19mzr9f2laivhznjy0r12c")))) + "1mkssnr7vx4la4r31dy6fbwvj1h9gxzywwxa6z4310nr17vr3sxj")))) (arguments (substitute-keyword-arguments (package-arguments mullvadbrowser-base) ((#:phases phases) -- cgit v1.2.3 f14eacc44370c'>etc: SELinux: Label guix-daemon executable in profile....* etc/guix-daemon.cil.in: Add file rule for "guix-daemon" in current-guix profile. Ricardo Wurmus 2022-01-26etc: Remove redundant SELinux permissions block....* etc/guix-daemon.cil.in (guix_daemon): Consolidate two blocks adding sock_file permissions on guix_daemon_conf_t. Marius Bakke 2022-01-24etc: Add more SELinux permissions for the daemon....* etc/guix-daemon.cil.in (guix_daemon): Permit write on guix_daemon_conf_t sock_file, necessary for garbage collection. Marius Bakke 2021-05-22etc: Add more SELinux permissions for the daemon....* etc/guix-daemon.cil.in (guix_daemon): Add more permissions, necessary for garbage collection. Marius Bakke 2020-12-10etc: Add more SELinux permissions for the daemon....* etc/guix-daemon.cil.in (guix_daemon): Permit file write, getattr, link and unlink for the guix_daemon_exec_t type. Marius Bakke 2020-11-27etc: Add more SELinux permissions for the daemon....* etc/guix-daemon.cil.in (guix_daemon): Permit more operations required for various build jobs. Marius Bakke 2020-11-26etc: Add more SELinux permissions for the daemon....* etc/guix-daemon.cil.in (guix_daemon): Permit file appending, setattr, read/write UDP sockets, access to tmpfs and hugetlbfs, and connecting to PostgreSQL. Marius Bakke 2020-11-25etc: Add more SELinux permissions for the daemon....This is needed for some package test suites. * etc/guix-daemon.cil.in (guix_daemon): Permit unix_dgram_socket operations. Marius Bakke 2020-11-15etc: Updates for the guix-daemon SELinux policy....* etc/guix-daemon.cil.in (guix_daemon): Specify more permissions for guix-daemon to account for daemon updates and newer SELinux. I can't promise that this is a complete list of everything that guix-daemon needs, but it's probably most of them. It can search for, install, upgrade, and remove packages, create virtual machines and containers, update itself, and so on. Signed-off-by: Marius Bakke <marius@gnu.org> Daniel Brooks 2019-09-08etc: Remove references to libexec/guix* from SELinux policy....* etc/guix-daemon.cil.in: Remove references to libexec/guix*. Ludovic Courtès 2018-02-07etc: Add SELinux policy for the daemon....* etc/guix-daemon.cil.in: New file. * Makefile.am (dist_selinux_policy_DATA): Define it. * configure.ac: Handle --with-selinux-policy-dir. * doc/guix.texi (SELinux Support): New section. Ricardo Wurmus