Skip to content

tor-browser-bundle-bin: 12.5.3 -> 12.5.4#255076

Merged
mweinelt merged 1 commit intoNixOS:masterfrom
panicgh:tbb
Sep 14, 2023
Merged

tor-browser-bundle-bin: 12.5.3 -> 12.5.4#255076
mweinelt merged 1 commit intoNixOS:masterfrom
panicgh:tbb

Conversation

@panicgh
Copy link
Contributor

@panicgh panicgh commented Sep 14, 2023 •
edited
Loading

Description of changes

Supposedly a patch update.

This release is a bit strange because there is no announcement/summary of changes (yet?) on https://blog.torproject.org nor the tor-announce mailing list. However,

  • the OpenPGP signature is correctly created by the same key as in previous releases,
  • the update is picked-up and applied by the automatic updater on standalone TBBs, and
  • mullvad-browser, which is based on TBB, has just been released too (including a short changelog).

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 23.11 Release Notes (or backporting 23.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Result of nixpkgs-review run on x86_64-linux 1

1 package built:
  • tor-browser-bundle-bin

@panicgh panicgh added 1.severity: security Issues which raise a security issue, or PRs that fix one backport release-23.05 11.by: package-maintainer This PR was created by a maintainer of all the package it changes. labels Sep 14, 2023
@ofborg ofborg bot requested review from felschr, hax404 and joachifm September 14, 2023 09:16
@ofborg ofborg bot added 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 1-10 This PR causes between 1 and 10 packages to rebuild on Linux. 10.rebuild-linux: 1 This PR causes 1 package to rebuild on Linux. labels Sep 14, 2023
@felschr
Copy link
Member

felschr commented Sep 14, 2023

Result of nixpkgs-review pr 255076 run on x86_64-linux 1

1 package built:
  • tor-browser-bundle-bin

felschr
felschr approved these changes Sep 14, 2023
View reviewed changes
Copy link
Member

@felschr felschr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Release announcement: https://blog.torproject.org/new-release-tor-browser-1254/

Builds & runs great on my machine.

@felschr felschr added 12.approvals: 1 This PR was reviewed and approved by one person. 12.approved-by: package-maintainer This PR was reviewed and approved by a maintainer listed in any of the changed packages. labels Sep 14, 2023
@panicgh
Copy link
Contributor Author

panicgh commented Sep 14, 2023

https://blog.torproject.org/new-release-tor-browser-1254/

This release updates Firefox and GeckoView to 102.15.1esr and fixes CVE-2023-4863: Heap buffer overflow in libwebp

@mweinelt mweinelt merged commit 5a8aae6 into NixOS:master Sep 14, 2023
@github-actions github-actions bot mentioned this pull request Sep 14, 2023
Merged
1 task
@github-actions
Copy link
Contributor

github-actions bot commented Sep 14, 2023

Successfully created backport PR for release-23.05:

@felschr felschr mentioned this pull request Sep 14, 2023
Closed
90 tasks
@panicgh panicgh deleted the tbb branch September 14, 2023 15:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@felschr felschr felschr approved these changes

@joachifm joachifm Awaiting requested review from joachifm

@hax404 hax404 Awaiting requested review from hax404

Assignees

No one assigned

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 1-10 This PR causes between 1 and 10 packages to rebuild on Linux. 10.rebuild-linux: 1 This PR causes 1 package to rebuild on Linux. 11.by: package-maintainer This PR was created by a maintainer of all the package it changes. 12.approvals: 1 This PR was reviewed and approved by one person. 12.approved-by: package-maintainer This PR was reviewed and approved by a maintainer listed in any of the changed packages.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@panicgh @felschr @mweinelt