October 2014 - tbb-commits - lists.torproject.org

[tor-browser-bundle/master] Bump alpha channel to 4.0.
by mikeperry＠torproject.org 16 Oct '14

16 Oct '14

commit 19e9fa863dd3169716cbd37df5e803b2d9d5aec7 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Oct 15 21:16:57 2014 -0700 Bump alpha channel to 4.0. --- tools/update-responses/config.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 15843b6..b49ce1a 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -6,7 +6,7 @@ build_targets: … [View More]

1 0

[tor-browser-bundle/master] Bump NoScript version update changelog.
by gk＠torproject.org 15 Oct '14

15 Oct '14

commit a1c880c6cad43aac12f2ba49720a1185ae129000 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Oct 15 08:57:24 2014 +0000 Bump NoScript version update changelog. --- Bundle-Data/Docs/ChangeLog.txt | 6 ++++-- gitian/versions | 4 ++-- gitian/versions.nightly | 4 ++-- 3 files changed, 8 insertions(+), 6 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 40fc9f1..7d8470b 100644 --- a/Bundle-Data/Docs/… [View More]ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 4.0 -- Oct 14 2014 +Tor Browser 4.0 -- Oct 15 2014 * All Platforms * Update Firefox to 31.2.0esr * Update Torbutton to 1.7.0.1 @@ -11,7 +11,8 @@ Tor Browser 4.0 -- Oct 14 2014 * Update Tor Launcher to 0.2.7.0.1 * Translation updates only * Udate fteproxy to 0.2.19 - * Update NoScript to 2.6.9 + * Update NoScript to 2.6.9.1 + * Bug 13416: Defend against new SSLv3 attack (poodle). * Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads * Bug 13016: Hide CSS -moz-osx-font-smoothing values. * Bug 13356: Meek and other symlinks missing after complete update. @@ -25,6 +26,7 @@ Tor Browser 4.0 -- Oct 14 2014 * Bug 13186: Disable DOM Performance timers * Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage + Tor Browser 4.0-alpha-3 -- Sep 24 2014 * All Platforms * Update Tor to 0.2.5.8-rc diff --git a/gitian/versions b/gitian/versions index f0ae4d9..a24f492 100755 --- a/gitian/versions +++ b/gitian/versions @@ -53,7 +53,7 @@ GO_VER=1.3.3 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9-fx+sm+fn.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.1-fn+fx+sm.xpi HTTPSE_PACKAGE=https-everywhere-${HTTPSE_VER}.xpi TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz @@ -81,7 +81,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=7012268e33bbc13d27c9fe8836d53d50b0ce30cad15ab4de5f9b3c3d96b478b8 +NOSCRIPT_HASH=92bfa1f8a5673ffc82fe54db43c5f410c1cf403e38b82780f01eeeeae8233d0b HTTPSE_HASH=cd811b1d424ff24939249de1e2b745ba86cbd7e6804699a9460c631a0b3474fe MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 9dc6f3f..4ff8d99 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -54,7 +54,7 @@ GO_VER=1.3.3 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9-fx+sm+fn.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.1-fn+fx+sm.xpi HTTPSE_PACKAGE=https-everywhere-${HTTPSE_VER}.xpi TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz @@ -82,7 +82,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=7012268e33bbc13d27c9fe8836d53d50b0ce30cad15ab4de5f9b3c3d96b478b8 +NOSCRIPT_HASH=92bfa1f8a5673ffc82fe54db43c5f410c1cf403e38b82780f01eeeeae8233d0b HTTPSE_HASH=6feb4982d13f89656b61435b6b49e1996c61bc79e52d046d02312879376028e3 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c [View Less]

1 0

[tor-browser-bundle/master] The poodle hotfix.
by gk＠torproject.org 15 Oct '14

15 Oct '14

commit fd7e8eef09b813c445e31239bcb674de7a03d191 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Oct 15 08:41:38 2014 +0000 The poodle hotfix. See: https://www.imperialviolet.org/2014/10/14/poodle.html for further information. --- gitian/descriptors/linux/gitian-bundle.yml | 4 ++++ gitian/descriptors/mac/gitian-bundle.yml | 4 ++++ gitian/descriptors/windows/gitian-bundle.yml | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/gitian/… [View More]descriptors/linux/gitian-bundle.yml b/gitian/descriptors/linux/gitian-bundle.yml index 19233b6..3de0d49 100644 --- a/gitian/descriptors/linux/gitian-bundle.yml +++ b/gitian/descriptors/linux/gitian-bundle.yml @@ -146,6 +146,8 @@ script: | cp defaults/preferences/000-tor-browser.js ~/build/ # Set the locale of the bundle. echo "pref(\"general.useragent.locale\", \"en-US\");" >> defaults/preferences/000-tor-browser.js + # The poodle hotfix + echo "pref(\"security.tls.version.min\", 1);" >> defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults popd @@ -176,6 +178,8 @@ script: | cp ~/build/000-tor-browser.js defaults/preferences/ # Set the locale of the bundle. echo "pref(\"general.useragent.locale\", \"$LANG\");" >> defaults/preferences/000-tor-browser.js + # The poodle hotfix + echo "pref(\"security.tls.version.min\", 1);" >> defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults popd diff --git a/gitian/descriptors/mac/gitian-bundle.yml b/gitian/descriptors/mac/gitian-bundle.yml index 82b6595..9e78429 100644 --- a/gitian/descriptors/mac/gitian-bundle.yml +++ b/gitian/descriptors/mac/gitian-bundle.yml @@ -166,6 +166,8 @@ script: | cp defaults/preferences/000-tor-browser.js ~/build/ # Set the locale of the bundle. echo "pref(\"general.useragent.locale\", \"en-US\");" >> defaults/preferences/000-tor-browser.js + # The poodle hotfix + echo "pref(\"security.tls.version.min\", 1);" >> defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults popd @@ -221,6 +223,8 @@ script: | cp ~/build/000-tor-browser.js defaults/preferences/ # Set the locale of the bundle. echo "pref(\"general.useragent.locale\", \"$LANG\");" >> defaults/preferences/000-tor-browser.js + # The poodle hotfix + echo "pref(\"security.tls.version.min\", 1);" >> defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults popd diff --git a/gitian/descriptors/windows/gitian-bundle.yml b/gitian/descriptors/windows/gitian-bundle.yml index 76f5c67..a3c4b8a 100644 --- a/gitian/descriptors/windows/gitian-bundle.yml +++ b/gitian/descriptors/windows/gitian-bundle.yml @@ -126,6 +126,8 @@ script: | cp defaults/preferences/000-tor-browser.js ~/build/ # Set the locale bundle. echo "pref(\"general.useragent.locale\", \"en-US\");" >> defaults/preferences/000-tor-browser.js + # The poodle hotfix + echo "pref(\"security.tls.version.min\", 1);" >> defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults popd @@ -156,6 +158,8 @@ script: | mkdir -p defaults/preferences cp ~/build/000-tor-browser.js defaults/preferences/ echo "pref(\"general.useragent.locale\", \"$LANG\");" >> defaults/preferences/000-tor-browser.js + # The poodle hotfix + echo "pref(\"security.tls.version.min\", 1);" >> defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults popd [View Less]

1 0

[tor-browser-bundle/master] Add stable release channel to updater config.
by mikeperry＠torproject.org 13 Oct '14

13 Oct '14

commit 9e94ab8ddf44d51e5c30250f4308159114ad0c53 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon Oct 13 12:27:57 2014 -0700 Add stable release channel to updater config. --- tools/update-responses/config.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 8b5475a..15843b6 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -5,8 +5,13 @@ … [View More]

1 0

[tor-browser-bundle/master] And having the wrong one, too.
by gk＠torproject.org 13 Oct '14

13 Oct '14

commit 3fd335159e507deb70024ef72e1063fdf4541326 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Oct 13 15:12:38 2014 +0000 And having the wrong one, too. --- gitian/versions.nightly | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 65e37ee..9dc6f3f 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -95,7 +95,7 @@ PY2EXE_HASH=… [View More]

1 0

[tor-browser-bundle/master] Not having a GCC hash breaks nightlies.
by gk＠torproject.org 13 Oct '14

13 Oct '14

commit cf8a98200d8242ecfd8cdde7bc794556a144ea5b Author: Georg Koppen <gk(a)torproject.org> Date: Mon Oct 13 14:54:51 2014 +0000 Not having a GCC hash breaks nightlies. --- gitian/versions.nightly | 1 + 1 file changed, 1 insertion(+) diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 5541ded..65e37ee 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -95,6 +95,7 @@ PY2EXE_HASH=610a8800de3d973ed5ed4ac505ab42ad058add18a68609ac09e6cf3598ef056c … [View More]

1 0

[tor-browser-bundle/master] Adding faketime to verify-tags.sh.
by gk＠torproject.org 13 Oct '14

13 Oct '14

commit 7f607feb2d0475fccaceb2902df7d9948f0a688c Author: Georg Koppen <gk(a)torproject.org> Date: Mon Oct 13 11:38:36 2014 +0000 Adding faketime to verify-tags.sh. --- gitian/verify-tags.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/gitian/verify-tags.sh b/gitian/verify-tags.sh index 5cd8649..b7a89f1 100755 --- a/gitian/verify-tags.sh +++ b/gitian/verify-tags.sh @@ -112,6 +112,7 @@ libdmg-hfsplus $LIBDMG_TAG libfte $LIBFTE_TAG fteproxy … [View More]

1 0

[tor-browser-bundle/master] Add changelog for 4.0-stable.
by mikeperry＠torproject.org 13 Oct '14

13 Oct '14

commit 1a98e3efb368fb9ff6b2d72d2ccf6d954462077f Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Sun Oct 12 18:02:25 2014 -0700 Add changelog for 4.0-stable. --- Bundle-Data/Docs/ChangeLog.txt | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 82e8138..40fc9f1 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,30 @@ +Tor Browser 4.… [View More]

1 0

[tor-browser-bundle/master] Use HTTPS-E 4.0.1 for 4.0-stable.
by mikeperry＠torproject.org 13 Oct '14

13 Oct '14

commit 5786b7bc9d96144a3fb81d51a5ae4a4e8934bc76 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Sun Oct 12 17:31:19 2014 -0700 Use HTTPS-E 4.0.1 for 4.0-stable. --- gitian/versions | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gitian/versions b/gitian/versions index edc06a1..f0ae4d9 100755 --- a/gitian/versions +++ b/gitian/versions @@ -47,7 +47,7 @@ PY2EXE_VER=0.6.9 SETUPTOOLS_VER=1.4 LXML_VER=3.3.5 PARSLEY_VER=1.2 -HTTPSE_VER=5.… [View More]

1 0

[tor-browser-bundle/master] Fix noscript hash.
by mikeperry＠torproject.org 11 Oct '14

11 Oct '14

commit 4eccc80cbd7dd7d09f2d78c20a7feacc656f27db Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Sat Oct 11 01:49:05 2014 -0700 Fix noscript hash. --- gitian/versions | 2 +- gitian/versions.nightly | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/gitian/versions b/gitian/versions index 124f9c7..edc06a1 100755 --- a/gitian/versions +++ b/gitian/versions @@ -81,7 +81,7 @@ GMP_HASH=… [View More]

1 0