September 2014 - tbb-commits - lists.torproject.org

[tor-browser-bundle/maint-3.6] Also update the tag verification for Tor Launcher..
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit 65a952679bebcff78f612dabf281fae0abc2f53d Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Sep 24 02:17:43 2014 -0700 Also update the tag verification for Tor Launcher.. --- gitian/verify-tags.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/verify-tags.sh b/gitian/verify-tags.sh index 9814440..8aa818e 100755 --- a/gitian/verify-tags.sh +++ b/gitian/verify-tags.sh @@ -90,7 +90,6 @@ while read dir keyring tag; do verify_git "$dir" "$WRAPPER_DIR/gpg/$keyring" "$tag" done << EOF tbb-windows-installer tbb-windows-installer.gpg $NSIS_TAG -tor-launcher torbutton.gpg $TORLAUNCHER_TAG tor-browser torbutton.gpg $TORBROWSER_TAG torbutton torbutton.gpg $TORBUTTON_TAG zlib zlib.gpg $ZLIB_TAG @@ -109,6 +108,7 @@ libdmg-hfsplus $LIBDMG_TAG libfte $LIBFTE_TAG fteproxy $FTEPROXY_TAG txsocksx $TXSOCKSX_TAG +tor-launcher $TORLAUNCHER_TAG EOF # Verify signatures on signed packages

1 0

[tor-browser-bundle/maint-3.6] Use SHA for Torlauncher due to gpg+git tag timestamp braindamage.
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit f94fc7f3ea1ff26fcb5d6c6df30ace75fc146891 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Sep 24 02:09:27 2014 -0700 Use SHA for Torlauncher due to gpg+git tag timestamp braindamage. --- gitian/versions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/versions b/gitian/versions index c07a09d..7c38d91 100755 --- a/gitian/versions +++ b/gitian/versions @@ -8,7 +8,7 @@ FIREFOX_VERSION=24.8.1esr TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-3.x-1-build1 TOR_TAG=tor-0.2.4.24 -TORLAUNCHER_TAG=0.2.5.6 +TORLAUNCHER_TAG=e058a548e736c75982873614631c1f4cb37b04a4 # 0.2.5.6 TORBUTTON_TAG=1.6.12.3 HTTPSE_TAG=3.5.3 # XXX: HTTPSE_VER is used instead, pending #11630 NSIS_TAG=v0.1

1 0

[tor-browser-bundle/master] Use SHA for Torlauncher due to gpg+git tag timestamp braindamage.
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit b3a3162f6768d75c891abb8c54cd9ca395a022e0 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Sep 24 02:10:52 2014 -0700 Use SHA for Torlauncher due to gpg+git tag timestamp braindamage. --- gitian/versions.alpha | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 66f0e52..20e38f8 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -10,7 +10,7 @@ TORBROWSER_UPDATE_CHANNEL=alpha TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.x-1-build1 TOR_TAG=tor-0.2.5.8-rc -TORLAUNCHER_TAG=0.2.7.0 +TORLAUNCHER_TAG=25bc6349f5f1e43c7d383883e6d6822b8edb41bc # 0.2.7.0 TORBUTTON_TAG=1.6.12.3 HTTPSE_TAG=3.5.3 # XXX: HTTPSE_VER is used instead, pending #11630 NSIS_TAG=v0.2

1 0

[tor-browser-bundle/master] Revert "Remove Torbutton 1.6.12.3 from 3.6.6 changelog."
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit 526c77292bcd2f06a5f5cb17e80b58b549a14b2a Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Sep 24 01:01:25 2014 -0700 Revert "Remove Torbutton 1.6.12.3 from 3.6.6 changelog." This reverts commit 12f43a2f34f5341b66ae259bf26c78d7a8d89544. Ah, screw it. Let's keep it! What could possibly go wrong! --- Bundle-Data/Docs/ChangeLog.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 539a038..6f3ea04 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -22,6 +22,9 @@ Tor Browser Bundle 3.6.6 -- Sep 24 2014 * Update NoScript to 2.6.8.42 * Update HTTPS Everywhere to 4.0.1 * Bug 12998: Prevent intermediate certs from being written to disk + * Update Torbutton to 1.6.12.3 + * Bug 13091: Use "Tor Browser" everywhere + * Bug 10804: Workaround fix for some cases of startup hang * Linux * Bug 9150: Make RPATH unavailable on Tor binary. * Bug 13031: Add full RELRO protection.

1 0

[tor-browser-bundle/maint-3.6] Revert "Back out Torbutton 1.6.12.3"
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit 1425e4458212b798161995fcefa3deaada544102 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Sep 24 01:01:53 2014 -0700 Revert "Back out Torbutton 1.6.12.3" This reverts commit d37da21a366199555c67c11e984cddddbbc66301. Ah, screw it. Let's keep it! What could possibly go wrong! --- Bundle-Data/Docs/ChangeLog.txt | 3 +++ gitian/versions | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 5aa2c5c..e927d9c 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -5,6 +5,9 @@ Tor Browser Bundle 3.6.6 -- Sep 24 2014 * Update NoScript to 2.6.8.42 * Update HTTPS Everywhere to 4.0.1 * Bug 12998: Prevent intermediate certs from being written to disk + * Update Torbutton to 1.6.12.3 + * Bug 13091: Use "Tor Browser" everywhere + * Bug 10804: Workaround fix for some cases of startup hang * Linux * Bug 9150: Make RPATH unavailable on Tor binary. * Bug 13031: Add full RELRO protection. diff --git a/gitian/versions b/gitian/versions index 6f5c161..c07a09d 100755 --- a/gitian/versions +++ b/gitian/versions @@ -9,7 +9,7 @@ FIREFOX_VERSION=24.8.1esr TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-3.x-1-build1 TOR_TAG=tor-0.2.4.24 TORLAUNCHER_TAG=0.2.5.6 -TORBUTTON_TAG=1.6.12.1 +TORBUTTON_TAG=1.6.12.3 HTTPSE_TAG=3.5.3 # XXX: HTTPSE_VER is used instead, pending #11630 NSIS_TAG=v0.1 ZLIB_TAG=v1.2.8

1 0

[tor-browser-bundle/master] Remove Torbutton 1.6.12.3 from 3.6.6 changelog.
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit 12f43a2f34f5341b66ae259bf26c78d7a8d89544 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Sep 24 00:41:49 2014 -0700 Remove Torbutton 1.6.12.3 from 3.6.6 changelog. --- Bundle-Data/Docs/ChangeLog.txt | 3 --- 1 file changed, 3 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 6f3ea04..539a038 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -22,9 +22,6 @@ Tor Browser Bundle 3.6.6 -- Sep 24 2014 * Update NoScript to 2.6.8.42 * Update HTTPS Everywhere to 4.0.1 * Bug 12998: Prevent intermediate certs from being written to disk - * Update Torbutton to 1.6.12.3 - * Bug 13091: Use "Tor Browser" everywhere - * Bug 10804: Workaround fix for some cases of startup hang * Linux * Bug 9150: Make RPATH unavailable on Tor binary. * Bug 13031: Add full RELRO protection.

1 0

[tor-browser-bundle/maint-3.6] Back out Torbutton 1.6.12.3
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit d37da21a366199555c67c11e984cddddbbc66301 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Sep 24 00:38:38 2014 -0700 Back out Torbutton 1.6.12.3 GeKo has concerns about testing and the potential for additional hangs. --- Bundle-Data/Docs/ChangeLog.txt | 3 --- gitian/versions | 2 +- 2 files changed, 1 insertion(+), 4 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index e927d9c..5aa2c5c 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -5,9 +5,6 @@ Tor Browser Bundle 3.6.6 -- Sep 24 2014 * Update NoScript to 2.6.8.42 * Update HTTPS Everywhere to 4.0.1 * Bug 12998: Prevent intermediate certs from being written to disk - * Update Torbutton to 1.6.12.3 - * Bug 13091: Use "Tor Browser" everywhere - * Bug 10804: Workaround fix for some cases of startup hang * Linux * Bug 9150: Make RPATH unavailable on Tor binary. * Bug 13031: Add full RELRO protection. diff --git a/gitian/versions b/gitian/versions index c07a09d..6f5c161 100755 --- a/gitian/versions +++ b/gitian/versions @@ -9,7 +9,7 @@ FIREFOX_VERSION=24.8.1esr TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-3.x-1-build1 TOR_TAG=tor-0.2.4.24 TORLAUNCHER_TAG=0.2.5.6 -TORBUTTON_TAG=1.6.12.3 +TORBUTTON_TAG=1.6.12.1 HTTPSE_TAG=3.5.3 # XXX: HTTPSE_VER is used instead, pending #11630 NSIS_TAG=v0.1 ZLIB_TAG=v1.2.8

1 0

[tor-browser-bundle/maint-3.6] Update subkeys for Mike Perry and Torbutton.
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit 75f103a5d294a5c839944e45984bf4bf9bcfa4f9 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue Sep 23 22:46:31 2014 -0700 Update subkeys for Mike Perry and Torbutton. --- gitian/gpg/mikeperry.gpg | Bin 7813 -> 15716 bytes gitian/gpg/torbutton.gpg | Bin 7813 -> 15716 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/gitian/gpg/mikeperry.gpg b/gitian/gpg/mikeperry.gpg index ab4acc0..7f14ee3 100644 Binary files a/gitian/gpg/mikeperry.gpg and b/gitian/gpg/mikeperry.gpg differ diff --git a/gitian/gpg/torbutton.gpg b/gitian/gpg/torbutton.gpg index ab4acc0..7f14ee3 100644 Binary files a/gitian/gpg/torbutton.gpg and b/gitian/gpg/torbutton.gpg differ

1 0

[tor-browser-bundle/master] Update subkeys for Mike Perry.
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit 123bd9783692471258258042770c1fe58126d3d7 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue Sep 23 22:44:13 2014 -0700 Update subkeys for Mike Perry. --- gitian/gpg/mikeperry.gpg | Bin 7813 -> 15716 bytes gitian/gpg/torbutton.gpg | Bin 7813 -> 15716 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/gitian/gpg/mikeperry.gpg b/gitian/gpg/mikeperry.gpg index ab4acc0..7f14ee3 100644 Binary files a/gitian/gpg/mikeperry.gpg and b/gitian/gpg/mikeperry.gpg differ diff --git a/gitian/gpg/torbutton.gpg b/gitian/gpg/torbutton.gpg index ab4acc0..7f14ee3 100644 Binary files a/gitian/gpg/torbutton.gpg and b/gitian/gpg/torbutton.gpg differ

1 0

[tor-browser-bundle/maint-3.6] Update changelog and versions for 3.6.6.
by mikeperry＠torproject.org 24 Sep '14

24 Sep '14

commit 7edebbe2c3f5ece67e4395f3209c866179c904ec Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue Sep 23 22:30:21 2014 -0700 Update changelog and versions for 3.6.6. --- Bundle-Data/Docs/ChangeLog.txt | 14 ++++++++++++++ gitian/versions | 16 ++++++++-------- 2 files changed, 22 insertions(+), 8 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 6688bf1..e927d9c 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,17 @@ +Tor Browser Bundle 3.6.6 -- Sep 24 2014 + * All Platforms + * Update Tor to tor-0.2.4.24 + * Update Firefox to 24.8.1esr + * Update NoScript to 2.6.8.42 + * Update HTTPS Everywhere to 4.0.1 + * Bug 12998: Prevent intermediate certs from being written to disk + * Update Torbutton to 1.6.12.3 + * Bug 13091: Use "Tor Browser" everywhere + * Bug 10804: Workaround fix for some cases of startup hang + * Linux + * Bug 9150: Make RPATH unavailable on Tor binary. + * Bug 13031: Add full RELRO protection. + Tor Browser Bundle 3.6.5 -- Sep 2 2014 * All Platforms * Update Firefox to 24.8.0esr diff --git a/gitian/versions b/gitian/versions index 4096ec0..c07a09d 100755 --- a/gitian/versions +++ b/gitian/versions @@ -1,15 +1,15 @@ -TORBROWSER_VERSION=3.6.5 +TORBROWSER_VERSION=3.6.6 BUNDLE_LOCALES="ar de es-ES fa fr it ko nl pl pt-PT ru tr vi zh-CN" BUILD_PT_BUNDLES=1 VERIFY_TAGS=1 -FIREFOX_VERSION=24.8.0esr +FIREFOX_VERSION=24.8.1esr TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-3.x-1-build1 -TOR_TAG=tor-0.2.4.23 +TOR_TAG=tor-0.2.4.24 TORLAUNCHER_TAG=0.2.5.6 -TORBUTTON_TAG=1.6.12.1 +TORBUTTON_TAG=1.6.12.3 HTTPSE_TAG=3.5.3 # XXX: HTTPSE_VER is used instead, pending #11630 NSIS_TAG=v0.1 ZLIB_TAG=v1.2.8 @@ -42,12 +42,12 @@ PY2EXE_VER=0.6.9 SETUPTOOLS_VER=1.4 LXML_VER=3.3.5 PARSLEY_VER=1.2 -HTTPSE_VER=4.0.0 +HTTPSE_VER=4.0.1 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.6.8.39-fx+sm+fn.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.6.8.42-fx+fn+sm.xpi HTTPSE_PACKAGE=https-everywhere-${HTTPSE_VER}.xpi TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz @@ -75,8 +75,8 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=6b97c02b3ceab452f0ceec0f8918e0653837b24f376ba1a9dd78bb551bae3715 -HTTPSE_HASH=1241631091f9ceb417f639a6df76425cda36ee4b38b78ce8d318088eb17a7219 +NOSCRIPT_HASH=b474156fd6b9957b38054a34c8acb581204f08733cce898ed581c67d425dda33 +HTTPSE_HASH=cd811b1d424ff24939249de1e2b745ba86cbd7e6804699a9460c631a0b3474fe MINGW_HASH=a5b03d0448a309341be4cf34c6ad3016d04c89952dca5243254b4d6c738b164f MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c

1 0