July 2015 - tbb-commits - lists.torproject.org

[tor-browser-bundle/master] Update update responses for 5.0a4.
by mikeperry＠torproject.org 30 Jul '15

30 Jul '15

commit 335c3eed9a919977275b6da29a203cbc3ca9d971 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jul 29 20:55:55 2015 -0700 Update update responses for 5.0a4. --- tools/update-responses/config.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 77d8e46..1917187 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -9,7 +9,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - alpha: 5.0a3 + alpha: 5.0a4 release: 4.5.2 versions: 4.5.2: @@ -23,12 +23,12 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 5.0a3: + 5.0a4: platformVersion: 38.1.0 detailsURL: https://www.torproject.org/projects/torbrowser.html.en download_url: https://www.torproject.org/dist/torbrowser/5.0a3 incremental_from: - - 5.0a2 + - 5.0a3 migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser-bundle/master] Fix the tor version checks when applying backported patches.
by mikeperry＠torproject.org 29 Jul '15

29 Jul '15

commit abb0ef2e192c4268980a2e670fdfac6c3715c4c5 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jul 29 09:11:11 2015 -0700 Fix the tor version checks when applying backported patches. --- gitian/descriptors/linux/gitian-tor.yml | 7 +++---- gitian/descriptors/mac/gitian-tor.yml | 7 +++---- gitian/descriptors/windows/gitian-tor.yml | 7 +++---- 3 files changed, 9 insertions(+), 12 deletions(-) diff --git a/gitian/descriptors/linux/gitian-tor.yml b/gitian/descriptors/linux/gitian-tor.yml index bfd0e18..906077b 100644 --- a/gitian/descriptors/linux/gitian-tor.yml +++ b/gitian/descriptors/linux/gitian-tor.yml @@ -79,14 +79,13 @@ script: | export GIT_COMMITTER_NAME="nobody" export GIT_COMMITTER_EMAIL="nobody@localhost" export GIT_COMMITTER_DATE="$REFERENCE_DATETIME" - if [ ${TOR_TAG::9} == "tor-0.2.5" ]; + if [ ${TOR_TAG::9} == "tor-0.2.6" ]; then - git am ~/build/bug8405.patch - git am ~/build/bug8402-master.patch - else git am ~/build/bug15482.patch git am ~/build/bug16430.patch git am ~/build/bug16674.patch + else + git am ~/build/bug15482.patch fi mkdir -p $OUTDIR/src #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/mac/gitian-tor.yml b/gitian/descriptors/mac/gitian-tor.yml index c755851..8e64922 100644 --- a/gitian/descriptors/mac/gitian-tor.yml +++ b/gitian/descriptors/mac/gitian-tor.yml @@ -57,14 +57,13 @@ script: | export GIT_COMMITTER_NAME="nobody" export GIT_COMMITTER_EMAIL="nobody@localhost" export GIT_COMMITTER_DATE="$REFERENCE_DATETIME" - if [ ${TOR_TAG::9} == "tor-0.2.5" ]; + if [ ${TOR_TAG::9} == "tor-0.2.6" ]; then - git am ~/build/bug8405.patch - git am ~/build/bug8402-master.patch - else git am ~/build/bug15482.patch git am ~/build/bug16430.patch git am ~/build/bug16674.patch + else + git am ~/build/bug15482.patch fi mkdir -p $OUTDIR/src #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/windows/gitian-tor.yml b/gitian/descriptors/windows/gitian-tor.yml index a6be6b4..7320a65 100644 --- a/gitian/descriptors/windows/gitian-tor.yml +++ b/gitian/descriptors/windows/gitian-tor.yml @@ -57,14 +57,13 @@ script: | export GIT_COMMITTER_NAME="nobody" export GIT_COMMITTER_EMAIL="nobody@localhost" export GIT_COMMITTER_DATE="$REFERENCE_DATETIME" - if [ ${TOR_TAG::9} == "tor-0.2.5" ]; + if [ ${TOR_TAG::9} == "tor-0.2.6" ]; then - git am ~/build/bug8405.patch - git am ~/build/bug8402-master.patch - else git am ~/build/bug15482.patch git am ~/build/bug16430.patch git am ~/build/bug16674.patch + else + git am ~/build/bug15482.patch fi mkdir -p $OUTDIR/src #git archive HEAD | tar -x -C $OUTDIR/src

1 0

[tor-browser-bundle/master] Update 5.0a4 changelog wrt backported patches.
by mikeperry＠torproject.org 29 Jul '15

29 Jul '15

commit cf409e6812da564f57880150303933f4ccc8a078 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jul 29 09:12:16 2015 -0700 Update 5.0a4 changelog wrt backported patches. --- Bundle-Data/Docs/ChangeLog.txt | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 8a563cf..fd6d158 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,8 +1,7 @@ Tor Browser 5.0a4 -- August 3 2015 * All Platforms - * Update Tor to 0.2.7.2-alpha with backported patches: - * Bug 16674: Allow trailing '.' in FQDNs - * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) + * Update Tor to 0.2.7.2-alpha with patches: + * Bug 15482: Don't allow circuits to change while a site is in use * Update OpenSSL to 1.0.1p * Update HTTPS-Everywhere to 5.0.7 * Update NoScript to 2.6.9.31

1 0

[tor-browser-bundle/master] Changelog clarifications
by mikeperry＠torproject.org 28 Jul '15

28 Jul '15

commit d4fd73c796feb6db0091f0f38af32959e46997f6 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue Jul 28 16:39:01 2015 -0700 Changelog clarifications --- Bundle-Data/Docs/ChangeLog.txt | 23 +++++++++++------------ 1 file changed, 11 insertions(+), 12 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 0e38362..8a563cf 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,32 +1,31 @@ Tor Browser 5.0a4 -- August 3 2015 * All Platforms - * Update Tor to 0.2.7.2 + * Update Tor to 0.2.7.2-alpha with backported patches: + * Bug 16674: Allow trailing '.' in FQDNs + * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) * Update OpenSSL to 1.0.1p * Update HTTPS-Everywhere to 5.0.7 * Update NoScript to 2.6.9.31 - * Tor patch backport - * Bug 16674: Allow trailing '.' in FQDNs - * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) * Update Torbutton to 1.9.3.1 * Bug 16268: Show Tor Browser logo on About page * Bug 16639: Check for Updates menu item can cause update download failure * Bug 15781: Remove the sessionstore filter * Bug 15656: Sync privacy.resistFingerprinting with Torbutton pref * Translation updates - * Bug 16884: Prefer IPv6 if available in Tor Browser - * Bug 16488: Remove "Sign in to Sync" from the menu - * Bug 13313: Enable bundle fonts + * Bug 16884: Prefer IPv6 when supported by the current Tor exit + * Bug 16488: Remove "Sign in to Sync" from the browser menu + * Bug 13313: Bundle a fixed set of fonts to defend against fingerprinting * Bug 16662: Enable network.http.spdy.* prefs in meek-http-helper * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent (fixup) * Bug 15703: Isolate mediasource URIs and media streams to first party * Bug 16429+16416: Isolate blob URIs to first party - * Bug 16632: Turn on the background updater - * Bug 16528: Prevent indexedDB Modernizr breakage - * Bug 16523: Chrome JavaScript debugger is broken + * Bug 16632: Turn on the background updater and restart prompting + * Bug 16528: Prevent indexedDB Modernizr site breakage on Twitter and elsewhere + * Bug 16523: Fix in-browser JavaScript debugger * Bug 16236: Windows updater: avoid writing to the registry * Bug 16005: Restrict WebGL minimal mode a bit (fixup) - * Bug 16625: Fully disable network prediction - * Bug 16495: Tor Browser 5.0a3 crashes with security level set to "High" + * Bug 16625: Fully disable network connection prediction + * Bug 16495: Fix SVG crash when security level is set to "High" * Build System * Bug 15864: rename sha256sums.txt to sha256sums-unsigned-build.txt

1 0

[tor-browser-bundle/master] Changelog fixes
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 24d59c66d99b194015722b12e70cb51dd7a948c9 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 23:31:19 2015 +0000 Changelog fixes --- Bundle-Data/Docs/ChangeLog.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 887f4a0..0e38362 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -6,9 +6,10 @@ Tor Browser 5.0a4 -- August 3 2015 * Update NoScript to 2.6.9.31 * Tor patch backport * Bug 16674: Allow trailing '.' in FQDNs + * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) * Update Torbutton to 1.9.3.1 * Bug 16268: Show Tor Browser logo on About page - * Bug 16639: Check for Updates menu item can cause update failure + * Bug 16639: Check for Updates menu item can cause update download failure * Bug 15781: Remove the sessionstore filter * Bug 15656: Sync privacy.resistFingerprinting with Torbutton pref * Translation updates

1 0

[tor-browser-bundle/master] Fixed typo in verify-tags.sh
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 5aa2590903abee0cc1dd01690fde3d4e3316cf3a Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 23:19:47 2015 +0000 Fixed typo in verify-tags.sh --- gitian/verify-tags.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/verify-tags.sh b/gitian/verify-tags.sh index f801b32..b8fc0e0 100755 --- a/gitian/verify-tags.sh +++ b/gitian/verify-tags.sh @@ -118,7 +118,7 @@ ed25519 $GOED25519_TAG siphash $GOSIPHASH_TAG goxcrypto $GO_X_CRYPTO_TAG goxnet $GO_X_NET_TAG -noto-fonts $NOTO_FONTS_TAG +noto-fonts $NOTOFONTS_TAG EOF # Verify signatures on signed packages

1 0

[tor-browser-bundle/master] Adding gk's new subkey to torbutton.gpg
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 3cf76e656decc3e7c327335b426113cd57e01bea Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 23:13:52 2015 +0000 Adding gk's new subkey to torbutton.gpg --- gitian/gpg/torbutton.gpg | Bin 44645 -> 49582 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/gitian/gpg/torbutton.gpg b/gitian/gpg/torbutton.gpg index ebc37d7..b60a95e 100644 Binary files a/gitian/gpg/torbutton.gpg and b/gitian/gpg/torbutton.gpg differ

1 0

[tor-browser-bundle/master] Changelog fixup
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit aa51f2712766d2701af3aeedc7ef861f1f209d81 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 23:06:13 2015 +0000 Changelog fixup --- Bundle-Data/Docs/ChangeLog.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 7b3852f..887f4a0 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -15,6 +15,7 @@ Tor Browser 5.0a4 -- August 3 2015 * Bug 16884: Prefer IPv6 if available in Tor Browser * Bug 16488: Remove "Sign in to Sync" from the menu * Bug 13313: Enable bundle fonts + * Bug 16662: Enable network.http.spdy.* prefs in meek-http-helper * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent (fixup) * Bug 15703: Isolate mediasource URIs and media streams to first party * Bug 16429+16416: Isolate blob URIs to first party

1 0

[tor-browser-bundle/master] Bump alpha versions and changelog
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 494065edd86a3d1b1b159ca4f21210079501b19c Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 22:49:46 2015 +0000 Bump alpha versions and changelog --- Bundle-Data/Docs/ChangeLog.txt | 30 ++++++++++++++++++++++++++++++ gitian/versions.alpha | 16 ++++++++-------- 2 files changed, 38 insertions(+), 8 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 27d8294..7b3852f 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,33 @@ +Tor Browser 5.0a4 -- August 3 2015 + * All Platforms + * Update Tor to 0.2.7.2 + * Update OpenSSL to 1.0.1p + * Update HTTPS-Everywhere to 5.0.7 + * Update NoScript to 2.6.9.31 + * Tor patch backport + * Bug 16674: Allow trailing '.' in FQDNs + * Update Torbutton to 1.9.3.1 + * Bug 16268: Show Tor Browser logo on About page + * Bug 16639: Check for Updates menu item can cause update failure + * Bug 15781: Remove the sessionstore filter + * Bug 15656: Sync privacy.resistFingerprinting with Torbutton pref + * Translation updates + * Bug 16884: Prefer IPv6 if available in Tor Browser + * Bug 16488: Remove "Sign in to Sync" from the menu + * Bug 13313: Enable bundle fonts + * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent (fixup) + * Bug 15703: Isolate mediasource URIs and media streams to first party + * Bug 16429+16416: Isolate blob URIs to first party + * Bug 16632: Turn on the background updater + * Bug 16528: Prevent indexedDB Modernizr breakage + * Bug 16523: Chrome JavaScript debugger is broken + * Bug 16236: Windows updater: avoid writing to the registry + * Bug 16005: Restrict WebGL minimal mode a bit (fixup) + * Bug 16625: Fully disable network prediction + * Bug 16495: Tor Browser 5.0a3 crashes with security level set to "High" + * Build System + * Bug 15864: rename sha256sums.txt to sha256sums-unsigned-build.txt + Tor Browser 5.0a3 -- June 30 2015 * All Platforms * Update Firefox to 38.1.0esr diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 6f8b4eb..d4dece0 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -8,11 +8,11 @@ FIREFOX_VERSION=38.1.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.0-1-build2 -TOR_TAG=tor-0.2.7.1-alpha +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.0-1-build3 +TOR_TAG=tor-0.2.7.2-alpha TORLAUNCHER_TAG=0.2.7.6 -TORBUTTON_TAG=1.9.3.0 -HTTPSE_TAG=5.0.5 +TORBUTTON_TAG=1.9.3.1 +HTTPSE_TAG=5.0.7 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.21-stable @@ -36,7 +36,7 @@ NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 GITIAN_TAG=tor-browser-builder-3.x-8 -OPENSSL_VER=1.0.1o +OPENSSL_VER=1.0.1p GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -59,7 +59,7 @@ NOTOCJKFONT_VER=1.004 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.27-sm+fn+fx.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.31-sm+fn+fx.xpi TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -83,13 +83,13 @@ GO_PACKAGE=go${GO_VER}.src.tar.gz NOTOCJKFONT_PACKAGE=NotoSansCJKsc-Regular.otf # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=16e678c6a05f2502811e075f2c4059ac01c878d091c9c585afc49ebc541f7b13 +OPENSSL_HASH=bd5ee6803165c0fb60bbecbacacf244f1f90d2aa0d71353af610c29121e9b2f1 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=a59a2150a4fa03091afd670d86333b60b6516ccd104bcef918afe99460fb436a +NOSCRIPT_HASH=151339f3ba663a527b2bf7ce88a4ea1379833b7ac3b6277cdf67f6ab5a33af1b MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c ARGPARSE_HASH=ddaf4b0a618335a32b6664d4ae038a1de8fbada3b25033f9021510ed2b3941a4

1 0

[tor-browser-bundle/master] Bug 16884: Prefer IPv6 if available in Tor Browser
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 1f39acfbe083e3fac156345253b76ba785147ea9 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 22:45:03 2015 +0000 Bug 16884: Prefer IPv6 if available in Tor Browser --- Bundle-Data/linux/Data/Tor/torrc-defaults | 2 +- Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults | 2 +- Bundle-Data/windows/Data/Tor/torrc-defaults | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Bundle-Data/linux/Data/Tor/torrc-defaults b/Bundle-Data/linux/Data/Tor/torrc-defaults index 819b9e8..e4c8920 100644 --- a/Bundle-Data/linux/Data/Tor/torrc-defaults +++ b/Bundle-Data/linux/Data/Tor/torrc-defaults @@ -5,6 +5,6 @@ AvoidDiskWrites 1 Log notice stdout # Bind to this address to listen to connections from SOCKS-speaking # applications. -SocksPort 9150 +SocksPort 9150 IPv6Traffic PreferIPv6 ControlPort 9151 CookieAuthentication 1 diff --git a/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults b/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults index 819b9e8..e4c8920 100644 --- a/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults +++ b/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults @@ -5,6 +5,6 @@ AvoidDiskWrites 1 Log notice stdout # Bind to this address to listen to connections from SOCKS-speaking # applications. -SocksPort 9150 +SocksPort 9150 IPv6Traffic PreferIPv6 ControlPort 9151 CookieAuthentication 1 diff --git a/Bundle-Data/windows/Data/Tor/torrc-defaults b/Bundle-Data/windows/Data/Tor/torrc-defaults index 819b9e8..e4c8920 100644 --- a/Bundle-Data/windows/Data/Tor/torrc-defaults +++ b/Bundle-Data/windows/Data/Tor/torrc-defaults @@ -5,6 +5,6 @@ AvoidDiskWrites 1 Log notice stdout # Bind to this address to listen to connections from SOCKS-speaking # applications. -SocksPort 9150 +SocksPort 9150 IPv6Traffic PreferIPv6 ControlPort 9151 CookieAuthentication 1

1 0