February 2018 - tbb-commits - lists.torproject.org

[tor-browser-build/master] Bug 25336: Bump obfs4proxy to 0.0.7
by gk＠torproject.org 26 Feb '18

26 Feb '18

commit 4bed9a85478b6fb16e0d654589d8cb8ed3865027 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Feb 26 08:26:20 2018 +0000 Bug 25336: Bump obfs4proxy to 0.0.7 0.0.7 has long been out and OnionShare needs its meek_lite feature for macOS. Let's update to this latest stable obfs4 version then. --- projects/obfs4/config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/obfs4/config b/projects/obfs4/config index 44db79d..916887f 100644 --- a/projects/obfs4/config +++ b/projects/obfs4/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 0.0.5 +version: 0.0.7 git_url: https://git.torproject.org/pluggable-transports/obfs4.git git_hash: 'obfs4proxy-[% c("version") %]' tag_gpg_id: 1

1 0

[tor-browser-build/master] Bug 25020: fix a typo in tbb_version.json filename
by boklm＠torproject.org 24 Feb '18

24 Feb '18

commit e7e4cbd526d767d46fe6f728c99492e7e3d6e76c Author: Nicolas Vigier <boklm(a)torproject.org> Date: Sat Feb 24 21:54:29 2018 +0100 Bug 25020: fix a typo in tbb_version.json filename --- projects/tor-browser/build | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/build b/projects/tor-browser/build index 978d988..c542818 100644 --- a/projects/tor-browser/build +++ b/projects/tor-browser/build @@ -199,7 +199,7 @@ echo "pref(\"general.useragent.locale\", \"en-US\");" >> defaults/preferences/00 zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults # create tbb_version.json file for #25020 -echo '{"version":"[% c("var/torbrowser_version") %]","architecture":"[% c("var/mar_osname") %]","channel":"[% c("var/channel") %]","locale":"en-US"}' > ../tbb_verson.json +echo '{"version":"[% c("var/torbrowser_version") %]","architecture":"[% c("var/mar_osname") %]","channel":"[% c("var/channel") %]","locale":"en-US"}' > ../tbb_version.json popd # Prepare our language packs for using the proper search engines and embed @@ -330,7 +330,7 @@ cp $rootdir/[% c('input_files_by_name/firefox') %]/mar-tools-*.zip "$OUTDIR"/ zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults # create tbb_version.json file for #25020 - echo '{"version":"[% c("var/torbrowser_version") %]","architecture":"[% c("var/mar_osname") %]","channel":"[% c("var/channel") %]","locale":"[% lang %]"}' > ../tbb_verson.json + echo '{"version":"[% c("var/torbrowser_version") %]","architecture":"[% c("var/mar_osname") %]","channel":"[% c("var/channel") %]","locale":"[% lang %]"}' > ../tbb_version.json popd # Set the update.locale (it is used to replace %LOCALE% within

1 0

[tor-browser-build/master] It's "its" and not "it's" (for all "it's")
by gk＠torproject.org 22 Feb '18

22 Feb '18

commit fa29c1922c1e27ff94663ef1380b81b8f9c46206 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Feb 22 07:27:30 2018 +0000 It's "its" and not "it's" (for all "it's") Thanks to arma for catching this. --- .../Data/Browser/profile.default/preferences/extension-overrides.js | 3 ++- .../Data/Browser/profile.default/preferences/extension-overrides.js | 3 ++- .../Data/Browser/profile.default/preferences/extension-overrides.js | 3 ++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/projects/tor-browser/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js b/projects/tor-browser/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js index 9476edc..c81a7bf 100644 --- a/projects/tor-browser/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/projects/tor-browser/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js @@ -58,5 +58,6 @@ pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); # PDF.js -// needs to be a user_pref because pdf.js blows away non-user prefs with it's own defaults each time +// needs to be a user_pref because pdf.js blows away non-user prefs with its own +// defaults each time user_pref("pdfjs.disableRange", true); diff --git a/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js b/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js index 9476edc..c81a7bf 100644 --- a/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js @@ -58,5 +58,6 @@ pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); # PDF.js -// needs to be a user_pref because pdf.js blows away non-user prefs with it's own defaults each time +// needs to be a user_pref because pdf.js blows away non-user prefs with its own +// defaults each time user_pref("pdfjs.disableRange", true); diff --git a/projects/tor-browser/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js b/projects/tor-browser/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js index 9476edc..c81a7bf 100644 --- a/projects/tor-browser/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/projects/tor-browser/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js @@ -58,5 +58,6 @@ pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); # PDF.js -// needs to be a user_pref because pdf.js blows away non-user prefs with it's own defaults each time +// needs to be a user_pref because pdf.js blows away non-user prefs with its own +// defaults each time user_pref("pdfjs.disableRange", true);

1 0

[tor-browser-build/master] s/developement/development/
by gk＠torproject.org 22 Feb '18

22 Feb '18

commit f7c8e84c93792e006b4357343313c6989499f2ec Author: Georg Koppen <gk(a)torproject.org> Date: Thu Feb 22 07:31:33 2018 +0000 s/developement/development/ Thanks to arma for catching this. --- rbm.local.conf.example | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rbm.local.conf.example b/rbm.local.conf.example index 916cb5e..dc3f038 100644 --- a/rbm.local.conf.example +++ b/rbm.local.conf.example @@ -100,7 +100,7 @@ targets: ### By default 'fetch' is set to 1 for nightly builds, meaning that new ### commits will be fetched automatically during each build. You can - ### disable this during developement if you want to do rebuilds to test + ### disable this during development if you want to do rebuilds to test ### a specific change, but don't want rebuilds caused by unrelated ### changes, or if you want to decide at which point new commits are ### fetched. When 'fetch' is set to 'if_needed', new commits will only

1 0

[tor-browser-build/master] Bump build version
by gk＠torproject.org 21 Feb '18

21 Feb '18

commit 84c9b9ff0fb7f85ac776835f2ab930ef222d7f06 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Feb 21 18:56:08 2018 +0000 Bump build version --- rbm.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rbm.conf b/rbm.conf index 83f35f6..f6a9212 100644 --- a/rbm.conf +++ b/rbm.conf @@ -16,7 +16,7 @@ buildconf: var: torbrowser_version: '8.0a2' - torbrowser_build: 'build2' + torbrowser_build: 'build3' torbrowser_incremental_from: - 8.0a1 project_name: tor-browser

1 0

[tor-browser-build/master] Bug 25327: create *-debug.tar.xz files instead of *-debug.tar.gz files
by gk＠torproject.org 21 Feb '18

21 Feb '18

commit 3699792995ef75ff516fba20b1534e9722ab2f50 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Wed Feb 21 18:13:58 2018 +0100 Bug 25327: create *-debug.tar.xz files instead of *-debug.tar.gz files --- projects/firefox/build | 2 +- projects/tor-browser/build | 4 ++-- projects/tor/build | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/projects/firefox/build b/projects/firefox/build index 051d573..a7441bd 100644 --- a/projects/firefox/build +++ b/projects/firefox/build @@ -199,7 +199,7 @@ END; [% IF c("var/linux") %] [% c('tar', { tar_src => [ 'Debug' ], - tar_args => '-czf ' _ dest_dir _ '/' _ c('filename') _ '/tor-browser-debug.tar.gz', + tar_args => '-cJf ' _ dest_dir _ '/' _ c('filename') _ '/tor-browser-debug.tar.xz', }) %] [% END %] diff --git a/projects/tor-browser/build b/projects/tor-browser/build index 655e157..978d988 100644 --- a/projects/tor-browser/build +++ b/projects/tor-browser/build @@ -299,8 +299,8 @@ rm -rf $distdir/${PKG_DIR} cp $rootdir/[% c('input_files_by_name/firefox') %]/mar-tools-*.zip "$OUTDIR"/ [% IF c("var/linux") -%] - cp $rootdir/[% c('input_files_by_name/firefox') %]/tor-browser-debug.tar.gz "$OUTDIR"/tor-browser-[% c("var/mar_osname") %]-debug.tar.gz - cp $rootdir/[% c('input_files_by_name/tor') %]/tor-debug.tar.gz "$OUTDIR"/tor-[% c("var/mar_osname") %]-debug.tar.gz + cp $rootdir/[% c('input_files_by_name/firefox') %]/tor-browser-debug.tar.xz "$OUTDIR"/tor-browser-[% c("var/mar_osname") %]-debug.tar.xz + cp $rootdir/[% c('input_files_by_name/tor') %]/tor-debug.tar.xz "$OUTDIR"/tor-[% c("var/mar_osname") %]-debug.tar.xz [% END -%] # If we did not create a multi-lingual package above, create a package for diff --git a/projects/tor/build b/projects/tor/build index f6b507f..eeeaa5c 100644 --- a/projects/tor/build +++ b/projects/tor/build @@ -133,6 +133,6 @@ mkdir -p [% dest_dir _ '/' _ c('filename') %] [% IF c("var/linux") %] [% c('tar', { tar_src => [ 'Debug' ], - tar_args => '-czf ' _ dest_dir _ '/' _ c('filename') _ '/tor-debug.tar.gz', + tar_args => '-cJf ' _ dest_dir _ '/' _ c('filename') _ '/tor-debug.tar.xz', }) %] [% END %]

1 0

[tor-browser-build/master] Bump build version
by gk＠torproject.org 21 Feb '18

21 Feb '18

commit 8bf3bb215393f78df81cf6a1ed3eeae6432f9f9b Author: Georg Koppen <gk(a)torproject.org> Date: Wed Feb 21 10:18:34 2018 +0000 Bump build version --- rbm.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rbm.conf b/rbm.conf index b1ad4c4..83f35f6 100644 --- a/rbm.conf +++ b/rbm.conf @@ -16,7 +16,7 @@ buildconf: var: torbrowser_version: '8.0a2' - torbrowser_build: 'build1' + torbrowser_build: 'build2' torbrowser_incremental_from: - 8.0a1 project_name: tor-browser

1 0

[tor-browser-build/master] Bug 22612: Add script to hash signed bundles
by gk＠torproject.org 21 Feb '18

21 Feb '18

commit 011e0d3d3da5263efa29b9a5963caa083f4c3ff5 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Feb 21 10:15:54 2018 +0000 Bug 22612: Add script to hash signed bundles --- tools/hash_signed_bundles.sh | 50 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 50 insertions(+) diff --git a/tools/hash_signed_bundles.sh b/tools/hash_signed_bundles.sh new file mode 100755 index 0000000..4354d47 --- /dev/null +++ b/tools/hash_signed_bundles.sh @@ -0,0 +1,50 @@ +#!/bin/sh + +# Copyright (c) 2018, The Tor Project, Inc. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: + +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following disclaimer +# in the documentation and/or other materials provided with the +# distribution. +# +# * Neither the names of the copyright owners nor the names of its +# contributors may be used to endorse or promote products derived from +# this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR +# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT +# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT +# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY +# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +# Usage: +# 1) Change into the directory containing the files to be hashed +# 2) Run /path/to/hash_signed_bundles.sh + +export LC_ALL=C + +rm -f sha256sums-signed-build.txt sha256sums-signed-build.incrementals.txt +sha256sum `ls -1 | grep -v '\.incremental\.mar$' | grep -v '^sha256sums*' | \ + sort` > sha256sums-signed-build.txt + +if ls -1 | grep -q '\.incremental\.mar$' +then + sha256sum `ls -1 | grep '\.incremental\.mar$' | \ + sort` > sha256sums-signed-build.incrementals.txt +fi + +echo "Hashing the signed bundles done." +exit 0

1 0

[tor-browser-build/master] Bug 24879: enable fetching of new commits by default for nightly builds
by gk＠torproject.org 21 Feb '18

21 Feb '18

commit 95b5c738d8e1a11596e652363e801e500c5733de Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Jan 15 19:26:28 2018 +0100 Bug 24879: enable fetching of new commits by default for nightly builds --- README | 3 ++- rbm.conf | 1 + rbm.local.conf.example | 13 +++++++++++++ 3 files changed, 16 insertions(+), 1 deletion(-) diff --git a/README b/README index a449f9d..d498c05 100644 --- a/README +++ b/README @@ -89,7 +89,8 @@ Updating git sources You can run "make fetch" to fetch the latest sources from git for all components included in Tor Browser. You should run this if you want to -make a nightly build with the latest commits. +make a nightly build with the latest commits, and you disabled automatic +fetching of new commits for nightly builds in rbm.local.conf. Number of make processes diff --git a/rbm.conf b/rbm.conf index 76b7627..b1ad4c4 100644 --- a/rbm.conf +++ b/rbm.conf @@ -112,6 +112,7 @@ targets: alpha: 1 channel: alpha nightly: + fetch: 1 var: nightly: 1 channel: nightly diff --git a/rbm.local.conf.example b/rbm.local.conf.example index a6401a9..916cb5e 100644 --- a/rbm.local.conf.example +++ b/rbm.local.conf.example @@ -96,4 +96,17 @@ targets: ### Uncomment this if you want to create mar files in your test build. #build_mar: 1 + nightly: + + ### By default 'fetch' is set to 1 for nightly builds, meaning that new + ### commits will be fetched automatically during each build. You can + ### disable this during developement if you want to do rebuilds to test + ### a specific change, but don't want rebuilds caused by unrelated + ### changes, or if you want to decide at which point new commits are + ### fetched. When 'fetch' is set to 'if_needed', new commits will only + ### be fetched if the selected commit (or branch, or tag) is not present, + ### which means that existing branches won't be updated. In that case + ### you can fetch new commits by running 'make fetch'. + #fetch: 'if_needed' + # vim: filetype=yaml sw=2

1 0

[tor-browser-build/master] Release preparations for 8.0a2
by gk＠torproject.org 21 Feb '18

21 Feb '18

commit b3fa8c1cf7c9e72c5f647c254a232f38b35b760d Author: Georg Koppen <gk(a)torproject.org> Date: Wed Feb 21 08:55:35 2018 +0000 Release preparations for 8.0a2 Changelog update and versions bump --- projects/firefox/config | 2 +- projects/https-everywhere/config | 2 +- .../tor-browser/Bundle-Data/Docs/ChangeLog.txt | 32 ++++++++++++++++++++++ projects/tor-browser/config | 4 +-- projects/tor-launcher/config | 2 +- projects/tor/config | 2 +- projects/torbutton/config | 2 +- rbm.conf | 6 ++-- 8 files changed, 42 insertions(+), 10 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index f19b8ac..b62fce3 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-2-build1' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-2-build2' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git gpg_keyring: torbutton.gpg diff --git a/projects/https-everywhere/config b/projects/https-everywhere/config index ba3f3ca..907e8e1 100644 --- a/projects/https-everywhere/config +++ b/projects/https-everywhere/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 2018.1.11 +version: 2018.1.29 git_url: https://git.torproject.org/https-everywhere.git git_hash: '[% c("version") %]' git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index d591af5..3cd0e63 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,35 @@ +Tor Browser 8.0a2 -- February 23 2018 + * All Platforms + * Update Tor to 0.3.3.2-alpha + * Update Torbutton to 1.9.9 + * Bug 24159: Version check does not deal with platform specific checks + * Bug 25016: Remove 2017 donation banner + * Translations update + * Update Tor Launcher to 0.2.15 + * Bug 25089: Special characters are not escaped in proxy password + * Translations update + * Update HTTPS Everywhere to 2018.1.29 + * Update NoScript to 5.1.8.4 + * Update meek to 0.29 + * Bug 25215: Revert bug 18619 (we are not disabling IndexedDB any longer) + * Bug 19910: Rip out optimistic data socks handshake variant (#3875) + * Bug 22659: Changes to `intl.accept.languages` get overwritten after restart + * Bug 25000: Add [System+Principal] to the NoScript whitelist + * Bug 15599: Disable Range requests used by pdfjs as they are not isolated + * Bug 22614: Make e10s/non-e10s Tor Browsers indistinguishable + * Bug 13575: Disable randomised Firefox HTTP cache decay user tests + * Bug 25020: Add a tbb_version.json file + * Bug 24995: Include git hash in tor --version + * OS X + * Bug 22794: Don't open AF_INET/AF_INET6 sockets when AF_LOCAL is configured + * Linux + * Bug 22794: Don't open AF_INET/AF_INET6 sockets when AF_LOCAL is configured + * Windows: + * Bug 25266: PT config should include full names of executable files + * Build System + * Windows + * Bug 25111: Don't compile Yasm on our own anymore for Windows Tor Browser + Tor Browser 8.0a1 -- January 23 2018 * All Platforms * Update Firefox to 52.6.0esr diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 7fded62..661b8e2 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -66,9 +66,9 @@ input_files: name: snowflake enable: '[% c("var/snowflake") %]' - filename: Bundle-Data - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: 9a81de6e26f639e5f82cabddcd361177815c59af2bca6363ba755255feffd2ec + sha256sum: 1c85a72cd0d7d210f8dd463f9700214703a5f28319c2b1679db00f861a5289f7 - filename: 'RelativeLink/start-tor-browser.desktop' enable: '[% c("var/linux") %]' - filename: 'RelativeLink/execdesktop' diff --git a/projects/tor-launcher/config b/projects/tor-launcher/config index 5f04027..0406800 100644 --- a/projects/tor-launcher/config +++ b/projects/tor-launcher/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 0.2.14.3 +version: 0.2.15 git_url: https://git.torproject.org/tor-launcher.git git_hash: '[% c("version") %]' gpg_keyring: torbutton.gpg diff --git a/projects/tor/config b/projects/tor/config index df721e1..3b805ad 100644 --- a/projects/tor/config +++ b/projects/tor/config @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -version: 0.3.2.9 +version: 0.3.3.2-alpha git_hash: 'tor-[% c("version") %]' git_url: https://git.torproject.org/tor.git gpg_keyring: tor.gpg diff --git a/projects/torbutton/config b/projects/torbutton/config index 53d9a38..de7691a 100644 --- a/projects/torbutton/config +++ b/projects/torbutton/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.9.8.5 +version: 1.9.9 git_url: https://git.torproject.org/torbutton.git git_hash: '[% c("version") %]' gpg_keyring: torbutton.gpg diff --git a/rbm.conf b/rbm.conf index 12b1fd0..76b7627 100644 --- a/rbm.conf +++ b/rbm.conf @@ -15,10 +15,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '8.0a1' - torbrowser_build: 'build3' + torbrowser_version: '8.0a2' + torbrowser_build: 'build1' torbrowser_incremental_from: - - 7.5a10 + - 8.0a1 project_name: tor-browser multi_lingual: 0 build_mar: 1

1 0