November 2022 - tbb-commits - lists.torproject.org

[builders/rbm] branch main updated (8ed3aa1 -> a6ccc10)
by gitolite role 02 Nov '22

02 Nov '22

This is an automated email from the git hooks/post-receive script. boklm pushed a change to branch main in repository builders/rbm. from 8ed3aa1 Bug 40010: Add git_branch option new 5255072 Bug 40047: fix options in hg_clone_fetch_chdir new a6ccc10 Bug 40048: Add a hg_clone_subdir option The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: doc/rbm_config.asc | 7 +++++++ lib/RBM.pm | 23 +++++++++++++++-------- lib/RBM/DefaultConfig.pm | 1 + 3 files changed, 23 insertions(+), 8 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[tor-browser-spec] branch main updated: Bug 40030: FFF97 Audit
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository tor-browser-spec. The following commit(s) were added to refs/heads/main by this push: new da46045 Bug 40030: FFF97 Audit da46045 is described below commit da46045536cc1c9bb0b144d2ced0a011697bca1d Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Nov 1 21:23:31 2022 +0000 Bug 40030: FFF97 Audit --- audits/FF97_AUDIT | 84 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 84 insertions(+) diff --git a/audits/FF97_AUDIT b/audits/FF97_AUDIT new file mode 100644 index 0000000..5fa1bab --- /dev/null +++ b/audits/FF97_AUDIT @@ -0,0 +1,84 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `e6b83e1727b7e9a6847e6e15bdb935d9937099e4` ( `FIREFOX_RELEASE_97_BASE` ) +- End: `82764d45153d175f4686ead7aac977810fe1fd1b` ( `FIREFOX_RELEASE_98_BASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +**OR** + +### foreach PROBLEMATIC_HASH: +#### $(PROBLEMATIC_HASH) +- Summary +- Review Result: (SAFE|BAD) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `df53ad867be7d79899e05797533cd624f1eeb2a2` ( `v90.0.1` ) +- End: `17942945873cdb8be56a9316d3cb8a611b3ef321` ( `v91.1.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Android Components: https://github.com/mozilla-mobile/android-components.git + +- Start: `604152ef532c33d8fc2412fd6d21cf29e9764c51` ( `v97.0.0` ) +- End: `0465a6f809adafd5429c230e890e7f4911f0070e` ( `v97.0.13` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `84d4a07c0067f7c51757b157c79658a891870d95` ( `v97.0.0-beta.1` ) +- End: `16042ab2a16a64c9c94c8c01ea93578062415ac5` ( `releases_v97.0.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +### Review List + +#### 97 https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=F… + +- https://bugzilla.mozilla.org/show_bug.cgi?id=1741428 @richard https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41130 + - Upstream widl fix required, took mozilla's patch to headers in the meantime + - Created https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… to track upstream bug +- https://bugzilla.mozilla.org/show_bug.cgi?id=1738983 @pierov https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41131 + - Disabled updater and left ticket open to revisitin ESR115 +- https://bugzilla.mozilla.org/show_bug.cgi?id=1432983 @pierov https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41132 + - Nothing to do here +- https://bugzilla.mozilla.org/show_bug.cgi?id=1745092 @boklm https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41133 + - Nothing to do here -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] annotated tag tbb-11.5.7-build1 created (now 92f40e55)
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to annotated tag tbb-11.5.7-build1 in repository builders/tor-browser-build. at 92f40e55 (tag) tagging 6d4441e082bd7c20b06071cab037b835573d877a (commit) replaces tbb-11.5.6-build1 by Richard Pospesel on Tue Nov 1 20:52:51 2022 +0000 - Log ----------------------------------------------------------------- Tagging build1 for 11.5.7 -----BEGIN PGP SIGNATURE----- iQJLBAABCAA1FiEEvnyRTMkiztnZPSO33kc2A2PzSywFAmNhhyMXHHJpY2hhcmRA dG9ycHJvamVjdC5vcmcACgkQ3kc2A2PzSyzcSg/+NJItllfAo70oSOyIu+9/uEPl 4gAn8NQPy5JLkrT0EYpP7cGmbkGakSQGC/AOo0zAD6ryqN9bD14iaBgtaajlKZtO LIXTwkq4yFVnJr9sVWb02XA3snmMXWh3/7ykN0a36NRN5XmIC1K/BqhhxIhJ/ndi u+UT6aaD7jY7r0WYNjSdTccIP7S1kxLrjnwXE8V0IxYpulYrauvNApcpCGuRD7+w oEIb5r5bDDEZTYkO+mR+6kJGBKQqM0AAqx7VjA3/nwDZMLUB2RiY6QFMVHEvb81W b9ADigkPtkUIqIx7drVEnkBvvgKLHlnpqC1h4Ai0LjewhvAA2Hv/ZIUGZJ43iou9 bBmiS+LoSCdatWjzEhOGledKaXMHpW80E/wE4WKwNofEkdsSr1Ug/YfKiv0NejMq Qs8NorjAfbY4PK9tB6FI8IPPnv2JntfTCoR9DDcK4f/bcvBKPyY0tLUHyLaWYBKH pK6FranJ5S1v0vPSLQTRKKgLrXImfDjkPe4C/J+jojD7ne/Iw6z65JbFJAxEJpC1 XqGFA3OuUYWDxz3+k3AHJTFPs9H9XWRL3bnk4ghncpLuqrjCn/zmXlj9n1Gs6iRN ulHKwzO6h1pWbHlVFKP8D/KNWWn64bXzogAcrTVRwvLTF4oGtBa1czYxLM6NOKlh /BP0C9uazqzEBEwA010= =eKb9 -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch maint-11.5 updated: Bug 40672: Prepare stable release 11.5.7
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new 6d4441e0 Bug 40672: Prepare stable release 11.5.7 6d4441e0 is described below commit 6d4441e082bd7c20b06071cab037b835573d877a Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Nov 1 20:43:13 2022 +0000 Bug 40672: Prepare stable release 11.5.7 --- projects/firefox/config | 2 +- .../tor-browser/Bundle-Data/Docs/ChangeLog.txt | 101 +++++++++++++++++++++ rbm.conf | 5 +- 3 files changed, 104 insertions(+), 4 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index 626450e4..5455aac7 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build5' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build6' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 1381e73a..2e438bbb 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,104 @@ +Tor Browser 11.5.7 - November 2 2022 + * Windows + macOS + Linux + * Bug 41413: Backup intl.locale.requested in 11.5.x [tor-browser] + +Tor Browser 12.0a4 - October 28 2022 + * All Plaforms + * Update Translations + * Bug 24686: In Tor Browser context, should network.http.tailing.enabled be set to false? [tor-browser] + * Bug 27127: Audit and enable HTTP/2 push [tor-browser] + * Bug 40057: ensure that CSS4 system colors are not a fingerprinting vector [tor-browser] + * Bug 40058: ensure no locale leaks from new Intl APIs [tor-browser] + * Bug 40251: Clear obsolete prefs after torbutton!27 [tor-browser] + * Bug 40406: Remove Presentation API related prefs [tor-browser] + * Bug 40465: Onion Authentication fails when connecting to a subdomain [tor-browser] + * Bug 40491: Don't auto-pick a v2 address when it's in Onion-Location header [tor-browser] + * Bug 40494: Update Startpage and Blockchair onion search providers [tor-browser] + * Bug 40629: Bump snowflake version to 9ce1de4eee4e [tor-browser-build] + * Bug 40633: Remove Team Cymru hard-coded bridges [tor-browser-build] + * Bug 40646: Don't build Español AR anymore [tor-browser-build] + * Bug 40649: Update meek default bridge [tor-browser-build] + * Bug 40654: Enable uTLS and use the full bridge line for snowflake [tor-browser-build] + * Bug 40665: Snowflake bridge parameters are too long (535 bytes) in 11.5.5 [tor-browser-build] + * Bug 41098: Compare Tor Browser's and GeckoView's profiles [tor-browser] + * Bug 41154: Review Mozilla 1765167: Deprecate Cu.import [tor-browser] + * Bug 41164: Add some #define for the base-browser section [tor-browser] + * Bug 41306: Typo "will not able" in "Tor unexpectedly exited" dialog [tor-browser] + * Bug 41317: Tor Browser leaks banned ports in network.security.ports.banned [tor-browser] + * Bug 41326: Update preference for remoteRecipes [tor-browser] + * Bug 41345: fonts: windows whitelist contains supplemental fonts [tor-browser] + * Bug 41398: Disable Web MIDI API [tor-browser] + * Windows + macOS + Linux + * Update Firefox to 102.4.0esr + * Bug 17400: Decide how to use the multi-lingual Tor Browser in the alpha/release series [tor-browser] + * Bug 40638: Visit our website link after build-to-build upgrade in Nightly channel points to old v2 onion [tor-browser-build] + * Bug 40648: Do not customize update.locale in multi-lingual builds [tor-browser-build] + * Bug 40853: use Subprocess.jsm to launch tor [tor-browser] + * Bug 40933: Migrate remaining tor-launcher functionality to tor-browser [tor-browser] + * Bug 41117: Review Mozilla 1512851: Add Share Menu to File Menu on macOS [tor-browser] + * Bug 41323: Tor-ify notification bar gradient colors (branding) [tor-browser] + * Bug 41337: Add a title to the new identity confirmation [tor-browser] + * Bug 41342: Update the New Identity dialog to the proton modal style [tor-browser] + * Bug 41344: Authenticated Onion Services do not prompt for auth key in 12.0 alpha series [tor-browser] + * Bug 41352: Update or drop the show manual logic in torbutton [tor-browser] + * Bug 41369: Consider a different list-order for locales in language menu [tor-browser] + * Bug 41374: Missing a few torconnect strings in the DTD [tor-browser] + * Bug 41377: Hide `Search for more languages...` from Language selector in multi-locale build [tor-browser] + * Bug 41385: Bootstrap failure is logged but not raised up to about:torconnect [tor-browser] + * Bug 41386: The new tor-launcher has a problem when another Tor is running [tor-browser] + * Bug 41387: New identity and new circuit ended up inside history [tor-browser] + * Bug 41400: Missing onionAuthViewKeys causes "Onion Services Keys" dialog to be empty. [tor-browser] + * Bug 41401: Missing some mozilla icons because we still loading them from "chrome://browser/skin" rather than "chrome://global/skin/icons" [tor-browser] + * Bug 41404: Fix blockchair-onion search extension [tor-browser] + * Windows + * Bug 41149: Review Mozilla 1762576: Firefox is not allowing Symantec DLP to inject DLL into the browser for Data Loss Prevention software [tor-browser] + * Bug 41278: Create Tor Browser styled pdf logo similar to the vanilla Firefox one [tor-browser] + * macOS + * Bug 41294: Bookmarks manager broken in 12.0a2 on MacOS [tor-browser] + * Bug 41348: cherry-pick macOS OSSpinLock replacements [tor-browser] + * Bug 41370: Find a way to ship custom default bookmarks without changing language-packs on macOS [tor-browser] + * Bug 41372: "Japanese" language menu item is localised in multi-locale testbuild (on mac OS) [tor-browser] + * Bug 41379: The new tor-launcher is broken also on macOS [tor-browser] + * Linux + * Bug 40359: Tor Browser Launcher has Wrong Icon [tor-browser] + * Android + * Update GeckoView to 102.4.0esr + * Bug 40631: Stop bundling HTTPS Everywhere on Android [tor-browser-build] + * Bug 41360: Backport Android-specific Firefox 106 to ESR 102.4-based Tor Browser [tor-browser] + * Bug 41394: Implement a setting to always prefer onion sites [tor-browser] + * Build + * All Platforms + * Update Go to 1.19.2 + * Bug 23656: Use .mozconfig files in tor-browser repo for rbm builds [tor-browser-build] + * Bug 28754: make testbuild-android-armv7 stalls during sha256sum step [tor-browser-build] + * Bug 40397: Create a new build target to package tor daemon, pluggable transports and dependencies [tor-browser-build] + * Bug 40619: Make sure translations are taken from gitlab.tpo and not git.tpo [tor-browser-build] + * Bug 40627: Add boklm to torbutton.gpg [torbrowser-build] + * Bug 40634: Update the project/browser path in tools/changelog-format-blog-post and other files [tor-browser-build] + * Bug 40636: Remove https-everywhere from projects/browser/config [tor-browser-build] + * Bug 40639: Remove tor-launcher references [tor-browser-build] + * Bug 40643: Update Richard's key in torbutton.gpg [tor-browser-build] + * Bug 40655: Published tor-expert-bundle tar.gz files should not include their tor-browser-build build id [tor-browser-build] + * Bug 40656: Improve get_last_build_version in tools/signing/nightly/sign-nightly [tor-browser-build] + * Bug 40658: Create an anticensorship team keyring [tor-browser-build] + * Bug 40660: Update changelog-format-blog-post script to point gitlab rather than gitolite [tor-browser-build] + * Bug 40662: Make base-browser nightly build from tag [tor-browser-build] + * Bug 40671: Update langpacks URL [tor-browser-build] + * Bug 41308: Use the same branch for Desktop and GeckoView [tor-browser] + * Bug 41340: Opt in to some of the NIGHTLY_BUILD features [tor-browser] + * Bug 41343: Add -without-wam-sandboxed-libraries to mozconfig-linux-x86_64-dev for local builds [tor-browser] + * Bug 40585: Prune the manual more [tor-browser-build] + * Bug 40663: Do not ship bookmarks in tor-browser-build anymore [tor-browser-build] + * Bug 40669: Remove HTTPS-Everywhere keyring [tor-browser-build] + * Bug 41357: Enable browser toolbox debugging by default for dev builds [tor-browser] + * macOS + * Bug 40158: Add support for macOS AArch64 [tor-browser-build] + * Bug 40464: go 1.18 fails to build on macOS [tor-browser-build] + * Linux + * Bug 40659: Error building goservice for linux in nightly build [tor-browser-build] + * Android + * Bug 40640: Extract Gradle in the toolchain setup [tor-browser-build] + Tor Browser 11.5.6 - October 25 2022 * All Plaforms * Bug 40665: Shorten snowflake bridge line [tor-browser-build] diff --git a/rbm.conf b/rbm.conf index 7f3ac153..0cc1d1cd 100644 --- a/rbm.conf +++ b/rbm.conf @@ -71,11 +71,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '11.5.6' + torbrowser_version: '11.5.7' torbrowser_build: 'build1' torbrowser_incremental_from: - - 11.5.4 - - 11.5.5 + - 11.5.6 project_name: tor-browser multi_lingual: 0 build_mar: 1 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] annotated tag tor-browser-91.13.0esr-11.5-1-build6 created (now f445f71f4194)
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to annotated tag tor-browser-91.13.0esr-11.5-1-build6 in repository tor-browser. at f445f71f4194 (tag) tagging a83148635e482714e3c2a38d02b19f7a2241d691 (commit) replaces tor-browser-91.13.0esr-11.5-1-build5 by Richard Pospesel on Tue Nov 1 20:27:37 2022 +0000 - Log ----------------------------------------------------------------- Tagging build6 for 91.13esr-based stable -----BEGIN PGP SIGNATURE----- iQJLBAABCAA1FiEEvnyRTMkiztnZPSO33kc2A2PzSywFAmNhgWQXHHJpY2hhcmRA dG9ycHJvamVjdC5vcmcACgkQ3kc2A2PzSyzRkA/+ML+z4vokNO9R/nfKqXUvkcUM yf21Q6Oy/q9rChrZTKm9+XQZqwL3dGT3OBIqZ20guSFZUqLrUhA4x7BqFjuqIdh/ j2VLDH6xZqdpLvK9l7VoTCWMwLty03YuTadRp1qI1u2HsnzB9DSdfKqII8N0PR+W ZOkYOa0zFqruLaFzavOwfg8FCMhRnYhxbdQe/TEM7PPOuieJ6rQtUzK5AlNSWjTR /2/S74lZHGqLSbbSfIuZG+Vib22pIQd18Wr7PreCj+ImWwEZmotJQxUpdGO5wsJi b5sd8oEe/3RlBV+0gCaZmeAjqOG50Jy3yQ+m5olVJz9XCsIx1ORNOvXvclxuKwBb mG4NWvkHffeZRNQ1OJyKSfdO2E40rdkIzWbF9NJQOM4Uod7ek5Z6Nb50rRhm3h+t 20IGq281oE7hVLSEp4SuY67WBgYDZyr68zIn+tkyFTBLsA1BNwUCfZFSF1IsJW/w 47PufYxCvN8Osg+uP4qC4KN4oKZe5o335Gybw9LGkCtmE2ZhPtUJkZ3fn8YJflZa QJor4FfDRABVNNZdXZNGEAuV3jnDLUwnT4OHoBTkdaQi+FByBvVK+o0/FH4QTSj3 UN9qn7VigyW/IyGRS+07NoHFwrLXVQxc5Nh9hsahDU9mK4OYtVWPLwNeoxTNsQNi PwH/FH8N2zGzfShDsl4= =+Z0Y -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-91.13.0esr-11.5-1 updated: Bug 41413: reset install supplied locale pref so it persists
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-91.13.0esr-11.5-1 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-91.13.0esr-11.5-1 by this push: new a83148635e48 Bug 41413: reset install supplied locale pref so it persists a83148635e48 is described below commit a83148635e482714e3c2a38d02b19f7a2241d691 Author: Dan Ballard <dan(a)mindstab.net> AuthorDate: Tue Nov 1 08:31:40 2022 -0700 Bug 41413: reset install supplied locale pref so it persists --- browser/components/BrowserGlue.jsm | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/browser/components/BrowserGlue.jsm b/browser/components/BrowserGlue.jsm index d41934720c25..1e6592909968 100644 --- a/browser/components/BrowserGlue.jsm +++ b/browser/components/BrowserGlue.jsm @@ -1416,6 +1416,10 @@ BrowserGlue.prototype = { Services.prefs.clearUserPref("security.enterprise_roots.auto-enabled"); } + if (!Services.prefs.prefHasUserValue("intl.locale.requested")) { + Services.prefs.setStringPref("intl.locale.requested", Services.prefs.getStringPref("intl.locale.requested", "")); + } + if (!Services.prefs.prefHasUserValue(PREF_PDFJS_ISDEFAULT_CACHE_STATE)) { PdfJs.checkIsDefault(this._isNewProfile); } -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch maint-11.5 updated: Bug 41413: make injected intl.locale.requested sticky
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new ab33dec8 Bug 41413: make injected intl.locale.requested sticky ab33dec8 is described below commit ab33dec8266ccf2cfc6e431fc37fb1f0529acf60 Author: Dan Ballard <dan(a)mindstab.net> AuthorDate: Mon Oct 31 12:38:24 2022 -0700 Bug 41413: make injected intl.locale.requested sticky --- projects/tor-browser/build | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/tor-browser/build b/projects/tor-browser/build index 041e5f0d..691bac90 100644 --- a/projects/tor-browser/build +++ b/projects/tor-browser/build @@ -357,7 +357,7 @@ cp $rootdir/[% c('input_files_by_name/firefox') %]/mar-tools-*.zip "$OUTDIR"/ mkdir -p defaults/preferences cp $rootdir/000-tor-browser.js defaults/preferences/ # Set the locale of the bundle. - echo "pref(\"intl.locale.requested\", \"[% lang %]\");" >> defaults/preferences/000-tor-browser.js + echo "pref(\"intl.locale.requested\", \"[% lang %]\", sticky);" >> defaults/preferences/000-tor-browser.js [% c("touch") %] defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Bug 40674: Add Secondary Snowflake Bridgeline
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new c9800a15 Bug 40674: Add Secondary Snowflake Bridgeline c9800a15 is described below commit c9800a153ebd5f17e5a84b2a417b43e0d4ec72fc Author: Shelikhoo <xiaokangwang(a)outlook.com> AuthorDate: Tue Nov 1 11:23:03 2022 +0000 Bug 40674: Add Secondary Snowflake Bridgeline --- projects/common/bridges_list.snowflake.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/projects/common/bridges_list.snowflake.txt b/projects/common/bridges_list.snowflake.txt index 7a4aaf92..70fdca5d 100644 --- a/projects/common/bridges_list.snowflake.txt +++ b/projects/common/bridges_list.snowflake.txt @@ -1 +1,2 @@ snowflake 192.0.2.3:80 2B280B23E1107BB62ABFC40DDCC8824814F80A72 fingerprint=2B280B23E1107BB62ABFC40DDCC8824814F80A72 url=https://snowflake-broker.torproject.net.global.prod.fastly.net/ front=cdn.sstatic.net ice=stun:stun.l.google.com:19302,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.v [...] +snowflake 192.0.2.4:80 8838024498816A039FCBBAB14E6F40A0843051FA fingerprint=8838024498816A039FCBBAB14E6F40A0843051FA url=https://snowflake-broker.torproject.net.global.prod.fastly.net/ front=cdn.sstatic.net ice=stun:stun.l.google.com:19302,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.v [...] -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.4.0esr-12.0-2 updated: fixup! Firefox preference overrides.
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.4.0esr-12.0-2 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.4.0esr-12.0-2 by this push: new ee9f1ebdba26 fixup! Firefox preference overrides. ee9f1ebdba26 is described below commit ee9f1ebdba2693d5b8f53e6c4ea33f71ee291042 Author: hackademix <giorgio(a)maone.net> AuthorDate: Sat Oct 29 20:36:26 2022 +0200 fixup! Firefox preference overrides. --- browser/app/profile/001-base-profile.js | 1 + 1 file changed, 1 insertion(+) diff --git a/browser/app/profile/001-base-profile.js b/browser/app/profile/001-base-profile.js index e0634b5aac6c..caf2f00ad8d6 100644 --- a/browser/app/profile/001-base-profile.js +++ b/browser/app/profile/001-base-profile.js @@ -217,6 +217,7 @@ pref("privacy.resistFingerprinting.letterboxing", true); // not leak that difference if possible. pref("dom.netinfo.enabled", false); pref("network.http.referer.defaultPolicy", 2); // Bug 32948: Make referer behavior consistent regardless of private browing mode status +pref("network.http.referer.XOriginTrimmingPolicy", 2); // Bug 17228: Force trim referer to scheme+host+port in cross-origin requests pref("media.videocontrols.picture-in-picture.enabled", false); // Bug 40148: disable until audited in #40147 pref("network.http.referer.hideOnionSource", true); // Bug 40463: Disable Windows SSO -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Update the Release Prep - Alpha issue template
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 1c75490b Update the Release Prep - Alpha issue template 1c75490b is described below commit 1c75490b74fbfdded54cc3bbb2924a8fe3421707 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Oct 25 18:02:18 2022 +0000 Update the Release Prep - Alpha issue template --- .gitlab/issue_templates/Release Prep - Alpha.md | 143 +++++++++++------------- 1 file changed, 67 insertions(+), 76 deletions(-) diff --git a/.gitlab/issue_templates/Release Prep - Alpha.md b/.gitlab/issue_templates/Release Prep - Alpha.md index d396506f..0291960f 100644 --- a/.gitlab/issue_templates/Release Prep - Alpha.md +++ b/.gitlab/issue_templates/Release Prep - Alpha.md @@ -45,43 +45,36 @@ <details> <summary>Android</summary> -### **tba-translation** : https://gitlab.torproject.org/tpo/translation.git -- [ ] Fetch latest and identify new `HEAD` of `fenix-torbrowserstringsxml` branch - - [ ] `origin/fenix-torbrowserstringsxml` : `<INSERT COMMIT HASH HERE>` - -### **tor-android-service** ***(Optional)***: https://gitlab.torproject.org/tpo/applications/tor-android-service.git -- [ ] Fetch latest and identify new `HEAD` of `main` branch - - [ ] `origin/main` : `<INSERT COMMIT HASH HERE>` - ### ***Security Vulnerabilities Backport*** : https://www.mozilla.org/en-US/security/advisories/ +- **NOTE** : this work may have already occurred in the analogous stable release prep issue +- [ ] Create tor-browser issue `Backport Android-specific Firefox $(RR_VERSION) to ESR $(ESR_VERSION)-based Tor Browser` + - [ ] Link new backport issue to this release prep issue - [ ] Go through any `Security Vulnerabilities fixed in Firefox $(RR_VERSION)` (or similar) and create list of CVEs which affect Android that need to be a backported - Potentially Affected Components: - `firefox` - `application-services` - `android-components` - `fenix` -- [ ] Create issue for each backport in `tor-browser` and merge requests for `cherry-pick`'d fixes in each affected component -- [ ] Link each created backport issue to this release prep issue -### **application-services** : *TODO: we need to setup a gitlab copy of this repo that we can apply security backports to* -- [ ] ***(Optional)*** Backport any Android-specific security fixes from Firefox rapid-release +### **application-services** ***(Optional)*** : *TODO: we need to setup a gitlab copy of this repo that we can apply security backports to* +- [ ] Backport any Android-specific security fixes from Firefox rapid-release - [ ] Sign/Tag commit: - Tag : `application-services-$(ESR_VERSION)-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(BUILD_N)` - - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based (alpha|stable)` + - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based alpha` - [ ] Push tag to `origin` -### **android-components** : https://gitlab.torproject.org/tpo/applications/android-components.git -- [ ] ***(Optional)*** Backport any Android-specific security fixes from Firefox rapid-release +### **android-components** ***(Optional)*** : https://gitlab.torproject.org/tpo/applications/android-components.git +- [ ] Backport any Android-specific security fixes from Firefox rapid-release - [ ] Sign/Tag commit: - Tag : `android-components-$(ESR_VERSION)-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(BUILD_N)` - - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based (alpha|stable)` + - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based alpha)` - [ ] Push tag to `origin` -### **fenix** : https://gitlab.torproject.org/tpo/applications/fenix.git -- [ ] ***(Optional)*** Backport any Android-specific security fixes from Firefox rapid-release +### **fenix** ***(Optional)*** : https://gitlab.torproject.org/tpo/applications/fenix.git +- [ ] Backport any Android-specific security fixes from Firefox rapid-release - [ ] Sign/Tag commit: - Tag : `tor-browser-$(ESR_VERSION)-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(BUILD_N)` - - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based (alpha|stable)` + - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based alpha)` - [ ] Push tag to `origin` </details> @@ -111,13 +104,13 @@ - [ ] `$(DIFF_TOOL) current_patchset.dif rebased_patchset.deff` - [ ] Open MR for the rebase - [ ] Sign/Tag `base-browser` commit: - - **NOTE** : Currently we are using the `Bug 27511: Add new identity button to toolbar` commit as the dividing line between `base-browser` and `tor-browser` - - **NOTE** : If we need to prepare a release without a rebase that includes a patch that needs to be in the `base-browser` section (such as a Mozilla chemspill release) we will create an entirely new branch with a `-2` suffix + - **NOTE** : Currently we are using the `Bug 40926: Implemented the New Identity feature` commit as the dividing line between `base-browser` and `tor-browser` + - **NOTE** : If we need to prepare a release without a rebase that includes a patch that needs to be in the `base-browser` section (such as a Mozilla chemspill release) we will create an entirely new branch with a `-2` suffix (or increment higher as appropriate) - Tag : `base-browser-$(ESR_VERSION)esr-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-build1` - - Message: `Tagging build1 for $(ESR_VERSION)esr-based (alpha|stable)` + - Message: `Tagging build1 for $(ESR_VERSION)esr-based alpha` - [ ] Sign/Tag `tor-browser` commit : - Tag : `tor-browser-$(ESR_VERSION)esr-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(FIREFOX_BUILD_N)` - - Message : `Tagging $(FIREFOX_BUILD_N) for $(ESR_VERSION)esr-based (alpha|stable)` + - Message : `Tagging $(FIREFOX_BUILD_N) for $(ESR_VERSION)esr-based alpha` - [ ] Push tag to `origin` - [ ] Update Gitlab Default Branch to new Alpha branch: https://gitlab.torproject.org/tpo/applications/tor-browser/-/settings/repos… @@ -127,7 +120,7 @@ <summary>Build/Signing/Publishing</summary> ### tor-browser-build: https://gitlab.torproject.org/tpo/applications/tor-browser-build.git -Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in the various `$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-maint` (and possibly more specific) branches +Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)` (and possibly more specific) branches - [ ] Update `rbm.conf` - [ ] `var/torbrowser_version` : update to next version @@ -144,9 +137,9 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `git_hash` : update with `HEAD` commit of project's `base-browser` branch - [ ] Update `projects/tba-translations/config`: - [ ] `git_hash` : update with `HEAD` commit of project's `fenix-torbrowserstringsxml` branch -- [ ] Update `projects/tor-android-service/config` +- [ ] ***(Optional)*** Update `projects/tor-android-service/config` - [ ] `git_hash` : update with `HEAD` commit of project's `main` branch -- [ ] Update `projects/application-services/config`: +- [ ] ***(Optional)*** Update `projects/application-services/config`: **NOTE** we don't have any of our own patches for this project - [ ] `git_hash` : update to appropriate git commit associated with $(ESR_VERSION) - [ ] Update `projects/android-components/config`: @@ -160,11 +153,11 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] ***(Optional)*** If new version available, update `noscript` section of `input_files` in `projects/browser/config` - [ ] `URL` - [ ] `sha256sum` -- [ ] Check for OpenSSL updates here : https://github.com/openssl/openssl/tags +- [ ] Check for OpenSSL updates here : https://www.openssl.org/source/ - [ ] ***(Optional)*** If new 1.X.Y series tag available, update `projects/openssl/config` - [ ] `version` : update to next 1.X.Y release tag - [ ] `input_files/sha256sum` : update to sha256 sum of source tarball -- [ ] Check for tor updates here : https://gitlab.torproject.org/tpo/core/tor/-/tags ; Tor Browser Alpha uses `-alpha` tagged tor, while stable uses the stable series +- [ ] Check for tor updates here : https://gitlab.torproject.org/tpo/core/tor/-/tags ; Tor Browser Alpha uses latest `-alpha` tagged tor (or latest of stable if newer) - [ ] ***(Optional)*** Update `projects/tor/config` - [ ] `version` : update to next release tag - [ ] Check for go updates here : https://golang.org/dl @@ -186,7 +179,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] Ensure ChangeLog.txt is sync'd between alpha and stable branches - [ ] Open MR with above changes - [ ] Begin build on `$(BUILD_SERVER)` (and fix any issues which come up) -- [ ] Sign/Tag commit : `make signtag-(alpha|release)` +- [ ] Sign/Tag commit : `make signtag-alpha` - [ ] Push tag to origin ### notify stakeholders @@ -197,52 +190,22 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] Email Tails dev mailing list: tails-dev(a)boum.org - [ ] Provide links to unsigned builds on `$(BUILD_SERVER)` -### blog: https://gitlab.torproject.org/tpo/web/blog.git - -- [ ] Duplicate previous Stable or Alpha release blog post as appropriate to new directory under `content/blog/new-release-tor-browser-$(TOR_BROWSER_VERSION)` and update with info on release : - - [ ] Update Tor Browser version numbers - - [ ] Note any ESR rebase - - [ ] Note any Rapid Release rebase - - [ ] Link to any Firefox security updates - - [ ] Note any updates to : - - [ ] tor - - [ ] OpenSSL - - [ ] go - - [ ] NoScript - - [ ] Convert ChangeLog.txt to markdown format used here by : `tor-browser-build/tools/changelog-format-blog-post` -- [ ] Push to origin as new branch, open 'Draft :' MR -- [ ] Remove `Draft:` from MR once signed-packages are uploaded -- [ ] Merge -- [ ] Publish after CI passes - -### website: https://gitlab.torproject.org/tpo/web/tpo.git -- [ ] `databags/versions.ini` : Update the downloads versions - - `torbrowser-stable/version` : sort of a catch-all for latest stable version - - `torbrowser-stable/win32` : tor version in the expert bundle - - `torbrowser-*-stable/version` : platform-specific stable versions - - `torbrowser-*-alpha/version` : platform-specific alpha versions - - `tor-stable`,`tor-alpha` : set by tor devs, do not touch -- [ ] Push to origin as new branch, open 'Draft :' MR -- [ ] Remove `Draft:` from MR once signed-packages are uploaded -- [ ] Merge -- [ ] Publish after CI passes - ### signing + publishing - [ ] Ensure builders have matching builds - [ ] On `$(STAGING_SERVER)`, ensure updated: - [ ] `tor-browser-build/tools/signing/set-config` - - [ ] `NSS_DB_DIR` : location of the `nssdb7` directory + - `NSS_DB_DIR` : location of the `nssdb7` directory - [ ] `tor-browser-build/tools/signing/set-config.hosts` - - [ ] `ssh_host_builder` : ssh hostname of machine with unsigned builds + - `ssh_host_builder` : ssh hostname of machine with unsigned builds - **NOTE** : `tor-browser-build` is expected to be in the `$HOME` directory) - - [ ] `ssh_host_linux_signer` : ssh hostname of linux signing machine - - [ ] `ssh_host_macos_signer` : ssh hostname of macOS signing machine + - `ssh_host_linux_signer` : ssh hostname of linux signing machine + - `ssh_host_macos_signer` : ssh hostname of macOS signing machine - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` - - [ ] `macos_notarization_user` : the email login for a tor notariser Apple Developer account + - `macos_notarization_user` : the email login for a tor notariser Apple Developer account - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` - - [ ] `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - - [ ] `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) - - [ ] `tbb_version_type` : either `alpha` for alpha releases or `release` for stable releases + - `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) + - `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) + - `tbb_version_type` : either `alpha` for alpha releases or `release` for stable releases - [ ] On `$(STAGING_SERVER)` in a separate `screen` session, run the macOS proxy script: - `cd tor-browser-build/tools/signing/` - `./macos-signer-proxy` @@ -259,23 +222,51 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `/srv/cdn-master.torproject.org/htdocs/aus1/torbrowser` - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - - [ ] Enable update responses : - - [ ] alpha: `./deploy_update_responses-alpha.sh` - - [ ] release: `./deploy_update_responses-release.sh` + - [ ] Enable update responses : `./deploy_update_responses-alpha.sh` - [ ] Publish APKs to Google Play: - - [ ] Log into https://play.google.com/apps/publish - - [ ] Select `Tor Browser (Alpha)` app - - [ ] Navigate to `Release > Production` and click `Create new release` button + - Log into https://play.google.com/apps/publish + - Select `Tor Browser (Alpha)` app + - Navigate to `Release > Production` and click `Create new release` button - [ ] Upload the `*.multi.apk` APKs - - [ ] If necessary, update the 'Release Name' (should be automatically populated) + - If necessary, update the 'Release Name' (should be automatically populated) - [ ] Update Release Notes - - [ ] Next to 'Release notes', click `Copy from a previous release` + - Next to 'Release notes', click `Copy from a previous release` - [ ] Edit blog post url to point to most recent blog post - - [ ] Save, review, and configure rollout percentage + - Save, review, and configure rollout percentage - [ ] 25% rollout when publishing a scheduled update - [ ] 100% rollout when publishing a security-driven release - [ ] Update rollout percentage to 100% after confirmed no major issues +### website: https://gitlab.torproject.org/tpo/web/tpo.git +- [ ] `databags/versions.ini` : Update the downloads versions + - `torbrowser-stable/version` : sort of a catch-all for latest stable version + - `torbrowser-stable/win32` : tor version in the expert bundle + - `torbrowser-*-stable/version` : platform-specific stable versions + - `torbrowser-*-alpha/version` : platform-specific alpha versions + - `tor-stable`,`tor-alpha` : set by tor devs, do not touch +- [ ] Push to origin as new branch, open 'Draft :' MR +- [ ] Remove `Draft:` from MR once signed-packages are uploaded +- [ ] Merge +- [ ] Publish after CI passes and builds are published + +### blog: https://gitlab.torproject.org/tpo/web/blog.git + +- [ ] Duplicate previous Stable or Alpha release blog post as appropriate to new directory under `content/blog/new-release-tor-browser-$(TOR_BROWSER_VERSION)` and update with info on release : + - [ ] Update Tor Browser version numbers + - [ ] Note any ESR rebase + - [ ] Link to any Firefox security updates from ESR upgrade + - [ ] Link to any Android-specific security backports + - [ ] Note any updates to : + - tor + - OpenSSL + - NoScript + - [ ] Convert ChangeLog.txt to markdown format used here by : + - `tor-browser-build/tools/changelog-format-blog-post` +- [ ] Push to origin as new branch, open `Draft:` MR +- [ ] Remove `Draft:` from MR once signed-packages are uploaded +- [ ] Merge +- [ ] Publish after CI passes and website has been updated + ### tor-announce mailing list - [ ] Send an email to tor-announce(a)lists.torproject.org, using the same content as the blog post and subject "Tor Browser $version is released". -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0