- tbb-commits - lists.torproject.org

[tor-browser-bundle/hardened-builds] Bug 15852: Remove/synchronize Torbutton SOCKS pref logic
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit 36842fddafcf79bab6911def2ec4133826bc28f9 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Mon Sep 19 12:02:21 2016 -0400 Bug 15852: Remove/synchronize Torbutton SOCKS pref logic Remove from extension-overrides.js the Torbutton preferences that are no longer used. --- .../Browser/profile.default/preferences/extension-overrides.js | 9 --------- .../Browser/profile.default/preferences/extension-overrides.js | 9 --------- .../Browser/profile.default/preferences/extension-overrides.js | 9 --------- 3 files changed, 27 deletions(-) diff --git a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js index 865398e..3ccab99 100644 --- a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js @@ -2,15 +2,6 @@ # Tor Browser Bundle # Do not edit this file. -# Torbutton Preferences: -pref("extensions.torbutton.fresh_install", false); -pref("extensions.torbutton.tor_enabled", true); -pref("extensions.torbutton.proxies_applied", true); -pref("extensions.torbutton.settings_applied", true); -pref("extensions.torbutton.socks_host", "127.0.0.1"); -pref("extensions.torbutton.socks_port", 9150); -pref("extensions.torbutton.tz_string", "UTC+00:00"); - # HTTPS Everywhere Preferences: pref("extensions.https_everywhere._observatory.popup_shown", true); pref("extensions.https_everywhere.toolbar_hint_shown", true); diff --git a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js index 865398e..3ccab99 100644 --- a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js @@ -2,15 +2,6 @@ # Tor Browser Bundle # Do not edit this file. -# Torbutton Preferences: -pref("extensions.torbutton.fresh_install", false); -pref("extensions.torbutton.tor_enabled", true); -pref("extensions.torbutton.proxies_applied", true); -pref("extensions.torbutton.settings_applied", true); -pref("extensions.torbutton.socks_host", "127.0.0.1"); -pref("extensions.torbutton.socks_port", 9150); -pref("extensions.torbutton.tz_string", "UTC+00:00"); - # HTTPS Everywhere Preferences: pref("extensions.https_everywhere._observatory.popup_shown", true); pref("extensions.https_everywhere.toolbar_hint_shown", true); diff --git a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js index 865398e..3ccab99 100644 --- a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js @@ -2,15 +2,6 @@ # Tor Browser Bundle # Do not edit this file. -# Torbutton Preferences: -pref("extensions.torbutton.fresh_install", false); -pref("extensions.torbutton.tor_enabled", true); -pref("extensions.torbutton.proxies_applied", true); -pref("extensions.torbutton.settings_applied", true); -pref("extensions.torbutton.socks_host", "127.0.0.1"); -pref("extensions.torbutton.socks_port", 9150); -pref("extensions.torbutton.tz_string", "UTC+00:00"); - # HTTPS Everywhere Preferences: pref("extensions.https_everywhere._observatory.popup_shown", true); pref("extensions.https_everywhere.toolbar_hint_shown", true);

1 0

[tor-browser-bundle/master] Bug 15852: Remove/synchronize Torbutton SOCKS pref logic
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit 0a5e21b00533960317352ac27db996258544eac6 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Mon Sep 19 12:02:21 2016 -0400 Bug 15852: Remove/synchronize Torbutton SOCKS pref logic Remove from extension-overrides.js the Torbutton preferences that are no longer used. --- .../Browser/profile.default/preferences/extension-overrides.js | 9 --------- .../Browser/profile.default/preferences/extension-overrides.js | 9 --------- .../Browser/profile.default/preferences/extension-overrides.js | 9 --------- 3 files changed, 27 deletions(-) diff --git a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js index 865398e..3ccab99 100644 --- a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js @@ -2,15 +2,6 @@ # Tor Browser Bundle # Do not edit this file. -# Torbutton Preferences: -pref("extensions.torbutton.fresh_install", false); -pref("extensions.torbutton.tor_enabled", true); -pref("extensions.torbutton.proxies_applied", true); -pref("extensions.torbutton.settings_applied", true); -pref("extensions.torbutton.socks_host", "127.0.0.1"); -pref("extensions.torbutton.socks_port", 9150); -pref("extensions.torbutton.tz_string", "UTC+00:00"); - # HTTPS Everywhere Preferences: pref("extensions.https_everywhere._observatory.popup_shown", true); pref("extensions.https_everywhere.toolbar_hint_shown", true); diff --git a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js index 865398e..3ccab99 100644 --- a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js @@ -2,15 +2,6 @@ # Tor Browser Bundle # Do not edit this file. -# Torbutton Preferences: -pref("extensions.torbutton.fresh_install", false); -pref("extensions.torbutton.tor_enabled", true); -pref("extensions.torbutton.proxies_applied", true); -pref("extensions.torbutton.settings_applied", true); -pref("extensions.torbutton.socks_host", "127.0.0.1"); -pref("extensions.torbutton.socks_port", 9150); -pref("extensions.torbutton.tz_string", "UTC+00:00"); - # HTTPS Everywhere Preferences: pref("extensions.https_everywhere._observatory.popup_shown", true); pref("extensions.https_everywhere.toolbar_hint_shown", true); diff --git a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js index 865398e..3ccab99 100644 --- a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js @@ -2,15 +2,6 @@ # Tor Browser Bundle # Do not edit this file. -# Torbutton Preferences: -pref("extensions.torbutton.fresh_install", false); -pref("extensions.torbutton.tor_enabled", true); -pref("extensions.torbutton.proxies_applied", true); -pref("extensions.torbutton.settings_applied", true); -pref("extensions.torbutton.socks_host", "127.0.0.1"); -pref("extensions.torbutton.socks_port", 9150); -pref("extensions.torbutton.tz_string", "UTC+00:00"); - # HTTPS Everywhere Preferences: pref("extensions.https_everywhere._observatory.popup_shown", true); pref("extensions.https_everywhere.toolbar_hint_shown", true);

1 0

[tor-browser-bundle/hardened-builds] Nightly version bumps
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit ef8d6d484d0bbd4692e882cd1f2eeda1efe437d0 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 26 07:52:19 2016 +0000 Nightly version bumps Tor Browser 45.4.0 and OpenSSL 1.0.2i --- gitian/versions.nightly | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 99d7d7e..d99711c 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -17,7 +17,7 @@ MULTI_LINGUAL=1 VERIFY_TAGS=0 -FIREFOX_VERSION=45.3.0esr +FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=default @@ -52,7 +52,7 @@ SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4 -OPENSSL_VER=1.0.2h +OPENSSL_VER=1.0.2i GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -107,7 +107,7 @@ NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2 # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919 +OPENSSL_HASH=9287487d11c9545b6efb287cdb70535d4e9b284dd10d51441d9b9963d000de6f GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc

1 0

[tor-browser-bundle/master] Nightly version bumps
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit 97aa7318fce7df592d2c25955f2e76cff6f3480c Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 26 07:52:19 2016 +0000 Nightly version bumps Tor Browser 45.4.0 and OpenSSL 1.0.2i --- gitian/versions.nightly | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gitian/versions.nightly b/gitian/versions.nightly index fe6c738..c435a47 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -17,7 +17,7 @@ MULTI_LINGUAL=1 VERIFY_TAGS=0 -FIREFOX_VERSION=45.3.0esr +FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=default @@ -51,7 +51,7 @@ NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 GITIAN_TAG=tor-browser-builder-4 -OPENSSL_VER=1.0.2h +OPENSSL_VER=1.0.2i GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -104,7 +104,7 @@ NOTOSCFONT_PACKAGE=NotoSansSC-Regular.otf NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919 +OPENSSL_HASH=9287487d11c9545b6efb287cdb70535d4e9b284dd10d51441d9b9963d000de6f GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc

1 0

[tor-browser-bundle/master] Fold in 6.5a3-hardened changelog
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit 71a5fe16d317c26b2391739b56afb6e99063d304 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 26 07:39:40 2016 +0000 Fold in 6.5a3-hardened changelog --- Bundle-Data/Docs/ChangeLog.txt | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 881f25f..100ac48 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,39 @@ +Tor Browser 6.5a3-hardened -- September 20 2016 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.9.2-alpha + * Update OpenSSL to 1.0.2h (bug 20095) + * Update Torbutton to 1.9.6.4 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + * Bug 19995: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Bug 19837: Whitelist internal URLs that Firefox requires for media + * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic + * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 + * Bug 14271: Make Torbutton work with Unix Domain Socket option + * Translation updates + * Update Tor Launcher to 0.2.11 + * Bug 14272: Make Tor Launcher work with Unix Domain Socket option + * Bug 19568: Set CurProcD for Thunderbird/Instantbird + * Bug 19432: Remove special handling for Instantbird/Thunderbird + * Translation updates + * Update HTTPS-Everywhere to 5.2.4 + * Update NoScript to 2.9.0.14 + * Bug 19851: Fix ASan error by upgrading GCC to 5.4.0 + * Bug 17858: Fix creation of incremental MARs for hardened builds + * Bug 14273: Backport patches for Unix Domain Socket support + * Bug 19890: Disable installation of system addons + * Bug 17334: Spoof referrer when leaving a .onion domain + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Bug 20118: Don't unpack HTTPS Everywhere anymore + * Bug 19336+19835: Enhance about:tbupdate page + * Build system + * All platforms + * Bug 20133: Don't apply OpenSSL patch anymore + * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version + Tor Browser 6.5a3 -- September 20 2016 * All Platforms * Update Firefox to 45.4.0esr

1 0

[tor-browser-bundle/hardened-builds] We are on the hardened track
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit c72cb6b6cd1371969a614061aa7a8bcb7bf822d5 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 26 07:38:19 2016 +0000 We are on the hardened track --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index ff3164f..68a9d43 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 6.5a3 -- September 20 2016 +Tor Browser 6.5a3-hardened -- September 20 2016 * All Platforms * Update Firefox to 45.4.0esr * Update Tor to 0.2.9.2-alpha

1 0

[tor-browser-bundle/maint-6.0] Fix bug in changelog
by gk＠torproject.org 20 Sep '16

20 Sep '16

commit ae4e1c26e4dd6ba37fa7b930c28b6a2c9db4d5ca Author: Georg Koppen <gk(a)torproject.org> Date: Tue Sep 20 14:23:01 2016 +0000 Fix bug in changelog --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index a8f341b..ecb6572 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -3,7 +3,7 @@ Tor Browser 6.0.5 -- September 16 * Update Firefox to 45.4.0esr * Update Tor to 0.2.8.7 * Update Torbutton to 1.9.5.7 - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Update HTTPS-Everywhere to 5.2.4 * Bug 20092: Rotate ports for default obfs4 bridges

1 0

[tor-browser-bundle/hardened-builds] Fix bug in changelog
by gk＠torproject.org 20 Sep '16

20 Sep '16

commit 369588783e9ffb3b2441e226696798df395382f4 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Sep 20 14:22:22 2016 +0000 Fix bug in changelog --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 20f120b..ff3164f 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -6,7 +6,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Update Torbutton to 1.9.6.4 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Bug 19837: Whitelist internal URLs that Firefox requires for media * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic

1 0

[tor-browser-bundle/master] Fix bug in changelog
by gk＠torproject.org 20 Sep '16

20 Sep '16

commit 7014b0ff1e63b01353801c40d2db9a7c54970182 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Sep 20 14:17:01 2016 +0000 Fix bug in changelog --- Bundle-Data/Docs/ChangeLog.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 302f5d5..881f25f 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -6,7 +6,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Update Torbutton to 1.9.6.4 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Bug 19837: Whitelist internal URLs that Firefox requires for media * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic @@ -42,7 +42,7 @@ Tor Browser 6.0.5 -- September 16 * Update Firefox to 45.4.0esr * Update Tor to 0.2.8.7 * Update Torbutton to 1.9.5.7 - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Update HTTPS-Everywhere to 5.2.4 * Bug 20092: Rotate ports for default obfs4 bridges

1 0

[tor-browser-bundle/hardened-builds] Fix selfrandro install path
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 8039dd7759df72fc2cb316004718daa03a665aee Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 19 08:24:23 2016 +0000 Fix selfrandro install path --- gitian/descriptors/linux/gitian-utils.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/descriptors/linux/gitian-utils.yml b/gitian/descriptors/linux/gitian-utils.yml index 4bbb8a4..2d095d0 100644 --- a/gitian/descriptors/linux/gitian-utils.yml +++ b/gitian/descriptors/linux/gitian-utils.yml @@ -104,7 +104,7 @@ script: | cd selfrando scons -Q arch=x86_64 ADDN_CCFLAGS="-include $(ls $HOME/build/elfutils-*/libelf/elf.h) -I $INSTDIR/elfutils/include -fno-reorder-functions" ADDN_LINKFLAGS="-L $INSTDIR/elfutils/lib" mkdir -p $INSTDIR/self-rando - cp sconsRelease/x86_64/bin/* $INSTDIR/self-rando/ + cp sconsRelease/x86_64/gcc/bin/* $INSTDIR/self-rando/ cd .. PATH="$OPATH"

1 0

[tor-browser-bundle/hardened-builds] Bug 20095: Move OpenSSL to 1.0.2 in Tor Browser
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 2a7be0f64a6d7d46b29ecd8c2ad25f72450d3ce1 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Sep 7 09:09:12 2016 +0000 Bug 20095: Move OpenSSL to 1.0.2 in Tor Browser --- gitian/versions.alpha | 4 ++-- gitian/versions.nightly | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/gitian/versions.alpha b/gitian/versions.alpha index fbb6a29..421dd28 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -49,7 +49,7 @@ SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4-1 -OPENSSL_VER=1.0.1t +OPENSSL_VER=1.0.2h GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -104,7 +104,7 @@ NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2 # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=4a6ee491a2fdb22e519c76fdc2a628bb3cec12762cd456861d207996c8a07088 +OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc diff --git a/gitian/versions.nightly b/gitian/versions.nightly index ae2a959..99d7d7e 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -52,7 +52,7 @@ SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4 -OPENSSL_VER=1.0.1t +OPENSSL_VER=1.0.2h GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -107,7 +107,7 @@ NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2 # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=4a6ee491a2fdb22e519c76fdc2a628bb3cec12762cd456861d207996c8a07088 +OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc

1 0

[tor-browser-bundle/hardened-builds] Release preparations for 6.5a3-hardened
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 8c2784c6b486bbe6f4abf81278dee9e892dcb382 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 19 07:19:58 2016 +0000 Release preparations for 6.5a3-hardened --- Bundle-Data/Docs/ChangeLog.txt | 36 ++++++++++++++++++++++++++++++++++++ gitian/versions.alpha | 16 ++++++++-------- tools/update-responses/config.yml | 10 +++++----- 3 files changed, 49 insertions(+), 13 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 2cdc4b7..20f120b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,39 @@ +Tor Browser 6.5a3 -- September 20 2016 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.9.2-alpha + * Update OpenSSL to 1.0.2h (bug 20095) + * Update Torbutton to 1.9.6.4 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + * Bug 18589: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Bug 19837: Whitelist internal URLs that Firefox requires for media + * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic + * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 + * Bug 14271: Make Torbutton work with Unix Domain Socket option + * Translation updates + * Update Tor Launcher to 0.2.11 + * Bug 14272: Make Tor Launcher work with Unix Domain Socket option + * Bug 19568: Set CurProcD for Thunderbird/Instantbird + * Bug 19432: Remove special handling for Instantbird/Thunderbird + * Translation updates + * Update HTTPS-Everywhere to 5.2.4 + * Update NoScript to 2.9.0.14 + * Bug 19851: Fix ASan error by upgrading GCC to 5.4.0 + * Bug 17858: Fix creation of incremental MARs for hardened builds + * Bug 14273: Backport patches for Unix Domain Socket support + * Bug 19890: Disable installation of system addons + * Bug 17334: Spoof referrer when leaving a .onion domain + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Bug 20118: Don't unpack HTTPS Everywhere anymore + * Bug 19336+19835: Enhance about:tbupdate page + * Build system + * All platforms + * Bug 20133: Don't apply OpenSSL patch anymore + * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version + Tor Browser 6.5a2-hardened -- August 3 * All Platforms * Update Firefox to 45.3.0esr diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 538ad0e..fbb6a29 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -14,15 +14,15 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.3.0esr +FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=hardened -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 -TOR_TAG=tor-0.2.8.5-rc -TORLAUNCHER_TAG=0.2.8.5 -TORBUTTON_TAG=1.9.6.1 -HTTPSE_TAG=5.2.1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2 +TOR_TAG=tor-0.2.9.2-alpha +TORLAUNCHER_TAG=0.2.11 +TORBUTTON_TAG=1.9.6.4 +HTTPSE_TAG=5.2.4 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.22-stable @@ -74,7 +74,7 @@ ELFUTILS_VER=0.160 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.12-fx+fn+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.14-fx+fn+sm.xpi TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -109,7 +109,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=3fa641dcb60455c950cef0c15effa8ca060b3b05405f46f55cbdb922929027e7 +NOSCRIPT_HASH=39bc71be20c318578239ea791c0341dbfcd13b33559af080cea386eeec08b337 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 77c8b46..f7edb24 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -15,7 +15,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - hardened: 6.5a2-hardened + hardened: 6.5a3-hardened release: 6.0.1 versions: 6.0.1: @@ -28,11 +28,11 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 6.5a2-hardened: - platformVersion: 45.3.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-65a2-hardened-released + 6.5a3-hardened: + platformVersion: 45.4.0 + detailsURL: https://blog.torproject.org/blog/tor-browser-65a3-hardened-released incremental_from: - - 6.5a1-hardened + - 6.5a2-hardened migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser-bundle/master] Changelog fixup
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit d804c1bb404ef53e426286f2139ce32ea2fbfc2a Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 19 07:03:28 2016 +0000 Changelog fixup --- Bundle-Data/Docs/ChangeLog.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index a9c6d18..302f5d5 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -35,6 +35,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version * OS X * Bug 19856: Make OS X builds reproducible again + * Bug 19410: Fix incremental updates by taking signatures into account Tor Browser 6.0.5 -- September 16 * All Platforms

1 0

[tor-browser-bundle/hardened-builds] Bug 19851: Fix ASan error by upgrading GCC to 5.4.0
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 971399e21ee26922defb9893f188d435ebf62a0c Author: Georg Koppen <gk(a)torproject.org> Date: Sun Aug 21 11:45:16 2016 +0000 Bug 19851: Fix ASan error by upgrading GCC to 5.4.0 We need to update the selfrando commit we use as well to pick up a GCC 5.4.0 related fixup. --- gitian/versions.alpha | 6 +++--- gitian/versions.nightly | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 964e529..538ad0e 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -45,7 +45,7 @@ GO_X_CRYPTO_TAG=4ed45ec682102c643324fae5dff8dab085b6c300 GO_X_NET_TAG=7dbad50ab5b31073856416cdcfeb2796d682f844 OBFS4_TAG=obfs4proxy-0.0.5 NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 -SELFRANDO_TAG=8e49e7aa664625d8e4793579864231b151589d0f +SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4-1 @@ -54,7 +54,7 @@ GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 BINUTILS_VER=2.24 -GCC_VER=5.2.0 +GCC_VER=5.4.0 CLANG_VER=r247539 PYTHON_VER=2.7.5 PYCRYPTO_VER=2.6.1 @@ -124,7 +124,7 @@ GO14_HASH=9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 GO_HASH=6326aeed5f86cf18f16d6dc831405614f855e2d416a91fd3fdc334f772345b00 NSIS_HASH=43d4c9209847e35eb6e2c7cd5a7586e1445374c056c2c7899e40a080e17a1be7 NSIS_DEBIAN_HASH=1dee6957b4a4b8dfe69bcf28bc7f301a13b96b3fa5a394e36c8926ae781e774a -GCC_HASH=5f835b04b5f7dd4f4d2dc96190ec1621b8d89f2dc6f638f9f8bc1b1014ba8cad +GCC_HASH=608df76dec2d34de6558249d8af4cbee21eceddbcb580d666f7a5a583ca3303a STIXMATHFONT_HASH=e3b0f712e2644438eee2d0dcd2b10b2d54f1b972039de95b2f8e800bae1adbd8 NOTOEMOJIFONT_HASH=415dc6290378574135b64c808dc640c1df7531973290c4970c51fdeb849cb0c5 NOTOJPFONT_HASH=3e8146c4ce0945f255cb9dbc12b392380af80bd117e0a60eae555c99c7e618da diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 27059d7..ae2a959 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -48,7 +48,7 @@ GO_X_CRYPTO_TAG=master GO_X_NET_TAG=master OBFS4_TAG=master NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 -SELFRANDO_TAG=8e49e7aa664625d8e4793579864231b151589d0f +SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4 @@ -57,7 +57,7 @@ GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 BINUTILS_VER=2.24 -GCC_VER=5.2.0 +GCC_VER=5.4.0 CLANG_VER=r247539 PYTHON_VER=2.7.5 PYCRYPTO_VER=2.6.1 @@ -127,7 +127,7 @@ GO14_HASH=9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 GO_HASH=6326aeed5f86cf18f16d6dc831405614f855e2d416a91fd3fdc334f772345b00 NSIS_HASH=43d4c9209847e35eb6e2c7cd5a7586e1445374c056c2c7899e40a080e17a1be7 NSIS_DEBIAN_HASH=1dee6957b4a4b8dfe69bcf28bc7f301a13b96b3fa5a394e36c8926ae781e774a -GCC_HASH=5f835b04b5f7dd4f4d2dc96190ec1621b8d89f2dc6f638f9f8bc1b1014ba8cad +GCC_HASH=608df76dec2d34de6558249d8af4cbee21eceddbcb580d666f7a5a583ca3303a STIXMATHFONT_HASH=e3b0f712e2644438eee2d0dcd2b10b2d54f1b972039de95b2f8e800bae1adbd8 NOTOEMOJIFONT_HASH=415dc6290378574135b64c808dc640c1df7531973290c4970c51fdeb849cb0c5 NOTOJPFONT_HASH=3e8146c4ce0945f255cb9dbc12b392380af80bd117e0a60eae555c99c7e618da

1 0

[tor-browser-bundle/hardened-builds] Bug 19528: fix permissions on get-moz-build-date (fixup)
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit eb6d8398127f82b3dccb3c192333a98de0881405 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Sep 16 17:09:22 2016 +0200 Bug 19528: fix permissions on get-moz-build-date (fixup) --- gitian/descriptors/linux/gitian-firefox.yml | 1 + gitian/descriptors/mac/gitian-firefox.yml | 1 + gitian/descriptors/windows/gitian-firefox.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/gitian/descriptors/linux/gitian-firefox.yml b/gitian/descriptors/linux/gitian-firefox.yml index dc02cba..002005f 100644 --- a/gitian/descriptors/linux/gitian-firefox.yml +++ b/gitian/descriptors/linux/gitian-firefox.yml @@ -86,6 +86,7 @@ script: | cd tor-browser mv .mozconfig-asan .mozconfig # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build rm -rf .git diff --git a/gitian/descriptors/mac/gitian-firefox.yml b/gitian/descriptors/mac/gitian-firefox.yml index 7a852c4..49b659a 100644 --- a/gitian/descriptors/mac/gitian-firefox.yml +++ b/gitian/descriptors/mac/gitian-firefox.yml @@ -61,6 +61,7 @@ script: | COPYRIGHT_YEAR=${TB_COMMIT_DATE%%-*} mv .mozconfig-mac .mozconfig # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/windows/gitian-firefox.yml b/gitian/descriptors/windows/gitian-firefox.yml index cc7fdeb..8b68925 100644 --- a/gitian/descriptors/windows/gitian-firefox.yml +++ b/gitian/descriptors/windows/gitian-firefox.yml @@ -69,6 +69,7 @@ script: | # obscure one. export DLLFLAGS="-specs=/home/ubuntu/build/msvcr100.spec" # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src

1 0

[tor-browser-bundle/hardened-builds] Pass recipient addresses to mailx directly.
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 077b3928379745ababb9bf25ed084a771f42948f Author: Linus Nordberg <linus(a)torproject.org> Date: Thu Sep 15 20:22:20 2016 +0200 Pass recipient addresses to mailx directly. --- tools/continuous-builds/build-tbb.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/continuous-builds/build-tbb.sh b/tools/continuous-builds/build-tbb.sh index 7a7e812..1c1118d 100755 --- a/tools/continuous-builds/build-tbb.sh +++ b/tools/continuous-builds/build-tbb.sh @@ -74,6 +74,6 @@ else [ -r ../../gitian-builder/var/build.log ] && FILES="$FILES ../../gitian-builder/var/build.log" [ -r ../../gitian-builder/var/target.log ] && FILES="$FILES ../../gitian-builder/var/target.log" tail -n 50 $FILES | $MAILX -E -s "Nightly build failure -- $(date -u +%F)" \ - $LOGSENDER -- $LOGRECIPIENTS + $LOGSENDER $LOGRECIPIENTS fi fi

1 0

[tor-browser-bundle/master] Folding in stable changelog
by gk＠torproject.org 18 Sep '16

18 Sep '16

commit c070c5188644023851aa1b71df1367672213e0e4 Author: Georg Koppen <gk(a)torproject.org> Date: Sun Sep 18 05:35:32 2016 +0000 Folding in stable changelog --- Bundle-Data/Docs/ChangeLog.txt | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 25e563b..a9c6d18 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -36,6 +36,26 @@ Tor Browser 6.5a3 -- September 20 2016 * OS X * Bug 19856: Make OS X builds reproducible again +Tor Browser 6.0.5 -- September 16 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.8.7 + * Update Torbutton to 1.9.5.7 + * Bug 18589: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Update HTTPS-Everywhere to 5.2.4 + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Windows + * Bug 19725: Remove old updater files left on disk after upgrade to 6.x + * Linux + * Bug 19725: Remove old updater files left on disk after upgrade to 6.x + * Android + * Bug 19706: Store browser data in the app home directory + * Build system + * All platforms + * Upgrade Go to 1.4.3 + Tor Browser 6.0.4 -- August 16 2016 * All Platforms * Update Tor to 0.2.8.6

1 0

[tor-browser-bundle/maint-6.0] Correcting 6.0.5 release date
by gk＠torproject.org 18 Sep '16

18 Sep '16

commit c477bb587f9f385820e0c454cea17aec47ecd390 Author: Georg Koppen <gk(a)torproject.org> Date: Sun Sep 18 05:32:13 2016 +0000 Correcting 6.0.5 release date --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 6a4e4d6..a8f341b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 6.0.5 -- September 20 +Tor Browser 6.0.5 -- September 16 * All Platforms * Update Firefox to 45.4.0esr * Update Tor to 0.2.8.7

1 0

[tor-browser-bundle/master] Bug 19528: fix permissions on get-moz-build-date (fixup)
by gk＠torproject.org 16 Sep '16

16 Sep '16

commit 6a0a82dd8a9e1d882e780b9a0783e91c1c0d69af Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Sep 16 17:09:22 2016 +0200 Bug 19528: fix permissions on get-moz-build-date (fixup) --- gitian/descriptors/linux/gitian-firefox.yml | 1 + gitian/descriptors/mac/gitian-firefox.yml | 1 + gitian/descriptors/windows/gitian-firefox.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/gitian/descriptors/linux/gitian-firefox.yml b/gitian/descriptors/linux/gitian-firefox.yml index 79356a9..6f3d3ad 100644 --- a/gitian/descriptors/linux/gitian-firefox.yml +++ b/gitian/descriptors/linux/gitian-firefox.yml @@ -89,6 +89,7 @@ script: | cd tor-browser # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build rm -rf .git diff --git a/gitian/descriptors/mac/gitian-firefox.yml b/gitian/descriptors/mac/gitian-firefox.yml index 607a04c..7461031 100644 --- a/gitian/descriptors/mac/gitian-firefox.yml +++ b/gitian/descriptors/mac/gitian-firefox.yml @@ -44,6 +44,7 @@ script: | COPYRIGHT_YEAR=${TB_COMMIT_DATE%%-*} mv .mozconfig-mac .mozconfig # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/windows/gitian-firefox.yml b/gitian/descriptors/windows/gitian-firefox.yml index cc7fdeb..8b68925 100644 --- a/gitian/descriptors/windows/gitian-firefox.yml +++ b/gitian/descriptors/windows/gitian-firefox.yml @@ -69,6 +69,7 @@ script: | # obscure one. export DLLFLAGS="-specs=/home/ubuntu/build/msvcr100.spec" # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src

1 0

[tor-browser-bundle/master] Pass recipient addresses to mailx directly.
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 0dec3b0bb897a4e804880f45bd630bfa19b1acd9 Author: Linus Nordberg <linus(a)torproject.org> Date: Thu Sep 15 20:22:20 2016 +0200 Pass recipient addresses to mailx directly. --- tools/continuous-builds/build-tbb.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/continuous-builds/build-tbb.sh b/tools/continuous-builds/build-tbb.sh index 7a7e812..1c1118d 100755 --- a/tools/continuous-builds/build-tbb.sh +++ b/tools/continuous-builds/build-tbb.sh @@ -74,6 +74,6 @@ else [ -r ../../gitian-builder/var/build.log ] && FILES="$FILES ../../gitian-builder/var/build.log" [ -r ../../gitian-builder/var/target.log ] && FILES="$FILES ../../gitian-builder/var/target.log" tail -n 50 $FILES | $MAILX -E -s "Nightly build failure -- $(date -u +%F)" \ - $LOGSENDER -- $LOGRECIPIENTS + $LOGSENDER $LOGRECIPIENTS fi fi

1 0

[tor-browser-bundle/master] Update gk's key in torbutton.gpg
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit d3e096531fba44c67c19f195302897a2d31fc900 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Aug 12 08:03:58 2016 +0000 Update gk's key in torbutton.gpg --- gitian/gpg/torbutton.gpg | Bin 94114 -> 135369 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/gitian/gpg/torbutton.gpg b/gitian/gpg/torbutton.gpg index da40f76..17b6c70 100644 Binary files a/gitian/gpg/torbutton.gpg and b/gitian/gpg/torbutton.gpg differ

1 0

[tor-browser-bundle/master] Version bumps due to new tags
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 9959fe004fce97e740c48dde079b3082eaaa0031 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 13:42:04 2016 +0000 Version bumps due to new tags --- Bundle-Data/Docs/ChangeLog.txt | 4 ++-- gitian/versions.alpha | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index a7fb928..25e563b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -3,7 +3,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Update Firefox to 45.4.0esr * Update Tor to 0.2.9.2-alpha * Update OpenSSL to 1.0.2h (bug 20095) - * Update Torbutton to 1.9.6.3 + * Update Torbutton to 1.9.6.4 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider * Bug 18589: Clear site security settings during New Identity @@ -13,7 +13,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 * Bug 14271: Make Torbutton work with Unix Domain Socket option * Translation updates - * Update Tor Launcher to 0.2.10 + * Update Tor Launcher to 0.2.10.1 * Bug 14272: Make Tor Launcher work with Unix Domain Socket option * Bug 19568: Set CurProcD for Thunderbird/Instantbird * Bug 19432: Remove special handling for Instantbird/Thunderbird diff --git a/gitian/versions.alpha b/gitian/versions.alpha index c87def8..6e92fcb 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -14,10 +14,10 @@ FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2 TOR_TAG=tor-0.2.9.2-alpha -TORLAUNCHER_TAG=0.2.10 -TORBUTTON_TAG=1.9.6.3 +TORLAUNCHER_TAG=0.2.10.1 +TORBUTTON_TAG=1.9.6.4 HTTPSE_TAG=5.2.4 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8

1 0

[torbutton/master] Version bump for new tag
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 1db6465b140fa61092dddee2c60ec5297045a72f Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 13:39:03 2016 +0000 Version bump for new tag --- src/CHANGELOG | 1 + src/install.rdf | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 56a40f3..6d68055 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,4 @@ +1.9.6.4 1.9.6.3 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider diff --git a/src/install.rdf b/src/install.rdf index 3d0ee37..7243571 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.6.3</em:version> + <em:version>1.9.6.4</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

1 0

[tor-browser-bundle/master] Release preparations for 6.5a3
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit c1fee0d5f7e27de3636998dda7c7f0a644b710b7 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 12:49:01 2016 +0000 Release preparations for 6.5a3 Versions bumps, changelog update, and updating config.yml --- Bundle-Data/Docs/ChangeLog.txt | 38 ++++++++++++++++++++++++++++++++++++++ gitian/versions.alpha | 16 ++++++++-------- tools/update-responses/config.yml | 10 +++++----- 3 files changed, 51 insertions(+), 13 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 60a60cf..a7fb928 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,41 @@ +Tor Browser 6.5a3 -- September 20 2016 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.9.2-alpha + * Update OpenSSL to 1.0.2h (bug 20095) + * Update Torbutton to 1.9.6.3 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + * Bug 18589: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Bug 19837: Whitelist internal URLs that Firefox requires for media + * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic + * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 + * Bug 14271: Make Torbutton work with Unix Domain Socket option + * Translation updates + * Update Tor Launcher to 0.2.10 + * Bug 14272: Make Tor Launcher work with Unix Domain Socket option + * Bug 19568: Set CurProcD for Thunderbird/Instantbird + * Bug 19432: Remove special handling for Instantbird/Thunderbird + * Translation updates + * Update HTTPS-Everywhere to 5.2.4 + * Update NoScript to 2.9.0.14 + * Bug 14273: Backport patches for Unix Domain Socket support + * Bug 19890: Disable installation of system addons + * Bug 17334: Spoof referrer when leaving a .onion domain + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Bug 20118: Don't unpack HTTPS Everywhere anymore + * Bug 19336+19835: Enhance about:tbupdate page + * Android + * Bug 19706: Store browser data in the app home directory + * Build system + * All platforms + * Bug 20133: Don't apply OpenSSL patch anymore + * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version + * OS X + * Bug 19856: Make OS X builds reproducible again + Tor Browser 6.0.4 -- August 16 2016 * All Platforms * Update Tor to 0.2.8.6 diff --git a/gitian/versions.alpha b/gitian/versions.alpha index ee8a197..c87def8 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -10,15 +10,15 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.3.0esr +FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2 -TOR_TAG=tor-0.2.8.5-rc -TORLAUNCHER_TAG=0.2.9.3 -TORBUTTON_TAG=1.9.6.1 -HTTPSE_TAG=5.2.1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 +TOR_TAG=tor-0.2.9.2-alpha +TORLAUNCHER_TAG=0.2.10 +TORBUTTON_TAG=1.9.6.3 +HTTPSE_TAG=5.2.4 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.22-stable @@ -68,7 +68,7 @@ NSIS_VER=2.51 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.12-fx+fn+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.14-fx+fn+sm.xpi TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -102,7 +102,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=3fa641dcb60455c950cef0c15effa8ca060b3b05405f46f55cbdb922929027e7 +NOSCRIPT_HASH=39bc71be20c318578239ea791c0341dbfcd13b33559af080cea386eeec08b337 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 050328e..8c047b5 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -15,7 +15,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - alpha: 6.5a2 + alpha: 6.5a3 release: 6.0.1 versions: 6.0.1: @@ -29,11 +29,11 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 6.5a2: - platformVersion: 45.3.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-65a2-released + 6.5a3: + platformVersion: 45.4.0 + detailsURL: https://blog.torproject.org/blog/tor-browser-65a3-released incremental_from: - - 6.5a1 + - 6.5a2 migrate_archs: osx32: osx64 osx32:

1 0

[torbutton/master] Release preparations for 1.9.6.3
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit d3541bff2c22f30fe9f127cf3f4b005790ec253c Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 09:40:42 2016 +0000 Release preparations for 1.9.6.3 --- src/CHANGELOG | 4 ++++ src/install.rdf | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 599645c..56a40f3 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,7 @@ +1.9.6.3 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + 1.9.6.2 * Bug 18589: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times diff --git a/src/install.rdf b/src/install.rdf index 5936299..3d0ee37 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.6.2</em:version> + <em:version>1.9.6.3</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

1 0