- tbb-commits - lists.torproject.org

[tor-browser-bundle/master] Nightly version bumps
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit 97aa7318fce7df592d2c25955f2e76cff6f3480c Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 26 07:52:19 2016 +0000 Nightly version bumps Tor Browser 45.4.0 and OpenSSL 1.0.2i --- gitian/versions.nightly | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gitian/versions.nightly b/gitian/versions.nightly index fe6c738..c435a47 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -17,7 +17,7 @@ MULTI_LINGUAL=1 VERIFY_TAGS=0 -FIREFOX_VERSION=45.3.0esr +FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=default @@ -51,7 +51,7 @@ NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 GITIAN_TAG=tor-browser-builder-4 -OPENSSL_VER=1.0.2h +OPENSSL_VER=1.0.2i GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -104,7 +104,7 @@ NOTOSCFONT_PACKAGE=NotoSansSC-Regular.otf NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919 +OPENSSL_HASH=9287487d11c9545b6efb287cdb70535d4e9b284dd10d51441d9b9963d000de6f GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc

1 0

[tor-browser-bundle/master] Fold in 6.5a3-hardened changelog
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit 71a5fe16d317c26b2391739b56afb6e99063d304 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 26 07:39:40 2016 +0000 Fold in 6.5a3-hardened changelog --- Bundle-Data/Docs/ChangeLog.txt | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 881f25f..100ac48 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,39 @@ +Tor Browser 6.5a3-hardened -- September 20 2016 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.9.2-alpha + * Update OpenSSL to 1.0.2h (bug 20095) + * Update Torbutton to 1.9.6.4 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + * Bug 19995: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Bug 19837: Whitelist internal URLs that Firefox requires for media + * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic + * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 + * Bug 14271: Make Torbutton work with Unix Domain Socket option + * Translation updates + * Update Tor Launcher to 0.2.11 + * Bug 14272: Make Tor Launcher work with Unix Domain Socket option + * Bug 19568: Set CurProcD for Thunderbird/Instantbird + * Bug 19432: Remove special handling for Instantbird/Thunderbird + * Translation updates + * Update HTTPS-Everywhere to 5.2.4 + * Update NoScript to 2.9.0.14 + * Bug 19851: Fix ASan error by upgrading GCC to 5.4.0 + * Bug 17858: Fix creation of incremental MARs for hardened builds + * Bug 14273: Backport patches for Unix Domain Socket support + * Bug 19890: Disable installation of system addons + * Bug 17334: Spoof referrer when leaving a .onion domain + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Bug 20118: Don't unpack HTTPS Everywhere anymore + * Bug 19336+19835: Enhance about:tbupdate page + * Build system + * All platforms + * Bug 20133: Don't apply OpenSSL patch anymore + * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version + Tor Browser 6.5a3 -- September 20 2016 * All Platforms * Update Firefox to 45.4.0esr

1 0

[tor-browser-bundle/hardened-builds] We are on the hardened track
by gk＠torproject.org 26 Sep '16

26 Sep '16

commit c72cb6b6cd1371969a614061aa7a8bcb7bf822d5 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 26 07:38:19 2016 +0000 We are on the hardened track --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index ff3164f..68a9d43 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 6.5a3 -- September 20 2016 +Tor Browser 6.5a3-hardened -- September 20 2016 * All Platforms * Update Firefox to 45.4.0esr * Update Tor to 0.2.9.2-alpha

1 0

[tor-browser-bundle/maint-6.0] Fix bug in changelog
by gk＠torproject.org 21 Sep '16

21 Sep '16

commit ae4e1c26e4dd6ba37fa7b930c28b6a2c9db4d5ca Author: Georg Koppen <gk(a)torproject.org> Date: Tue Sep 20 14:23:01 2016 +0000 Fix bug in changelog --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index a8f341b..ecb6572 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -3,7 +3,7 @@ Tor Browser 6.0.5 -- September 16 * Update Firefox to 45.4.0esr * Update Tor to 0.2.8.7 * Update Torbutton to 1.9.5.7 - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Update HTTPS-Everywhere to 5.2.4 * Bug 20092: Rotate ports for default obfs4 bridges

1 0

[tor-browser-bundle/hardened-builds] Fix bug in changelog
by gk＠torproject.org 21 Sep '16

21 Sep '16

commit 369588783e9ffb3b2441e226696798df395382f4 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Sep 20 14:22:22 2016 +0000 Fix bug in changelog --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 20f120b..ff3164f 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -6,7 +6,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Update Torbutton to 1.9.6.4 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Bug 19837: Whitelist internal URLs that Firefox requires for media * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic

1 0

[tor-browser-bundle/master] Fix bug in changelog
by gk＠torproject.org 21 Sep '16

21 Sep '16

commit 7014b0ff1e63b01353801c40d2db9a7c54970182 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Sep 20 14:17:01 2016 +0000 Fix bug in changelog --- Bundle-Data/Docs/ChangeLog.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 302f5d5..881f25f 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -6,7 +6,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Update Torbutton to 1.9.6.4 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Bug 19837: Whitelist internal URLs that Firefox requires for media * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic @@ -42,7 +42,7 @@ Tor Browser 6.0.5 -- September 16 * Update Firefox to 45.4.0esr * Update Tor to 0.2.8.7 * Update Torbutton to 1.9.5.7 - * Bug 18589: Clear site security settings during New Identity + * Bug 19995: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times * Update HTTPS-Everywhere to 5.2.4 * Bug 20092: Rotate ports for default obfs4 bridges

1 0

[tor-browser-bundle/hardened-builds] Fix selfrandro install path
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 8039dd7759df72fc2cb316004718daa03a665aee Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 19 08:24:23 2016 +0000 Fix selfrandro install path --- gitian/descriptors/linux/gitian-utils.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/descriptors/linux/gitian-utils.yml b/gitian/descriptors/linux/gitian-utils.yml index 4bbb8a4..2d095d0 100644 --- a/gitian/descriptors/linux/gitian-utils.yml +++ b/gitian/descriptors/linux/gitian-utils.yml @@ -104,7 +104,7 @@ script: | cd selfrando scons -Q arch=x86_64 ADDN_CCFLAGS="-include $(ls $HOME/build/elfutils-*/libelf/elf.h) -I $INSTDIR/elfutils/include -fno-reorder-functions" ADDN_LINKFLAGS="-L $INSTDIR/elfutils/lib" mkdir -p $INSTDIR/self-rando - cp sconsRelease/x86_64/bin/* $INSTDIR/self-rando/ + cp sconsRelease/x86_64/gcc/bin/* $INSTDIR/self-rando/ cd .. PATH="$OPATH"

1 0

[tor-browser-bundle/hardened-builds] Bug 20095: Move OpenSSL to 1.0.2 in Tor Browser
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 2a7be0f64a6d7d46b29ecd8c2ad25f72450d3ce1 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Sep 7 09:09:12 2016 +0000 Bug 20095: Move OpenSSL to 1.0.2 in Tor Browser --- gitian/versions.alpha | 4 ++-- gitian/versions.nightly | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/gitian/versions.alpha b/gitian/versions.alpha index fbb6a29..421dd28 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -49,7 +49,7 @@ SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4-1 -OPENSSL_VER=1.0.1t +OPENSSL_VER=1.0.2h GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -104,7 +104,7 @@ NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2 # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=4a6ee491a2fdb22e519c76fdc2a628bb3cec12762cd456861d207996c8a07088 +OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc diff --git a/gitian/versions.nightly b/gitian/versions.nightly index ae2a959..99d7d7e 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -52,7 +52,7 @@ SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4 -OPENSSL_VER=1.0.1t +OPENSSL_VER=1.0.2h GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 @@ -107,7 +107,7 @@ NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2 # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=4a6ee491a2fdb22e519c76fdc2a628bb3cec12762cd456861d207996c8a07088 +OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc

1 0

[tor-browser-bundle/hardened-builds] Release preparations for 6.5a3-hardened
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 8c2784c6b486bbe6f4abf81278dee9e892dcb382 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 19 07:19:58 2016 +0000 Release preparations for 6.5a3-hardened --- Bundle-Data/Docs/ChangeLog.txt | 36 ++++++++++++++++++++++++++++++++++++ gitian/versions.alpha | 16 ++++++++-------- tools/update-responses/config.yml | 10 +++++----- 3 files changed, 49 insertions(+), 13 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 2cdc4b7..20f120b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,39 @@ +Tor Browser 6.5a3 -- September 20 2016 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.9.2-alpha + * Update OpenSSL to 1.0.2h (bug 20095) + * Update Torbutton to 1.9.6.4 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + * Bug 18589: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Bug 19837: Whitelist internal URLs that Firefox requires for media + * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic + * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 + * Bug 14271: Make Torbutton work with Unix Domain Socket option + * Translation updates + * Update Tor Launcher to 0.2.11 + * Bug 14272: Make Tor Launcher work with Unix Domain Socket option + * Bug 19568: Set CurProcD for Thunderbird/Instantbird + * Bug 19432: Remove special handling for Instantbird/Thunderbird + * Translation updates + * Update HTTPS-Everywhere to 5.2.4 + * Update NoScript to 2.9.0.14 + * Bug 19851: Fix ASan error by upgrading GCC to 5.4.0 + * Bug 17858: Fix creation of incremental MARs for hardened builds + * Bug 14273: Backport patches for Unix Domain Socket support + * Bug 19890: Disable installation of system addons + * Bug 17334: Spoof referrer when leaving a .onion domain + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Bug 20118: Don't unpack HTTPS Everywhere anymore + * Bug 19336+19835: Enhance about:tbupdate page + * Build system + * All platforms + * Bug 20133: Don't apply OpenSSL patch anymore + * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version + Tor Browser 6.5a2-hardened -- August 3 * All Platforms * Update Firefox to 45.3.0esr diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 538ad0e..fbb6a29 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -14,15 +14,15 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.3.0esr +FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=hardened -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 -TOR_TAG=tor-0.2.8.5-rc -TORLAUNCHER_TAG=0.2.8.5 -TORBUTTON_TAG=1.9.6.1 -HTTPSE_TAG=5.2.1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2 +TOR_TAG=tor-0.2.9.2-alpha +TORLAUNCHER_TAG=0.2.11 +TORBUTTON_TAG=1.9.6.4 +HTTPSE_TAG=5.2.4 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.22-stable @@ -74,7 +74,7 @@ ELFUTILS_VER=0.160 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.12-fx+fn+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.14-fx+fn+sm.xpi TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -109,7 +109,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=3fa641dcb60455c950cef0c15effa8ca060b3b05405f46f55cbdb922929027e7 +NOSCRIPT_HASH=39bc71be20c318578239ea791c0341dbfcd13b33559af080cea386eeec08b337 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 77c8b46..f7edb24 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -15,7 +15,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - hardened: 6.5a2-hardened + hardened: 6.5a3-hardened release: 6.0.1 versions: 6.0.1: @@ -28,11 +28,11 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 6.5a2-hardened: - platformVersion: 45.3.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-65a2-hardened-released + 6.5a3-hardened: + platformVersion: 45.4.0 + detailsURL: https://blog.torproject.org/blog/tor-browser-65a3-hardened-released incremental_from: - - 6.5a1-hardened + - 6.5a2-hardened migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser-bundle/master] Changelog fixup
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit d804c1bb404ef53e426286f2139ce32ea2fbfc2a Author: Georg Koppen <gk(a)torproject.org> Date: Mon Sep 19 07:03:28 2016 +0000 Changelog fixup --- Bundle-Data/Docs/ChangeLog.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index a9c6d18..302f5d5 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -35,6 +35,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version * OS X * Bug 19856: Make OS X builds reproducible again + * Bug 19410: Fix incremental updates by taking signatures into account Tor Browser 6.0.5 -- September 16 * All Platforms

1 0

[tor-browser-bundle/hardened-builds] Pass recipient addresses to mailx directly.
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 077b3928379745ababb9bf25ed084a771f42948f Author: Linus Nordberg <linus(a)torproject.org> Date: Thu Sep 15 20:22:20 2016 +0200 Pass recipient addresses to mailx directly. --- tools/continuous-builds/build-tbb.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/continuous-builds/build-tbb.sh b/tools/continuous-builds/build-tbb.sh index 7a7e812..1c1118d 100755 --- a/tools/continuous-builds/build-tbb.sh +++ b/tools/continuous-builds/build-tbb.sh @@ -74,6 +74,6 @@ else [ -r ../../gitian-builder/var/build.log ] && FILES="$FILES ../../gitian-builder/var/build.log" [ -r ../../gitian-builder/var/target.log ] && FILES="$FILES ../../gitian-builder/var/target.log" tail -n 50 $FILES | $MAILX -E -s "Nightly build failure -- $(date -u +%F)" \ - $LOGSENDER -- $LOGRECIPIENTS + $LOGSENDER $LOGRECIPIENTS fi fi

1 0

[tor-browser-bundle/hardened-builds] Bug 19851: Fix ASan error by upgrading GCC to 5.4.0
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit 971399e21ee26922defb9893f188d435ebf62a0c Author: Georg Koppen <gk(a)torproject.org> Date: Sun Aug 21 11:45:16 2016 +0000 Bug 19851: Fix ASan error by upgrading GCC to 5.4.0 We need to update the selfrando commit we use as well to pick up a GCC 5.4.0 related fixup. --- gitian/versions.alpha | 6 +++--- gitian/versions.nightly | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 964e529..538ad0e 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -45,7 +45,7 @@ GO_X_CRYPTO_TAG=4ed45ec682102c643324fae5dff8dab085b6c300 GO_X_NET_TAG=7dbad50ab5b31073856416cdcfeb2796d682f844 OBFS4_TAG=obfs4proxy-0.0.5 NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 -SELFRANDO_TAG=8e49e7aa664625d8e4793579864231b151589d0f +SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4-1 @@ -54,7 +54,7 @@ GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 BINUTILS_VER=2.24 -GCC_VER=5.2.0 +GCC_VER=5.4.0 CLANG_VER=r247539 PYTHON_VER=2.7.5 PYCRYPTO_VER=2.6.1 @@ -124,7 +124,7 @@ GO14_HASH=9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 GO_HASH=6326aeed5f86cf18f16d6dc831405614f855e2d416a91fd3fdc334f772345b00 NSIS_HASH=43d4c9209847e35eb6e2c7cd5a7586e1445374c056c2c7899e40a080e17a1be7 NSIS_DEBIAN_HASH=1dee6957b4a4b8dfe69bcf28bc7f301a13b96b3fa5a394e36c8926ae781e774a -GCC_HASH=5f835b04b5f7dd4f4d2dc96190ec1621b8d89f2dc6f638f9f8bc1b1014ba8cad +GCC_HASH=608df76dec2d34de6558249d8af4cbee21eceddbcb580d666f7a5a583ca3303a STIXMATHFONT_HASH=e3b0f712e2644438eee2d0dcd2b10b2d54f1b972039de95b2f8e800bae1adbd8 NOTOEMOJIFONT_HASH=415dc6290378574135b64c808dc640c1df7531973290c4970c51fdeb849cb0c5 NOTOJPFONT_HASH=3e8146c4ce0945f255cb9dbc12b392380af80bd117e0a60eae555c99c7e618da diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 27059d7..ae2a959 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -48,7 +48,7 @@ GO_X_CRYPTO_TAG=master GO_X_NET_TAG=master OBFS4_TAG=master NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 -SELFRANDO_TAG=8e49e7aa664625d8e4793579864231b151589d0f +SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863 GITIAN_TAG=tor-browser-builder-4 @@ -57,7 +57,7 @@ GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build1 BINUTILS_VER=2.24 -GCC_VER=5.2.0 +GCC_VER=5.4.0 CLANG_VER=r247539 PYTHON_VER=2.7.5 PYCRYPTO_VER=2.6.1 @@ -127,7 +127,7 @@ GO14_HASH=9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 GO_HASH=6326aeed5f86cf18f16d6dc831405614f855e2d416a91fd3fdc334f772345b00 NSIS_HASH=43d4c9209847e35eb6e2c7cd5a7586e1445374c056c2c7899e40a080e17a1be7 NSIS_DEBIAN_HASH=1dee6957b4a4b8dfe69bcf28bc7f301a13b96b3fa5a394e36c8926ae781e774a -GCC_HASH=5f835b04b5f7dd4f4d2dc96190ec1621b8d89f2dc6f638f9f8bc1b1014ba8cad +GCC_HASH=608df76dec2d34de6558249d8af4cbee21eceddbcb580d666f7a5a583ca3303a STIXMATHFONT_HASH=e3b0f712e2644438eee2d0dcd2b10b2d54f1b972039de95b2f8e800bae1adbd8 NOTOEMOJIFONT_HASH=415dc6290378574135b64c808dc640c1df7531973290c4970c51fdeb849cb0c5 NOTOJPFONT_HASH=3e8146c4ce0945f255cb9dbc12b392380af80bd117e0a60eae555c99c7e618da

1 0

[tor-browser-bundle/hardened-builds] Bug 19528: fix permissions on get-moz-build-date (fixup)
by gk＠torproject.org 19 Sep '16

19 Sep '16

commit eb6d8398127f82b3dccb3c192333a98de0881405 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Sep 16 17:09:22 2016 +0200 Bug 19528: fix permissions on get-moz-build-date (fixup) --- gitian/descriptors/linux/gitian-firefox.yml | 1 + gitian/descriptors/mac/gitian-firefox.yml | 1 + gitian/descriptors/windows/gitian-firefox.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/gitian/descriptors/linux/gitian-firefox.yml b/gitian/descriptors/linux/gitian-firefox.yml index dc02cba..002005f 100644 --- a/gitian/descriptors/linux/gitian-firefox.yml +++ b/gitian/descriptors/linux/gitian-firefox.yml @@ -86,6 +86,7 @@ script: | cd tor-browser mv .mozconfig-asan .mozconfig # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build rm -rf .git diff --git a/gitian/descriptors/mac/gitian-firefox.yml b/gitian/descriptors/mac/gitian-firefox.yml index 7a852c4..49b659a 100644 --- a/gitian/descriptors/mac/gitian-firefox.yml +++ b/gitian/descriptors/mac/gitian-firefox.yml @@ -61,6 +61,7 @@ script: | COPYRIGHT_YEAR=${TB_COMMIT_DATE%%-*} mv .mozconfig-mac .mozconfig # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/windows/gitian-firefox.yml b/gitian/descriptors/windows/gitian-firefox.yml index cc7fdeb..8b68925 100644 --- a/gitian/descriptors/windows/gitian-firefox.yml +++ b/gitian/descriptors/windows/gitian-firefox.yml @@ -69,6 +69,7 @@ script: | # obscure one. export DLLFLAGS="-specs=/home/ubuntu/build/msvcr100.spec" # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src

1 0

[tor-browser-bundle/master] Folding in stable changelog
by gk＠torproject.org 18 Sep '16

18 Sep '16

commit c070c5188644023851aa1b71df1367672213e0e4 Author: Georg Koppen <gk(a)torproject.org> Date: Sun Sep 18 05:35:32 2016 +0000 Folding in stable changelog --- Bundle-Data/Docs/ChangeLog.txt | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 25e563b..a9c6d18 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -36,6 +36,26 @@ Tor Browser 6.5a3 -- September 20 2016 * OS X * Bug 19856: Make OS X builds reproducible again +Tor Browser 6.0.5 -- September 16 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.8.7 + * Update Torbutton to 1.9.5.7 + * Bug 18589: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Update HTTPS-Everywhere to 5.2.4 + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Windows + * Bug 19725: Remove old updater files left on disk after upgrade to 6.x + * Linux + * Bug 19725: Remove old updater files left on disk after upgrade to 6.x + * Android + * Bug 19706: Store browser data in the app home directory + * Build system + * All platforms + * Upgrade Go to 1.4.3 + Tor Browser 6.0.4 -- August 16 2016 * All Platforms * Update Tor to 0.2.8.6

1 0

[tor-browser-bundle/maint-6.0] Correcting 6.0.5 release date
by gk＠torproject.org 18 Sep '16

18 Sep '16

commit c477bb587f9f385820e0c454cea17aec47ecd390 Author: Georg Koppen <gk(a)torproject.org> Date: Sun Sep 18 05:32:13 2016 +0000 Correcting 6.0.5 release date --- Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 6a4e4d6..a8f341b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 6.0.5 -- September 20 +Tor Browser 6.0.5 -- September 16 * All Platforms * Update Firefox to 45.4.0esr * Update Tor to 0.2.8.7

1 0

[tor-browser-bundle/master] Bug 19528: fix permissions on get-moz-build-date (fixup)
by gk＠torproject.org 17 Sep '16

17 Sep '16

commit 6a0a82dd8a9e1d882e780b9a0783e91c1c0d69af Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Sep 16 17:09:22 2016 +0200 Bug 19528: fix permissions on get-moz-build-date (fixup) --- gitian/descriptors/linux/gitian-firefox.yml | 1 + gitian/descriptors/mac/gitian-firefox.yml | 1 + gitian/descriptors/windows/gitian-firefox.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/gitian/descriptors/linux/gitian-firefox.yml b/gitian/descriptors/linux/gitian-firefox.yml index 79356a9..6f3d3ad 100644 --- a/gitian/descriptors/linux/gitian-firefox.yml +++ b/gitian/descriptors/linux/gitian-firefox.yml @@ -89,6 +89,7 @@ script: | cd tor-browser # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build rm -rf .git diff --git a/gitian/descriptors/mac/gitian-firefox.yml b/gitian/descriptors/mac/gitian-firefox.yml index 607a04c..7461031 100644 --- a/gitian/descriptors/mac/gitian-firefox.yml +++ b/gitian/descriptors/mac/gitian-firefox.yml @@ -44,6 +44,7 @@ script: | COPYRIGHT_YEAR=${TB_COMMIT_DATE%%-*} mv .mozconfig-mac .mozconfig # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/windows/gitian-firefox.yml b/gitian/descriptors/windows/gitian-firefox.yml index cc7fdeb..8b68925 100644 --- a/gitian/descriptors/windows/gitian-firefox.yml +++ b/gitian/descriptors/windows/gitian-firefox.yml @@ -69,6 +69,7 @@ script: | # obscure one. export DLLFLAGS="-specs=/home/ubuntu/build/msvcr100.spec" # run get-moz-build-date before removing .git, which is used to get the year + chmod +x ~/build/get-moz-build-date eval $(~/build/get-moz-build-date $(cat browser/config/version.txt)) # .git and the src takes up a lot of useless space, and we need the space to build #git archive HEAD | tar -x -C $OUTDIR/src

1 0

[tor-browser-bundle/master] Pass recipient addresses to mailx directly.
by gk＠torproject.org 16 Sep '16

16 Sep '16

commit 0dec3b0bb897a4e804880f45bd630bfa19b1acd9 Author: Linus Nordberg <linus(a)torproject.org> Date: Thu Sep 15 20:22:20 2016 +0200 Pass recipient addresses to mailx directly. --- tools/continuous-builds/build-tbb.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/continuous-builds/build-tbb.sh b/tools/continuous-builds/build-tbb.sh index 7a7e812..1c1118d 100755 --- a/tools/continuous-builds/build-tbb.sh +++ b/tools/continuous-builds/build-tbb.sh @@ -74,6 +74,6 @@ else [ -r ../../gitian-builder/var/build.log ] && FILES="$FILES ../../gitian-builder/var/build.log" [ -r ../../gitian-builder/var/target.log ] && FILES="$FILES ../../gitian-builder/var/target.log" tail -n 50 $FILES | $MAILX -E -s "Nightly build failure -- $(date -u +%F)" \ - $LOGSENDER -- $LOGRECIPIENTS + $LOGSENDER $LOGRECIPIENTS fi fi

1 0

[tor-browser-bundle/master] Update gk's key in torbutton.gpg
by gk＠torproject.org 16 Sep '16

16 Sep '16

commit d3e096531fba44c67c19f195302897a2d31fc900 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Aug 12 08:03:58 2016 +0000 Update gk's key in torbutton.gpg --- gitian/gpg/torbutton.gpg | Bin 94114 -> 135369 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/gitian/gpg/torbutton.gpg b/gitian/gpg/torbutton.gpg index da40f76..17b6c70 100644 Binary files a/gitian/gpg/torbutton.gpg and b/gitian/gpg/torbutton.gpg differ

1 0

[tor-browser-bundle/master] Version bumps due to new tags
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 9959fe004fce97e740c48dde079b3082eaaa0031 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 13:42:04 2016 +0000 Version bumps due to new tags --- Bundle-Data/Docs/ChangeLog.txt | 4 ++-- gitian/versions.alpha | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index a7fb928..25e563b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -3,7 +3,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Update Firefox to 45.4.0esr * Update Tor to 0.2.9.2-alpha * Update OpenSSL to 1.0.2h (bug 20095) - * Update Torbutton to 1.9.6.3 + * Update Torbutton to 1.9.6.4 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider * Bug 18589: Clear site security settings during New Identity @@ -13,7 +13,7 @@ Tor Browser 6.5a3 -- September 20 2016 * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 * Bug 14271: Make Torbutton work with Unix Domain Socket option * Translation updates - * Update Tor Launcher to 0.2.10 + * Update Tor Launcher to 0.2.10.1 * Bug 14272: Make Tor Launcher work with Unix Domain Socket option * Bug 19568: Set CurProcD for Thunderbird/Instantbird * Bug 19432: Remove special handling for Instantbird/Thunderbird diff --git a/gitian/versions.alpha b/gitian/versions.alpha index c87def8..6e92fcb 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -14,10 +14,10 @@ FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2 TOR_TAG=tor-0.2.9.2-alpha -TORLAUNCHER_TAG=0.2.10 -TORBUTTON_TAG=1.9.6.3 +TORLAUNCHER_TAG=0.2.10.1 +TORBUTTON_TAG=1.9.6.4 HTTPSE_TAG=5.2.4 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8

1 0

[torbutton/master] Version bump for new tag
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 1db6465b140fa61092dddee2c60ec5297045a72f Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 13:39:03 2016 +0000 Version bump for new tag --- src/CHANGELOG | 1 + src/install.rdf | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 56a40f3..6d68055 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,4 @@ +1.9.6.4 1.9.6.3 * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git * Bug 17767: Make "JavaScript disabled" more visible in Security Slider diff --git a/src/install.rdf b/src/install.rdf index 3d0ee37..7243571 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.6.3</em:version> + <em:version>1.9.6.4</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

1 0

[tor-browser-bundle/master] Release preparations for 6.5a3
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit c1fee0d5f7e27de3636998dda7c7f0a644b710b7 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 12:49:01 2016 +0000 Release preparations for 6.5a3 Versions bumps, changelog update, and updating config.yml --- Bundle-Data/Docs/ChangeLog.txt | 38 ++++++++++++++++++++++++++++++++++++++ gitian/versions.alpha | 16 ++++++++-------- tools/update-responses/config.yml | 10 +++++----- 3 files changed, 51 insertions(+), 13 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 60a60cf..a7fb928 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,41 @@ +Tor Browser 6.5a3 -- September 20 2016 + * All Platforms + * Update Firefox to 45.4.0esr + * Update Tor to 0.2.9.2-alpha + * Update OpenSSL to 1.0.2h (bug 20095) + * Update Torbutton to 1.9.6.3 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + * Bug 18589: Clear site security settings during New Identity + * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times + * Bug 19837: Whitelist internal URLs that Firefox requires for media + * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic + * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 + * Bug 14271: Make Torbutton work with Unix Domain Socket option + * Translation updates + * Update Tor Launcher to 0.2.10 + * Bug 14272: Make Tor Launcher work with Unix Domain Socket option + * Bug 19568: Set CurProcD for Thunderbird/Instantbird + * Bug 19432: Remove special handling for Instantbird/Thunderbird + * Translation updates + * Update HTTPS-Everywhere to 5.2.4 + * Update NoScript to 2.9.0.14 + * Bug 14273: Backport patches for Unix Domain Socket support + * Bug 19890: Disable installation of system addons + * Bug 17334: Spoof referrer when leaving a .onion domain + * Bug 20092: Rotate ports for default obfs4 bridges + * Bug 20040: Add update support for unpacked HTTPS Everywhere + * Bug 20118: Don't unpack HTTPS Everywhere anymore + * Bug 19336+19835: Enhance about:tbupdate page + * Android + * Bug 19706: Store browser data in the app home directory + * Build system + * All platforms + * Bug 20133: Don't apply OpenSSL patch anymore + * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version + * OS X + * Bug 19856: Make OS X builds reproducible again + Tor Browser 6.0.4 -- August 16 2016 * All Platforms * Update Tor to 0.2.8.6 diff --git a/gitian/versions.alpha b/gitian/versions.alpha index ee8a197..c87def8 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -10,15 +10,15 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.3.0esr +FIREFOX_VERSION=45.4.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2 -TOR_TAG=tor-0.2.8.5-rc -TORLAUNCHER_TAG=0.2.9.3 -TORBUTTON_TAG=1.9.6.1 -HTTPSE_TAG=5.2.1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 +TOR_TAG=tor-0.2.9.2-alpha +TORLAUNCHER_TAG=0.2.10 +TORBUTTON_TAG=1.9.6.3 +HTTPSE_TAG=5.2.4 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.22-stable @@ -68,7 +68,7 @@ NSIS_VER=2.51 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.12-fx+fn+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.14-fx+fn+sm.xpi TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -102,7 +102,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=3fa641dcb60455c950cef0c15effa8ca060b3b05405f46f55cbdb922929027e7 +NOSCRIPT_HASH=39bc71be20c318578239ea791c0341dbfcd13b33559af080cea386eeec08b337 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 050328e..8c047b5 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -15,7 +15,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - alpha: 6.5a2 + alpha: 6.5a3 release: 6.0.1 versions: 6.0.1: @@ -29,11 +29,11 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 6.5a2: - platformVersion: 45.3.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-65a2-released + 6.5a3: + platformVersion: 45.4.0 + detailsURL: https://blog.torproject.org/blog/tor-browser-65a3-released incremental_from: - - 6.5a1 + - 6.5a2 migrate_archs: osx32: osx64 osx32:

1 0

[torbutton/master] Release preparations for 1.9.6.3
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit d3541bff2c22f30fe9f127cf3f4b005790ec253c Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 09:40:42 2016 +0000 Release preparations for 1.9.6.3 --- src/CHANGELOG | 4 ++++ src/install.rdf | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 599645c..56a40f3 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,7 @@ +1.9.6.3 + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + 1.9.6.2 * Bug 18589: Clear site security settings during New Identity * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times diff --git a/src/install.rdf b/src/install.rdf index 5936299..3d0ee37 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.6.2</em:version> + <em:version>1.9.6.3</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

1 0

[tor-browser/tor-browser-45.3.0esr-6.5-1] Bug 17334: Spoof referrer when leaving a .onion domain
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 5837ac47afae9ca736ec4c4fedf0d83d6a601bc9 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Fri Sep 9 22:50:47 2016 -0700 Bug 17334: Spoof referrer when leaving a .onion domain Note I also remove a superfluous and confusing line, `currentHost = referrerHost;` --- netwerk/protocol/http/HttpBaseChannel.cpp | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/netwerk/protocol/http/HttpBaseChannel.cpp b/netwerk/protocol/http/HttpBaseChannel.cpp index 76c4a9a..8d9a408 100644 --- a/netwerk/protocol/http/HttpBaseChannel.cpp +++ b/netwerk/protocol/http/HttpBaseChannel.cpp @@ -14,6 +14,7 @@ #include "nsMimeTypes.h" #include "nsNetCID.h" #include "nsNetUtil.h" +#include "nsReadableUtils.h" #include "nsICachingChannel.h" #include "nsIDOMDocument.h" @@ -1389,13 +1390,15 @@ HttpBaseChannel::SetReferrerWithPolicy(nsIURI *referrer, return NS_OK; } - // send spoofed referrer if desired - if (userSpoofReferrerSource) { + bool leavingOnion = !currentHost.Equals(referrerHost) && + StringEndsWith(referrerHost, NS_LITERAL_CSTRING(".onion")); + + // send spoofed referrer if desired by user, or if we are leaving a .onion + if (userSpoofReferrerSource || leavingOnion) { nsCOMPtr<nsIURI> mURIclone; rv = mURI->CloneIgnoringRef(getter_AddRefs(mURIclone)); if (NS_FAILED(rv)) return rv; clone = mURIclone; - currentHost = referrerHost; } // strip away any userpass; we don't want to be giving out passwords ;-)

1 0

[torbutton/master] Bug 17334: Move referrer spoof for .onion domains to tor-browser.git
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 7f7129eb1eac515ca77d9f4b06bbf4b150fcffbe Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Fri Sep 9 23:10:48 2016 -0700 Bug 17334: Move referrer spoof for .onion domains to tor-browser.git --- src/chrome.manifest | 4 -- src/components/torRefSpoofer.js | 90 ----------------------------------------- 2 files changed, 94 deletions(-) diff --git a/src/chrome.manifest b/src/chrome.manifest index 7ca2a75..78da042 100644 --- a/src/chrome.manifest +++ b/src/chrome.manifest @@ -165,14 +165,10 @@ contract @torproject.org/domain-isolator;1 {e33fd6d4-270f-475f-a96f-ff3140279f68 category profile-after-change CookieJarSelector @torproject.org/cookie-jar-selector;1 -component {65be2be0-ceb4-44c2-91a5-9c75c53430bf} components/torRefSpoofer.js -contract @torproject.org/torRefSpoofer;1 {65be2be0-ceb4-44c2-91a5-9c75c53430bf} - component {4c03be7d-492f-990e-f0da-f3689e564898} components/content-policy.js contract @torproject.org/content-policy;1 {4c03be7d-492f-990e-f0da-f3689e564898} category content-policy ContentPolicy @torproject.org/content-policy;1 -category profile-after-change RefSpoofer @torproject.org/torRefSpoofer;1 category profile-after-change StartupObserver @torproject.org/startup-observer;1 category profile-after-change DomainIsolator @torproject.org/domain-isolator;1 category profile-after-change ExtAppBlockerService @torproject.org/torbutton-extAppBlockerService;1 diff --git a/src/components/torRefSpoofer.js b/src/components/torRefSpoofer.js deleted file mode 100644 index b69f8e0..0000000 --- a/src/components/torRefSpoofer.js +++ /dev/null @@ -1,90 +0,0 @@ -// Clear referer on cross-domain requests to/from Tor Hidden Services: #9623 -// ("Smart referer" previously spoofed referer on all cross-domain requests.) - -const kMODULE_CID = Components.ID("65be2be0-ceb4-44c2-91a5-9c75c53430bf"); -const kMODULE_CONTRACTID = "@torproject.org/torRefSpoofer;1"; - -function RefSpoofer() { - this.logger = Components.classes["@torproject.org/torbutton-logger;1"]. - getService(Components.interfaces.nsISupports).wrappedJSObject; - this.logger.log(3, "RefSpoof component created"); - this.onionDomainRegex = new RegExp("\\.onion$", "i"); // THS hosts - this.thirdPartyUtil = Components.classes["@mozilla.org/thirdpartyutil;1"]. - getService(Components.interfaces.mozIThirdPartyUtil); - this.ios = Components.classes["@mozilla.org/network/io-service;1"]. - getService(Components.interfaces.nsIIOService); -} - - -RefSpoofer.prototype = { - observe: function(subject, topic, data) - { - if (topic == "http-on-modify-request") { - subject.QueryInterface(Components.interfaces.nsIHttpChannel); - this.onModifyRequest(subject); - return; - } - if (topic == "profile-after-change") { - this.logger.log(3, "RefSpoof got profile-after-change"); - var os = Components.classes["@mozilla.org/observer-service;1"]. - getService(Components.interfaces.nsIObserverService); - os.addObserver(this, "http-on-modify-request", false); - return; - } - }, - onModifyRequest: function(oHttpChannel) - { - var referer; - - try { - oHttpChannel.QueryInterface(Components.interfaces.nsIChannel); - try { - referer = oHttpChannel.getRequestHeader("Referer"); - referer = this.ios.newURI(referer, null, null); //make a nsIURI object for referer - } catch (referr) { - return; //no referer available or invalid uri - } - // Only spoof referer for cross-domain requests from .onions - if (this.onionDomainRegex.test(referer.host) && - this.thirdPartyUtil.isThirdPartyURI(referer, oHttpChannel.URI)) { - // Set the referer to the domain being requested. This makes it harder - // to tell that we are referer-spoofing. - this.adjustRef(oHttpChannel, - [oHttpChannel.URI.scheme, oHttpChannel.URI.host].join("://")); - } - } catch (ex) { - this.logger.log(5, "RefSpoof onModifyRequest: " + ex); - } - }, - adjustRef: function(oChannel, sRef) - { - try { - if (oChannel.referrer) - { - oChannel.referrer.spec = sRef; - oChannel.setRequestHeader("Referer", sRef, false); - } - return true; - } - catch (ex) { - this.logger.log(5, "RefSpoof adjustRef: " +ex); - } - return false; - }, - QueryInterface: function(iid) - { - if (!iid.equals(Components.interfaces.nsISupports) && - !iid.equals(Components.interfaces.nsIObserver) && - !iid.equals(Components.interfaces.nsISupportsWeakReference)) { - throw Components.results.NS_ERROR_NO_INTERFACE; - } - return this; - }, - _xpcom_categories: [{category:"profile-after-change"}], - classID: kMODULE_CID, - contractID: kMODULE_CONTRACTID, - classDescription: "Tor Ref Spoofer" -}; - -Components.utils.import("resource://gre/modules/XPCOMUtils.jsm"); -var NSGetFactory = XPCOMUtils.generateNSGetFactory([RefSpoofer]);

1 0

[tor-launcher/maint-0.2.10] Version bump
by gk＠torproject.org 15 Sep '16

15 Sep '16

commit 42ee1aa7706f4aa1a8ce58c9b7af61701259ab02 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Sep 15 08:29:57 2016 +0000 Version bump --- src/install.rdf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/install.rdf b/src/install.rdf index 7598b60..96f9a66 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -7,7 +7,7 @@ <em:creator>The Tor Project, Inc.</em:creator> <em:contributor>Pearl Crescent, LLC</em:contributor> <em:id>tor-launcher(a)torproject.org</em:id> - <em:version>0.2.9.3</em:version> + <em:version>0.2.10</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html</em:homepageURL> <em:updateURL>data:text/plain,</em:updateURL> <em:updateKey>-</em:updateKey>

1 0