- tbb-commits - lists.torproject.org

[tor-browser/tor-browser-60.7.0esr-9.0-1] Bug 1552993 - r=valentin, dragana
by gk＠torproject.org 03 Jun '19

03 Jun '19

commit 4f998a1c15a84441d0f81eec59dc774ec5dc1127 Author: Gijs Kruitbosch <gijskruitbosch(a)gmail.com> Date: Mon May 27 09:14:33 2019 +0000 Bug 1552993 - r=valentin,dragana Differential Revision: https://phabricator.services.mozilla.com/D32066 --HG-- extra : moz-landing-system : lando --- netwerk/protocol/http/AlternateServices.cpp | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/netwerk/protocol/http/AlternateServices.cpp b/netwerk/protocol/http/AlternateServices.cpp index 2232d7cbf1a4..bebfc4c02bb7 100644 --- a/netwerk/protocol/http/AlternateServices.cpp +++ b/netwerk/protocol/http/AlternateServices.cpp @@ -128,6 +128,11 @@ void AltSvcMapping::ProcessHeader( continue; } + if (NS_FAILED(NS_CheckPortSafety(portno, originScheme.get()))) { + LOG(("Alt Svc doesn't allow port %d, ignoring", portno)); + continue; + } + // unescape modifies a c string in place, so afterwards // update nsCString length nsUnescape(npnToken.BeginWriting());

1 0

[tor-browser-build/master] Bug 23384: install fail2ban on build-sunet-a.torproject.net
by boklm＠torproject.org 03 Jun '19

03 Jun '19

commit 67e4879c13a082372fa34f76b49c99781dee3768 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Jun 3 11:14:15 2019 +0200 Bug 23384: install fail2ban on build-sunet-a.torproject.net --- tools/ansible/roles/useful-packages/tasks/main.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/ansible/roles/useful-packages/tasks/main.yml b/tools/ansible/roles/useful-packages/tasks/main.yml index 5cee49f..1bb0255 100644 --- a/tools/ansible/roles/useful-packages/tasks/main.yml +++ b/tools/ansible/roles/useful-packages/tasks/main.yml @@ -11,3 +11,4 @@ - tor - torsocks - screen + - fail2ban

1 0

[tor-browser-build/master] Revert "Bug 29641: Try to connect over IPv6 if needed"
by gk＠torproject.org 31 May '19

31 May '19

commit 5e8a92b225e3f67a4df6ce9e47e62eee59ed90fb Author: Georg Koppen <gk(a)torproject.org> Date: Fri May 31 11:47:29 2019 +0000 Revert "Bug 29641: Try to connect over IPv6 if needed" This reverts commit f75cf0bd2e1c4cef96a31e266da4a0385e5f2016. See: bug 30639 for the reasoning behind the revert and some work we need to do in the meantime. --- projects/tor-browser/Bundle-Data/linux/Data/Tor/torrc-defaults | 1 - projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults | 1 - projects/tor-browser/Bundle-Data/windows/Data/Tor/torrc-defaults | 1 - 3 files changed, 3 deletions(-) diff --git a/projects/tor-browser/Bundle-Data/linux/Data/Tor/torrc-defaults b/projects/tor-browser/Bundle-Data/linux/Data/Tor/torrc-defaults index d0c074e..f3645cd 100644 --- a/projects/tor-browser/Bundle-Data/linux/Data/Tor/torrc-defaults +++ b/projects/tor-browser/Bundle-Data/linux/Data/Tor/torrc-defaults @@ -13,4 +13,3 @@ AvoidDiskWrites 1 Log notice stdout CookieAuthentication 1 DormantCanceledByStartup 1 -ClientAutoIPv6ORPort 1 diff --git a/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults b/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults index d0c074e..f3645cd 100644 --- a/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults +++ b/projects/tor-browser/Bundle-Data/mac/TorBrowser/Data/Tor/torrc-defaults @@ -13,4 +13,3 @@ AvoidDiskWrites 1 Log notice stdout CookieAuthentication 1 DormantCanceledByStartup 1 -ClientAutoIPv6ORPort 1 diff --git a/projects/tor-browser/Bundle-Data/windows/Data/Tor/torrc-defaults b/projects/tor-browser/Bundle-Data/windows/Data/Tor/torrc-defaults index d0c074e..f3645cd 100644 --- a/projects/tor-browser/Bundle-Data/windows/Data/Tor/torrc-defaults +++ b/projects/tor-browser/Bundle-Data/windows/Data/Tor/torrc-defaults @@ -13,4 +13,3 @@ AvoidDiskWrites 1 Log notice stdout CookieAuthentication 1 DormantCanceledByStartup 1 -ClientAutoIPv6ORPort 1

1 0

[tor-browser-build/maint-8.5] Release preparations for 8.5.1
by gk＠torproject.org 31 May '19

31 May '19

commit 4fd074e59d14c3a4b43a308c796486ab84e5b113 Author: Georg Koppen <gk(a)torproject.org> Date: Fri May 31 11:25:08 2019 +0000 Release preparations for 8.5.1 Versions bump and Changelog update --- projects/firefox/config | 2 +- projects/https-everywhere/config | 2 +- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 18 ++++++++++++++++++ projects/torbutton/config | 2 +- rbm.conf | 6 +++--- 5 files changed, 24 insertions(+), 6 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index 35dac3a..8547aca 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build1' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build2' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/https-everywhere/config b/projects/https-everywhere/config index 60776cb..2db9177 100644 --- a/projects/https-everywhere/config +++ b/projects/https-everywhere/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 2019.5.6.1 +version: 2019.5.13 git_url: https://git.torproject.org/https-everywhere.git git_hash: '[% c("version") %]' git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 83e2a2d..e881c48 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,21 @@ +Tor Browser 8.5.1 -- June 4 2019 + * All platforms + * Update Torbutton to 2.1.10 + * Bug 30565: Sync nocertdb with privatebrowsing.autostart at startup + * Bug 30464: Add WebGL to safer descriptions + * Translations update + * Update NoScript to 10.6.2 + * Bug 29969: Remove workaround for Mozilla's bug 1532530 + * Update HTTPS Everywhere to 2019.5.13 + * Bug 30541: Disable WebGL readPixel() for web content + * Windows + OS X + Linux + * Bug 30560: Better match actual toolbar in onboarding toolbar graphic + * Android + * Bug 30635: Sync mobile default bridges list with desktop one + * Build System + * All platforms + * Bug 30480: Check that signed tag contains expected tag name + Tor Browser 8.5 -- May 21 2019 * All platforms * Update Firefox to 60.7.0esr diff --git a/projects/torbutton/config b/projects/torbutton/config index 971f0e6..43705ae 100644 --- a/projects/torbutton/config +++ b/projects/torbutton/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 2.1.8 +version: 2.1.10 git_url: https://git.torproject.org/torbutton.git git_hash: '[% c("version") %]' gpg_keyring: torbutton.gpg diff --git a/rbm.conf b/rbm.conf index 54f6c65..ee9e322 100644 --- a/rbm.conf +++ b/rbm.conf @@ -24,10 +24,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '8.5' - torbrowser_build: 'build3' + torbrowser_version: '8.5.1' + torbrowser_build: 'build1' torbrowser_incremental_from: - - 8.0.9 + - 8.5 project_name: tor-browser multi_lingual: 0 build_mar: 1

1 0

[tor-browser/tor-browser-60.7.0esr-9.0-1] fixup! Bug 29768: Introduce new features to users
by gk＠torproject.org 31 May '19

31 May '19

commit 79286b37dd0d3711a5ef029e15286cf37339cba6 Author: Georg Koppen <gk(a)torproject.org> Date: Fri May 31 10:47:49 2019 +0000 fixup! Bug 29768: Introduce new features to users Fixes bug 30560 --- .../content/img/figure_tor-security-level.png | Bin 10888 -> 11263 bytes .../content/img/figure_tor-toolbar-layout.png | Bin 5837 -> 10569 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/browser/extensions/onboarding/content/img/figure_tor-security-level.png b/browser/extensions/onboarding/content/img/figure_tor-security-level.png index 4f940ea008ef..9a5c221c8d8e 100644 Binary files a/browser/extensions/onboarding/content/img/figure_tor-security-level.png and b/browser/extensions/onboarding/content/img/figure_tor-security-level.png differ diff --git a/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png b/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png index 0a8161087827..624ef6514d39 100644 Binary files a/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png and b/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png differ

1 0

[tor-browser/tor-browser-60.7.0esr-8.5-1] fixup! Bug 29768: Introduce new features to users
by gk＠torproject.org 31 May '19

31 May '19

commit 70d0b16f9f23c81040b6648a813c0991315afdb8 Author: Georg Koppen <gk(a)torproject.org> Date: Fri May 31 10:47:49 2019 +0000 fixup! Bug 29768: Introduce new features to users Fixes bug 30560 --- .../content/img/figure_tor-security-level.png | Bin 10888 -> 11263 bytes .../content/img/figure_tor-toolbar-layout.png | Bin 5837 -> 10569 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/browser/extensions/onboarding/content/img/figure_tor-security-level.png b/browser/extensions/onboarding/content/img/figure_tor-security-level.png index 4f940ea008ef..9a5c221c8d8e 100644 Binary files a/browser/extensions/onboarding/content/img/figure_tor-security-level.png and b/browser/extensions/onboarding/content/img/figure_tor-security-level.png differ diff --git a/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png b/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png index 0a8161087827..624ef6514d39 100644 Binary files a/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png and b/browser/extensions/onboarding/content/img/figure_tor-toolbar-layout.png differ

1 0

[tor-browser-build/maint-8.5] Bug 29969: Bump NoScript to 10.6.2
by gk＠torproject.org 31 May '19

31 May '19

commit d2c1d1718bbaf892536c5fad371b46ef7acc2555 Author: Georg Koppen <gk(a)torproject.org> Date: Thu May 23 07:15:20 2019 +0000 Bug 29969: Bump NoScript to 10.6.2 NoScript 10.6.2 removes the workround for Mozilla's bug 1532530 which caused drag-and-drop search emitting XSS warnings and a lot more false positive XSS warnings as usual. --- projects/tor-browser/config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/config b/projects/tor-browser/config index e8c0b23..d427005 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -91,9 +91,9 @@ input_files: enable: '[% c("var/snowflake") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: b15047d0045d12f28b2e1e444bdb86800257b5ca6cc8f4c8022b20c550cd9727 + sha256sum: 040bc6eaf5bdb72d5851c1f7cdc3be39302859f53dbd479757a2723e639a995f - filename: 'RelativeLink/start-tor-browser.desktop' enable: '[% c("var/linux") %]' - filename: 'RelativeLink/execdesktop'

1 0

[tor-browser-build/master] Bug 29969: Bump NoScript to 10.6.2
by gk＠torproject.org 31 May '19

31 May '19

commit db1ff5cb84595c0b9299d8326bc565517f926511 Author: Georg Koppen <gk(a)torproject.org> Date: Thu May 23 07:15:20 2019 +0000 Bug 29969: Bump NoScript to 10.6.2 NoScript 10.6.2 removes the workround for Mozilla's bug 1532530 which caused drag-and-drop search emitting XSS warnings and a lot more false positive XSS warnings as usual. --- projects/tor-browser/config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/config b/projects/tor-browser/config index ee62944..a23a4f7 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -79,9 +79,9 @@ input_files: enable: '[% c("var/snowflake") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: b15047d0045d12f28b2e1e444bdb86800257b5ca6cc8f4c8022b20c550cd9727 + sha256sum: 040bc6eaf5bdb72d5851c1f7cdc3be39302859f53dbd479757a2723e639a995f - filename: 'RelativeLink/start-tor-browser.desktop' enable: '[% c("var/linux") %]' - filename: 'RelativeLink/execdesktop'

1 0

[tor-browser/tor-browser-60.7.0esr-9.0-1] Bump Torbutton version to 2.1.10
by gk＠torproject.org 31 May '19

31 May '19

commit ba71ab060abeffb5c7b2a8ecfac27b44f9ae55f1 Author: Georg Koppen <gk(a)torproject.org> Date: Fri May 31 10:19:57 2019 +0000 Bump Torbutton version to 2.1.10 --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index a89101b9fa85..fc1b50e42123 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit a89101b9fa856bbfaec49e7b71d5f5e7175f7c81 +Subproject commit fc1b50e42123a5850098cd58e6a8889e28be8ae6

1 0

[tor-browser/tor-browser-60.7.0esr-8.5-1] Bump Torbutton version to 2.1.10
by gk＠torproject.org 31 May '19

31 May '19

commit d62f9bbafb471ad010012b03b928a73fbaa9fdbb Author: Georg Koppen <gk(a)torproject.org> Date: Fri May 31 10:18:54 2019 +0000 Bump Torbutton version to 2.1.10 --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index 0e3106d27be9..fc1b50e42123 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit 0e3106d27be9bedea991b26a0e767bea315efa82 +Subproject commit fc1b50e42123a5850098cd58e6a8889e28be8ae6

1 0