- tbb-commits - lists.torproject.org

[tor-browser-bundle/hardened-builds] Bumping tor-browser version for nightlies
by gk＠torproject.org 25 Jan '17

25 Jan '17

commit 4c0f692080130b43026f697859faaeb00f8fc5ef Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jan 25 13:15:21 2017 +0000 Bumping tor-browser version for nightlies --- gitian/versions.nightly | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gitian/versions.nightly b/gitian/versions.nightly index cb196ed..dca64e1 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -17,11 +17,11 @@ MULTI_LINGUAL=1 VERIFY_TAGS=0 -FIREFOX_VERSION=45.6.0esr +FIREFOX_VERSION=45.7.0esr TORBROWSER_UPDATE_CHANNEL=default -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1 TOR_TAG=master TORLAUNCHER_TAG=master TORBUTTON_TAG=master

1 0

[tor-browser-bundle/master] Bumping tor-browser version for nightlies
by gk＠torproject.org 25 Jan '17

25 Jan '17

commit 9ee3e37518262391c1aec31341ca26aff2efee42 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jan 25 13:15:21 2017 +0000 Bumping tor-browser version for nightlies --- gitian/versions.nightly | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 0ca5ed6..d181106 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -17,11 +17,11 @@ MULTI_LINGUAL=1 VERIFY_TAGS=0 -FIREFOX_VERSION=45.6.0esr +FIREFOX_VERSION=45.7.0esr TORBROWSER_UPDATE_CHANNEL=default -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1 TOR_TAG=master TORLAUNCHER_TAG=master TORBUTTON_TAG=master

1 0

[tor-browser-bundle/master] Folding in stable and hardened changelog
by gk＠torproject.org 25 Jan '17

25 Jan '17

commit 966ccee3a7f6ecd5dd8d09f13bc2841cc2dab754 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jan 25 13:12:21 2017 +0000 Folding in stable and hardened changelog --- Bundle-Data/Docs/ChangeLog.txt | 115 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 115 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index f5d9a92..6dc7b45 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,24 @@ +Tor Browser 7.0a1-hardened -- January 25 2017 + * All Platforms + * Update Firefox to 45.7.0esr + * Tor to 0.3.0.2-alpha + * Update Torbutton to 1.9.7 + * Bug 19898: Use DuckDuckGo on about:tor + * Bug 21091: Hide the update check menu entry when running under the sandbox + * Bug 21243: Add links to es, fr, and pt Tor Browser manual + * Bug 21194: Show snowflake in the circuit display + * Bug 21131: Remove 2016 donation banner + * Translation updates + * Update HTTPS-Everywhere to 5.2.9 + * Update NoScript to 2.9.5.3 + * Bug 20471: Allow javascript: links from HTTPS first party pages + * Bug 20651: DuckDuckGo does not work with JavaScript disabled + * Bug 20589: Add new MAR signing key + * Bug 20735: Add snowflake pluggable transport to alpha Linux builds + * Build system + * All platforms + * Bug 20927: Upgrade Go to 1.7.4 + Tor Browser 7.0a1 -- January 25 2017 * All Platforms * Update Firefox to 45.7.0esr @@ -27,6 +48,100 @@ Tor Browser 7.0a1 -- January 25 2017 * Linux * Bug 21103: Update descriptors for sandboxed-tor-browser 0.0.3 +Tor Browser 6.5 -- January 24 2017 + * All Platforms + * Update Firefox to 45.7.0esr + * Tor to 0.2.9.9 + * OpenSSL to 1.0.2j + * Update Torbutton to 1.9.6.12 + * Bug 16622: Timezone spoofing moved to tor-browser.git + * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git + * Bug 8725: Block addon resource and url fingerprinting with nsIContentPolicy + * Bug 20701: Allow the directory listing stylesheet in the content policy + * Bug 19837: Whitelist internal URLs that Firefox requires for media + * Bug 19206: Avoid SOCKS auth and NEWNYM collisions when sharing a tor client + * Bug 19273: Improve external app launch handling and associated warnings + * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic + * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6 + * Bug 17767: Make "JavaScript disabled" more visible in Security Slider + * Bug 20556: Use pt-BR strings from now on + * Bug 20614: Add links to Tor Browser User Manual + * Bug 20414: Fix non-rendering arrow on OS X + * Bug 20728: Fix bad preferences.xul dimensions + * Bug 19898: Use DuckDuckGo on about:tor + * Bug 21091: Hide the update check menu entry when running under the sandbox + * Bug 19459: Move resizing code to tor-browser.git + * Bug 20264: Change security slider to 3 options + * Bug 20347: Enhance security slider's custom mode + * Bug 20123: Disable remote jar on all security levels + * Bug 20244: Move privacy checkboxes to about:preferences#privacy + * Bug 17546: Add tooltips to explain our privacy checkboxes + * Bug 17904: Allow security settings dialog to resize + * Bug 18093: Remove 'Restore Defaults' button + * Bug 20373: Prevent redundant dialogs opening + * Bug 20318: Remove helpdesk link from about:tor + * Bug 21243: Add links for pt, es, and fr Tor Browser manuals + * Bug 20753: Remove obsolete StartPage locale strings + * Bug 21131: Remove 2016 donation banner + * Bug 18980: Remove obsolete toolbar button code + * Bug 18238: Remove unused Torbutton code and strings + * Bug 20388+20399+20394: Code clean-up + * Translation updates + * Update Tor Launcher to 0.2.10.3 + * Bug 19568: Set CurProcD for Thunderbird/Instantbird + * Bug 19432: Remove special handling for Instantbird/Thunderbird + * Translation updates + * Update HTTPS-Everywhere to 5.2.9 + * Update NoScript to 2.9.5.3 + * Bug 16622: Spoof timezone with Firefox patch + * Bug 17334: Spoof referrer when leaving a .onion domain + * Bug 19273: Write C++ patch for external app launch handling + * Bug 19459: Size new windows to 1000x1000 or nearest 200x100 (Firefox patch) + * Bug 12523: Mark JIT pages as non-writable + * Bug 20123: Always block remote jar files + * Bug 19193: Reduce timing precision for AudioContext, HTMLMediaElement, and MediaStream + * Bug 19164: Remove support for SHA-1 HPKP pins + * Bug 19186: KeyboardEvents are only rounding to 100ms + * Bug 16998: Isolate preconnect requests to URL bar domain + * Bug 19478: Prevent millisecond resolution leaks in File API + * Bug 20471: Allow javascript: links from HTTPS first party pages + * Bug 20244: Move privacy checkboxes to about:preferences#privacy + * Bug 20707: Fix broken preferences tab in non-en-US alpha bundles + * Bug 20709: Fix wrong update URL in alpha bundles + * Bug 19481: Point the update URL to aus1.torproject.org + * Bug 20556: Start using pt-BR instead of pt-PT for Portuguese + * Bug 20442: Backport fix for local path disclosure after drag and drop + * Bug 20160: Backport fix for broken MP3-playback + * Bug 20043: Isolate SharedWorker script requests to first party + * Bug 18923: Add script to run all Tor Browser regression tests + * Bug 20651: DuckDuckGo does not work with JavaScript disabled + * Bug 19336+19835: Enhance about:tbupdate page + * Bug 20399+15852: Code clean-up + * Windows + * Bug 20981: On Windows, check TZ for timezone first + * Bug 18175: Maximizing window and restarting leads to non-rounded window size + * Bug 13437: Rounded inner window accidentally grows to non-rounded size + * OS X + * Bug 20590: Badly resized window due to security slider notification bar on OS X + * Bug 20439: Make the build PIE on OSX + * Linux + * Bug 20691: Updater breaks if unix domain sockets are used + * Bug 15953: Weird resizing dance on Tor Browser startup + * Build system + * All platforms + * Bug 20927: Upgrade Go to 1.7.4 + * Bug 20583: Make the downloads.json file reproducible + * Bug 20133: Don't apply OpenSSL patch anymore + * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version + * Bug 18291: Remove some uses of libfaketime + * Bug 18845: Make zip and tar helpers generate reproducible archives + * OS X + * Bug 20258: Make OS X Tor archive reproducible again + * Bug 20184: Make OS X builds reproducible (use clang for compiling tor) + * Bug 19856: Make OS X builds reproducible (getting libfaketime back) + * Bug 19410: Fix incremental updates by taking signatures into account + * Bug 20210: In dmg2mar, extract old mar file to copy permissions to the new one + Tor Browser 6.5a6-hardened -- December 14 2016 * All Platforms * Update Firefox to 45.6.0esr

1 0

[tor-browser-build/master] macosx-toolchain: remove unused variables
by boklm＠torproject.org 24 Jan '17

24 Jan '17

commit 288f5223ca434226cc376f0802a58a974b8e3d4b Author: Nicolas Vigier <boklm(a)torproject.org> Date: Tue Jan 24 12:51:38 2017 +0100 macosx-toolchain: remove unused variables macosx-toolchain is currently used in two components: firefox and tor. In the firefox build we don't use those (unexported) variables. In the tor build we only use CFLAGS and CXXFLAGS through the configure options, and we move them to var/FLAGS in rbm.conf. --- projects/macosx-toolchain/config | 9 --------- rbm.conf | 3 ++- 2 files changed, 2 insertions(+), 10 deletions(-) diff --git a/projects/macosx-toolchain/config b/projects/macosx-toolchain/config index 0bf4575..6458485 100644 --- a/projects/macosx-toolchain/config +++ b/projects/macosx-toolchain/config @@ -11,15 +11,6 @@ var: export cctoolsdir=/var/tmp/dist/[% project %]/cctools/bin export PATH="$clangdir/helpers:$clangdir/bin:$cctoolsdir:$PATH" export LD_LIBRARY_PATH=/var/tmp/dist/[% project %]/clang/lib - CFLAGS="-target x86_64-apple-darwin10 -mlinker-version=136 -B $cctoolsdir -isysroot $sysrootdir" - CXXFLAGS="$CFLAGS" - CC="$clangdir/helpers/clang $CFLAGS" - CXX="$clangdir/helpers/clang++ $CXXFLAGS" - RANLIB=$cctoolsdir/x86_64-apple-darwin10-ranlib - AR=$cctoolsdir/x86_64-apple-darwin10-ar - AS=$cctoolsdir/x86_64-apple-darwin10-as - LD=$cctoolsdir/x86_64-apple-darwin10-ld - STRIP=$cctoolsdir/x86_64-apple-darwin10-strip input_files: - name: llvm diff --git a/rbm.conf b/rbm.conf index cbd725f..05e45a6 100644 --- a/rbm.conf +++ b/rbm.conf @@ -131,7 +131,8 @@ targets: osx: 1 osname: osx-x86_64 compiler: 'macosx-toolchain' - configure_opt: '--host=x86_64-apple-darwin10 CC="x86_64-apple-darwin10-clang $CFLAGS" CXX="x86_64-apple-darwin10-clang++ $CXXFLAGS"' + configure_opt: '--host=x86_64-apple-darwin10 CC="x86_64-apple-darwin10-clang [% c("var/FLAGS") %]" CXX="x86_64-apple-darwin10-clang++ [% c("var/FLAGS") %]"' + FLAGS: "-target x86_64-apple-darwin10 -mlinker-version=136 -B $cctoolsdir -isysroot $sysrootdir" locale_ja: ja-JP-mac deps: - build-essential

1 0

[tor-browser-build/master] Test commit (remove superfluous whitespace)
by gk＠torproject.org 23 Jan '17

23 Jan '17

commit 0159ed07a8c37f04637bf7d59bbbb35949caec63 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jan 23 21:10:17 2017 +0000 Test commit (remove superfluous whitespace) --- README | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README b/README index a1d57c6..0b8e510 100644 --- a/README +++ b/README @@ -46,7 +46,7 @@ Starting a build To start a build, run one of the following commands, depending on the channel you want to build: - + $ make release $ make alpha $ make nightly

1 0

[tor-browser-build/master] Update rbm submodule url
by boklm＠torproject.org 23 Jan '17

23 Jan '17

commit 0ff4bb1275c878d7650f2ffc0d872a1af216c73d Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Jan 23 21:39:01 2017 +0100 Update rbm submodule url --- .gitmodules | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitmodules b/.gitmodules index f85be07..2c1c6e6 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,3 +1,3 @@ [submodule "rbm"] path = rbm - url = https://github.com/boklm/rbm + url = https://git.torproject.org/builders/rbm.git

1 0

[tor-browser-bundle/hardened-builds] Pick up a new tor tag
by gk＠torproject.org 23 Jan '17

23 Jan '17

commit 249596f03de46d395efcbbcbcf4608a6abf99475 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jan 23 16:11:27 2017 +0000 Pick up a new tor tag --- Bundle-Data/Docs/ChangeLog.txt | 2 +- gitian/versions.alpha | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 3a3e1b6..f349311 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,7 +1,7 @@ Tor Browser 7.0a1-hardened -- January 25 2017 * All Platforms * Update Firefox to 45.7.0esr - * Tor to 0.3.0.1-alpha + * Tor to 0.3.0.2-alpha * Update Torbutton to 1.9.7 * Bug 19898: Use DuckDuckGo on about:tor * Bug 21091: Hide the update check menu entry when running under the sandbox diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 7d1e8b3..aaacef9 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -19,7 +19,7 @@ FIREFOX_VERSION=45.7.0esr TORBROWSER_UPDATE_CHANNEL=hardened TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1-build1 -TOR_TAG=tor-0.3.0.1-alpha +TOR_TAG=tor-0.3.0.2-alpha TORLAUNCHER_TAG=0.2.11.1 TORBUTTON_TAG=1.9.7 HTTPSE_TAG=5.2.9

1 0

[tor-browser-bundle/master] Pick a up new tor tag
by gk＠torproject.org 23 Jan '17

23 Jan '17

commit 7d2a4011f7af5f8d5ff3b521fef75e74fbb32ec5 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jan 23 16:08:35 2017 +0000 Pick a up new tor tag --- Bundle-Data/Docs/ChangeLog.txt | 2 +- gitian/versions.alpha | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index fc60c5a..f5d9a92 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,7 +1,7 @@ Tor Browser 7.0a1 -- January 25 2017 * All Platforms * Update Firefox to 45.7.0esr - * Tor to 0.3.0.1-alpha + * Tor to 0.3.0.2-alpha * Update Torbutton to 1.9.7 * Bug 19898: Use DuckDuckGo on about:tor * Bug 21091: Hide the update check menu entry when running under the sandbox diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 774512d..a6f1aac 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -15,7 +15,7 @@ FIREFOX_VERSION=45.7.0esr TORBROWSER_UPDATE_CHANNEL=alpha TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1-build1 -TOR_TAG=tor-0.3.0.1-alpha +TOR_TAG=tor-0.3.0.2-alpha TORLAUNCHER_TAG=0.2.10.2 TORBUTTON_TAG=1.9.7 HTTPSE_TAG=5.2.9

1 0

[tor-browser-bundle/maint-6.5] Picking up new tor tag
by gk＠torproject.org 23 Jan '17

23 Jan '17

commit 536b7cf8cfc2d065a2ee3564b9a4148f52a0e7d4 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jan 23 15:38:59 2017 +0000 Picking up new tor tag --- Bundle-Data/Docs/ChangeLog.txt | 2 +- gitian/versions | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index f58a62f..ff6267c 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,7 +1,7 @@ Tor Browser 6.5 -- January 24 2017 * All Platforms * Update Firefox to 45.7.0esr - * Tor to 0.2.9.8 + * Tor to 0.2.9.9 * OpenSSL to 1.0.2j * Update Torbutton to 1.9.6.12 * Bug 16622: Timezone spoofing moved to tor-browser.git diff --git a/gitian/versions b/gitian/versions index 691168d..73bbc83 100755 --- a/gitian/versions +++ b/gitian/versions @@ -15,7 +15,7 @@ FIREFOX_VERSION=45.7.0esr TORBROWSER_UPDATE_CHANNEL=release TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 -TOR_TAG=tor-0.2.9.8 +TOR_TAG=tor-0.2.9.9 TORLAUNCHER_TAG=0.2.10.3 TORBUTTON_TAG=1.9.6.12 HTTPSE_TAG=5.2.9

1 0

[tor-browser-bundle/hardened-builds] Release preparations for 7.0a1-hardened
by gk＠torproject.org 23 Jan '17

23 Jan '17

commit 60c82df8b9365c61ed3318787d783cbc737965e9 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jan 23 08:16:57 2017 +0000 Release preparations for 7.0a1-hardened Changelog update, version bumps, and config.yml update --- Bundle-Data/Docs/ChangeLog.txt | 21 +++++++++++++++++++++ gitian/versions.alpha | 10 +++++----- tools/update-responses/config.yml | 11 +++++------ 3 files changed, 31 insertions(+), 11 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index def8f6a..3a3e1b6 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,24 @@ +Tor Browser 7.0a1-hardened -- January 25 2017 + * All Platforms + * Update Firefox to 45.7.0esr + * Tor to 0.3.0.1-alpha + * Update Torbutton to 1.9.7 + * Bug 19898: Use DuckDuckGo on about:tor + * Bug 21091: Hide the update check menu entry when running under the sandbox + * Bug 21243: Add links to es, fr, and pt Tor Browser manual + * Bug 21194: Show snowflake in the circuit display + * Bug 21131: Remove 2016 donation banner + * Translation updates + * Update HTTPS-Everywhere to 5.2.9 + * Update NoScript to 2.9.5.3 + * Bug 20471: Allow javascript: links from HTTPS first party pages + * Bug 20651: DuckDuckGo does not work with JavaScript disabled + * Bug 20589: Add new MAR signing key + * Bug 20735: Add snowflake pluggable transport to alpha Linux builds + * Build system + * All platforms + * Bug 20927: Upgrade Go to 1.7.4 + Tor Browser 6.5a6-hardened -- December 14 2016 * All Platforms * Update Firefox to 45.6.0esr diff --git a/gitian/versions.alpha b/gitian/versions.alpha index da847c6..7d1e8b3 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -14,15 +14,15 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.6.0esr +FIREFOX_VERSION=45.7.0esr TORBROWSER_UPDATE_CHANNEL=hardened -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 -TOR_TAG=tor-0.2.9.7-rc +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1-build1 +TOR_TAG=tor-0.3.0.1-alpha TORLAUNCHER_TAG=0.2.11.1 -TORBUTTON_TAG=1.9.6.9 -HTTPSE_TAG=5.2.8 +TORBUTTON_TAG=1.9.7 +HTTPSE_TAG=5.2.9 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.22-stable diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 54c4082..21c039b 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -20,7 +20,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - hardened: 6.5a6-hardened + hardened: 7.0a1-hardened release: 6.0.1 versions: 6.0.1: @@ -33,12 +33,11 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 6.5a6-hardened: - platformVersion: 45.6.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-65a6-hardened-released + 7.0a1-hardened: + platformVersion: 45.7.0 + detailsURL: https://blog.torproject.org/blog/tor-browser-70a1-hardened-released incremental_from: - - 6.5a4-hardened - - 6.5a5-hardened + - 6.5a6-hardened migrate_archs: osx32: osx64 osx32:

1 0