June 2014 - tor-commits - lists.torproject.org

[tor-browser-bundle/maint-3.6] Update OpenSSL hash.
by mikeperry＠torproject.org 05 Jun '14

05 Jun '14

commit 6c6c96517f10238c8ff7400705fcc060f3b5ec11 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Jun 5 10:06:07 2014 -0700 Update OpenSSL hash. --- gitian/versions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/versions b/gitian/versions index 0992031..3031ba9 100755 --- a/gitian/versions +++ b/gitian/versions @@ -67,7 +67,7 @@ LXML_PACKAGE=lxml-${LXML_VER}.tar.gz PARSLEY_PACKAGE=Parsley-${PARSLEY_VER}.tar.gz # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=53cb818c3b90e507a8348f4f5eaedb05d8bfe5358aabb508b7263cc670c3e028 +OPENSSL_HASH=9d1c8a9836aa63e2c6adb684186cbd4371c9e9dcc01d6e3bb447abf2d4d3d093 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645

1 0

[tor-browser-bundle/maint-3.6] Update 3.6.2 changelog: Mention 11630 and fix a typo.
by mikeperry＠torproject.org 05 Jun '14

05 Jun '14

commit 04c05d304a21ac609c3576500443da765fb053d2 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Jun 5 09:46:36 2014 -0700 Update 3.6.2 changelog: Mention 11630 and fix a typo. --- Bundle-Data/Docs/ChangeLog.txt | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index c7e3d89..41f44ce 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -14,18 +14,19 @@ Tor Browser Bundle 3.6.2 -- Jun 6 2014 * Bug 11783: Avoid b.webProgress error when double-clicking on New Identity * Bug 11722: Add hidden pref to force remote Tor check * Bug 11763: Fix pref dialog double-click race that caused settings to be reset - * Bug 11629: Support proxies with pluggable Transports + * Bug 11629: Support proxies with Pluggable Transports * Updates FTEProxy to 0.2.15 * Updates obfsproxy to 0.2.9 * Backported Tor Patches: * Bug 11654: Fix malformed log message in bug11156 patch. * Bug 10425: Add in Tor's geoip6 files to the bundle distribution - * Bugs 11834 and 11835: Include pluggable transport documentation + * Bugs 11834 and 11835: Include Pluggable Transport documentation * Bug 9701: Prevent ClipBoardCache from writing to disk. * Bug 12146: Make the CONNECT Host header the same as the Request-URI. * Bug 12212: Disable deprecated webaudio API * Bug 11253: Turn on TLS 1.1 and 1.2. * Bug 11817: Don't send startup time information to Mozilla. + * Bug 11630: Make HTTPS-Everywhere 3.5's rules.sqlite deterministic. Tor Browser Bundle 3.6.1 -- May 6 2014 * All Platforms

1 0

[tor-browser-bundle/maint-3.6] Prune dead tags during git fetch.
by mikeperry＠torproject.org 05 Jun '14

05 Jun '14

commit 35e9a826033ca1d324e461f94126f6602bb3a2b6 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu May 29 13:27:20 2014 -0700 Prune dead tags during git fetch. fteproxy created and removed some crazy branches that managed to break git updates without a prune step. --- gitian/fetch-inputs.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/fetch-inputs.sh b/gitian/fetch-inputs.sh index fb2464a..ddd7a19 100755 --- a/gitian/fetch-inputs.sh +++ b/gitian/fetch-inputs.sh @@ -90,7 +90,7 @@ update_git() { if [ -d "$dir/.git" ]; then - (cd "$dir" && git remote set-url origin $url && git fetch origin && git fetch --tags origin) + (cd "$dir" && git remote set-url origin $url && git fetch --prune origin && git fetch --prune --tags origin) else if ! git clone "$url"; then echo >&2 "Error: Cloning $url failed"

1 0

[tor-browser-bundle/maint-3.6] Allow the urls of git inputs to change without issue.
by mikeperry＠torproject.org 05 Jun '14

05 Jun '14

commit 7a3c07fc7311618dcfc6c1bb35655b1c9fec8c73 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu May 29 13:09:15 2014 -0700 Allow the urls of git inputs to change without issue. --- gitian/fetch-inputs.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/fetch-inputs.sh b/gitian/fetch-inputs.sh index 37a4a47..fb2464a 100755 --- a/gitian/fetch-inputs.sh +++ b/gitian/fetch-inputs.sh @@ -90,7 +90,7 @@ update_git() { if [ -d "$dir/.git" ]; then - (cd "$dir" && git fetch origin && git fetch --tags origin) + (cd "$dir" && git remote set-url origin $url && git fetch origin && git fetch --tags origin) else if ! git clone "$url"; then echo >&2 "Error: Cloning $url failed"

1 0

[tor-browser-bundle/maint-3.6] Bump component versions for 3.6.2.
by mikeperry＠torproject.org 05 Jun '14

05 Jun '14

commit 9098bcfcfe234b1560908901b7cb16242fbac773 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Jun 5 08:48:16 2014 -0700 Bump component versions for 3.6.2. --- gitian/versions | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/gitian/versions b/gitian/versions index 2176c74..0992031 100755 --- a/gitian/versions +++ b/gitian/versions @@ -1,15 +1,15 @@ -TORBROWSER_VERSION=3.6.2pre +TORBROWSER_VERSION=3.6.2 BUNDLE_LOCALES="ar de es-ES fa fr it ko nl pl pt-PT ru tr vi zh-CN" BUILD_PT_BUNDLES=1 VERIFY_TAGS=1 -FIREFOX_VERSION=24.5.0esr +FIREFOX_VERSION=24.6.0esr -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-1-build4 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-3.x-1-build1 TOR_TAG=tor-0.2.4.22 -TORLAUNCHER_TAG=0.2.5.4 -TORBUTTON_TAG=1.6.9.0 +TORLAUNCHER_TAG=0.2.5.5 +TORBUTTON_TAG=1.6.10.0 HTTPSE_TAG=3.5.1 NSIS_TAG=v0.1 ZLIB_TAG=v1.2.8 @@ -25,7 +25,7 @@ TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0 GITIAN_TAG=tor-browser-builder-3.x-5 -OPENSSL_VER=1.0.1g +OPENSSL_VER=1.0.1h GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION BINUTILS_VER=2.22 @@ -45,7 +45,7 @@ PARSLEY_VER=1.2 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.6.8.22-sm+fx+fn.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.6.8.28-fx+sm+fn.xpi TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz OSXSDK_PACKAGE=apple-uni-sdk-10.6_20110407-0.flosoft1_i386.deb @@ -72,7 +72,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=5ec75d2f6fbf3ff7950a8eea2c7878d887ed3916aa89f99ec76b322b1e140c08 +NOSCRIPT_HASH=aea2ef3a262a70e871df0de937ac8f53cd2c5d1913066200d192bb6e30924275 MINGW_HASH=a5b03d0448a309341be4cf34c6ad3016d04c89952dca5243254b4d6c738b164f MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c

1 0

[tor-browser-bundle/maint-3.6] Changelog for 3.6.2.
by mikeperry＠torproject.org 05 Jun '14

05 Jun '14

commit ae2b7423991cbeeeb8459030eeb616ae9e41ee3d Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Jun 5 08:45:36 2014 -0700 Changelog for 3.6.2. --- Bundle-Data/Docs/ChangeLog.txt | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 7ad5f87..c7e3d89 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,32 @@ +Tor Browser Bundle 3.6.2 -- Jun 6 2014 + * All Platforms + * Update Firefox to 24.6.0esr + * Update OpenSSL to 1.0.1h + * Update NoScript to 2.6.8.28 + * Update Tor to 0.2.4.22 + * Update Tor Launcher to 0.2.5.5 + * Bug 10425: Provide geoip6 file location to Tor process + * Bug 11754: Remove untranslated locales that were dropped from Transifex + * Bug 11772: Set Proxy Type menu correctly after restart + * Bug 11699: Change &#160 to   in UI elements + * Update Torbutton to 1.6.10.0 + * Bug 11510: about:tor should not report success if tor proxy is unreachable + * Bug 11783: Avoid b.webProgress error when double-clicking on New Identity + * Bug 11722: Add hidden pref to force remote Tor check + * Bug 11763: Fix pref dialog double-click race that caused settings to be reset + * Bug 11629: Support proxies with pluggable Transports + * Updates FTEProxy to 0.2.15 + * Updates obfsproxy to 0.2.9 + * Backported Tor Patches: + * Bug 11654: Fix malformed log message in bug11156 patch. + * Bug 10425: Add in Tor's geoip6 files to the bundle distribution + * Bugs 11834 and 11835: Include pluggable transport documentation + * Bug 9701: Prevent ClipBoardCache from writing to disk. + * Bug 12146: Make the CONNECT Host header the same as the Request-URI. + * Bug 12212: Disable deprecated webaudio API + * Bug 11253: Turn on TLS 1.1 and 1.2. + * Bug 11817: Don't send startup time information to Mozilla. + Tor Browser Bundle 3.6.1 -- May 6 2014 * All Platforms * Update HTTPS-Everywhere to 3.5.1

1 0

[orbot/master] switch to 0.2.4.22 version of Tor for release
by n8fr8＠torproject.org 05 Jun '14

05 Jun '14

commit b6116b5d5a90bf16377470a7bad3bb9120380435 Author: Nathan Freitas <nathan(a)freitas.net> Date: Thu Jun 5 11:11:39 2014 -0400 switch to 0.2.4.22 version of Tor for release --- src/org/torproject/android/service/TorServiceConstants.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/org/torproject/android/service/TorServiceConstants.java b/src/org/torproject/android/service/TorServiceConstants.java index 8a89c9e..3a0db5e 100644 --- a/src/org/torproject/android/service/TorServiceConstants.java +++ b/src/org/torproject/android/service/TorServiceConstants.java @@ -77,7 +77,7 @@ public interface TorServiceConstants { public static final int DISABLE_TOR_MSG = 3; public static final int LOG_MSG = 4; - public static final String BINARY_TOR_VERSION = "0.2.5.4-alpha-openssl1.0.1h"; + public static final String BINARY_TOR_VERSION = "0.2.4.22-openssl1.0.1h"; public static final String PREF_BINARY_TOR_VERSION_INSTALLED = "BINARY_TOR_VERSION_INSTALLED"; //obfsproxy

1 0

[orbot/master] update binaries for 0.2.4.22 Tor
by n8fr8＠torproject.org 05 Jun '14

05 Jun '14

commit 476dc1a036a7dc35ffa40bf258e99e5c9c48bd8d Author: Nathan Freitas <nathan(a)freitas.net> Date: Thu Jun 5 11:12:02 2014 -0400 update binaries for 0.2.4.22 Tor --- libs/jtorctl.jar | Bin 14742 -> 14742 bytes res/raw/obfsclient.mp3 | Bin 807102 -> 807052 bytes res/raw/polipo.mp3 | Bin 123224 -> 123224 bytes res/raw/tor.mp3 | Bin 1715718 -> 1692280 bytes res/raw/xtables.mp3 | Bin 152674 -> 152674 bytes 5 files changed, 0 insertions(+), 0 deletions(-) diff --git a/libs/jtorctl.jar b/libs/jtorctl.jar index 085692a..ccfe773 100755 Binary files a/libs/jtorctl.jar and b/libs/jtorctl.jar differ diff --git a/res/raw/obfsclient.mp3 b/res/raw/obfsclient.mp3 index f3e4f87..b1a7b31 100644 Binary files a/res/raw/obfsclient.mp3 and b/res/raw/obfsclient.mp3 differ diff --git a/res/raw/polipo.mp3 b/res/raw/polipo.mp3 index 01db525..c2fef39 100644 Binary files a/res/raw/polipo.mp3 and b/res/raw/polipo.mp3 differ diff --git a/res/raw/tor.mp3 b/res/raw/tor.mp3 index 0a0a821..b7a9a5b 100644 Binary files a/res/raw/tor.mp3 and b/res/raw/tor.mp3 differ diff --git a/res/raw/xtables.mp3 b/res/raw/xtables.mp3 index 7826e83..e9127c1 100644 Binary files a/res/raw/xtables.mp3 and b/res/raw/xtables.mp3 differ

1 0

[orbot/master] update constant for 1.0.1h and latest openssl vuln
by n8fr8＠torproject.org 05 Jun '14

05 Jun '14

commit 7622d2cb2f3b25b5518735d1119b6c55c8034f57 Author: Nathan Freitas <nathan(a)freitas.net> Date: Thu Jun 5 10:58:36 2014 -0400 update constant for 1.0.1h and latest openssl vuln http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Injection-en/index.ht… --- src/org/torproject/android/service/TorServiceConstants.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/org/torproject/android/service/TorServiceConstants.java b/src/org/torproject/android/service/TorServiceConstants.java index c964289..8a89c9e 100644 --- a/src/org/torproject/android/service/TorServiceConstants.java +++ b/src/org/torproject/android/service/TorServiceConstants.java @@ -77,7 +77,7 @@ public interface TorServiceConstants { public static final int DISABLE_TOR_MSG = 3; public static final int LOG_MSG = 4; - public static final String BINARY_TOR_VERSION = "0.2.5.4-alpha-openssl1.0.1g"; + public static final String BINARY_TOR_VERSION = "0.2.5.4-alpha-openssl1.0.1h"; public static final String PREF_BINARY_TOR_VERSION_INSTALLED = "BINARY_TOR_VERSION_INSTALLED"; //obfsproxy

1 0

[orbot/master] updated binaries for OpenSSL 1.0.1h
by n8fr8＠torproject.org 05 Jun '14

05 Jun '14

commit 352c23b702f5508daeb4bf8627babdbbe3317b10 Author: Nathan Freitas <nathan(a)freitas.net> Date: Thu Jun 5 10:59:13 2014 -0400 updated binaries for OpenSSL 1.0.1h --- libs/jtorctl.jar | Bin 14742 -> 14742 bytes res/raw/obfsclient.mp3 | Bin 807052 -> 807102 bytes res/raw/polipo.mp3 | Bin 123224 -> 123224 bytes res/raw/tor.mp3 | Bin 1708250 -> 1715718 bytes res/raw/xtables.mp3 | Bin 152674 -> 152674 bytes 5 files changed, 0 insertions(+), 0 deletions(-) diff --git a/libs/jtorctl.jar b/libs/jtorctl.jar index a2fc58f..085692a 100755 Binary files a/libs/jtorctl.jar and b/libs/jtorctl.jar differ diff --git a/res/raw/obfsclient.mp3 b/res/raw/obfsclient.mp3 index 1782cde..f3e4f87 100644 Binary files a/res/raw/obfsclient.mp3 and b/res/raw/obfsclient.mp3 differ diff --git a/res/raw/polipo.mp3 b/res/raw/polipo.mp3 index 6f0fc28..01db525 100644 Binary files a/res/raw/polipo.mp3 and b/res/raw/polipo.mp3 differ diff --git a/res/raw/tor.mp3 b/res/raw/tor.mp3 index dc4266e..0a0a821 100644 Binary files a/res/raw/tor.mp3 and b/res/raw/tor.mp3 differ diff --git a/res/raw/xtables.mp3 b/res/raw/xtables.mp3 index caab569..7826e83 100644 Binary files a/res/raw/xtables.mp3 and b/res/raw/xtables.mp3 differ

1 0