March 2015 - tor-commits - lists.torproject.org

[tor-browser/tor-browser-31.5.0esr-4.5-1] Bug 15201: Windows: disable "runas" code path in updater.
by mikeperry＠torproject.org 21 Mar '15

21 Mar '15

commit 4a145590d0e636e3acdd1f00037429771e64e3b8 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Fri Mar 20 15:40:23 2015 -0400 Bug 15201: Windows: disable "runas" code path in updater. Instead of using "runas" to try to elevate privileges, the updater now fails if the user does not have permission to apply an update. This avoids potential security issues such as CVE-2015-0833. --- toolkit/mozapps/update/updater/updater.cpp | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/toolkit/mozapps/update/updater/updater.cpp b/toolkit/mozapps/update/updater/updater.cpp index ee7e245..3ba92b3 100644 --- a/toolkit/mozapps/update/updater/updater.cpp +++ b/toolkit/mozapps/update/updater/updater.cpp @@ -3033,6 +3033,16 @@ int NS_main(int argc, NS_tchar **argv) // using the service is because we are testing. if (!useService && !noServiceFallback && updateLockFileHandle == INVALID_HANDLE_VALUE) { +#ifdef TOR_BROWSER_UPDATE + // Because the user profile is contained within the Tor Browser + // installation directory, the user almost certainly has permission to + // apply updates. Therefore, to avoid potential security issues such + // as CVE-2015-0833, do not attempt to elevate privileges. Instead, + // write a "failed" message to the update status file (this function + // will return immediately after the CloseHandle(elevatedFileHandle) + // call below). + WriteStatusFile(WRITE_ERROR_ACCESS_DENIED); +#else SHELLEXECUTEINFO sinfo; memset(&sinfo, 0, sizeof(SHELLEXECUTEINFO)); sinfo.cbSize = sizeof(SHELLEXECUTEINFO); @@ -3054,6 +3064,7 @@ int NS_main(int argc, NS_tchar **argv) } else { WriteStatusFile(ELEVATION_CANCELED); } +#endif } if (argc > callbackIndex) {

1 0

[translation/tails-iuk_completed] Update translations for tails-iuk_completed
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit 1a6d1aa6229e7eac8ddf141f979a0ea25ef781a1 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:16:13 2015 +0000 Update translations for tails-iuk_completed --- de.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/de.po b/de.po index 0f9b17d..97ce6b3 100644 --- a/de.po +++ b/de.po @@ -17,7 +17,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: Tails developers <tails(a)boum.org>\n" "POT-Creation-Date: 2015-01-13 14:19+0100\n" -"PO-Revision-Date: 2015-03-14 23:06+0000\n" +"PO-Revision-Date: 2015-03-20 23:02+0000\n" "Last-Translator: rike\n" "Language-Team: German (http://www.transifex.com/projects/p/torproject/language/de/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-iuk] Update translations for tails-iuk
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit c08f33c671bd85d37b9bf82558e428ae80a069cc Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:16:10 2015 +0000 Update translations for tails-iuk --- de.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/de.po b/de.po index 0f9b17d..97ce6b3 100644 --- a/de.po +++ b/de.po @@ -17,7 +17,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: Tails developers <tails(a)boum.org>\n" "POT-Creation-Date: 2015-01-13 14:19+0100\n" -"PO-Revision-Date: 2015-03-14 23:06+0000\n" +"PO-Revision-Date: 2015-03-20 23:02+0000\n" "Last-Translator: rike\n" "Language-Team: German (http://www.transifex.com/projects/p/torproject/language/de/)\n" "MIME-Version: 1.0\n"

1 0

[translation/torbutton-torbuttondtd] Update translations for torbutton-torbuttondtd
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit a31cf8cdb4b77087d0c6b66403ed5544ba9102c5 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:16:06 2015 +0000 Update translations for torbutton-torbuttondtd --- sq/torbutton.dtd | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/sq/torbutton.dtd b/sq/torbutton.dtd index 52454ae..7eb2e82 100644 --- a/sq/torbutton.dtd +++ b/sq/torbutton.dtd @@ -153,18 +153,18 @@ <!ENTITY torbutton.prefs.resist_fingerprinting "Ndryshojini hollësitë që ju dallojnë nga përdoruesit e tjerë të Shfletuesit Tor"> <!ENTITY torbutton.prefs.sec_caption "Niveli i sigurisë"> <!ENTITY torbutton.prefs.sec_low "E ulët (me parazgjedhje)"> -<!ENTITY torbutton.prefs.sec_low_usable_desc "This provides the most usable experience."> -<!ENTITY torbutton.prefs.sec_low_desc "At this security level, all browser features are enabled."> -<!ENTITY torbutton.prefs.sec_font_rend_svg_tooltip "The SVG OpenType font rendering mechanism is disabled."> +<!ENTITY torbutton.prefs.sec_low_usable_desc "Kjo ofron përvojën më të përdorshme."> +<!ENTITY torbutton.prefs.sec_low_desc "Në këtë nivel sigurie, janë aftësuar të gjitha tiparet e shfletuesit."> +<!ENTITY torbutton.prefs.sec_font_rend_svg_tooltip "Mekanizmi i Pëaraqitjes së germës SVG OpenType është paaftësuar."> <!ENTITY torbutton.prefs.sec_med_low "Mesatare-E ulët"> -<!ENTITY torbutton.prefs.sec_gen_desc "At this security level, the following changes apply (mouseover for details):"> -<!ENTITY torbutton.prefs.sec_html5_desc "HTML5 video and audio media become click-to-play via NoScript."> -<!ENTITY torbutton.prefs.sec_html5_tooltip "On some sites, you might need to use the NoScript toolbar button to enable these media objects."> -<!ENTITY torbutton.prefs.sec_some_jit_desc "Some JavaScript performance optimizations are disabled."> +<!ENTITY torbutton.prefs.sec_gen_desc "Në këtë nivel sigurie, do të zbatohen ndryshimet në vijim (kalojeni miun sipër për hollësitë):"> +<!ENTITY torbutton.prefs.sec_html5_desc "Mediet për video dhe audio HTML5 bëhen kliko-për-të-luajtur përmes NoScript."> +<!ENTITY torbutton.prefs.sec_html5_tooltip "Në disa webfaqe, mund t'ju duhet të përdorni butonin e shiritit të mjeteve të NoScript, që t'i aftësoni këto objekte të medies."> +<!ENTITY torbutton.prefs.sec_some_jit_desc "Disa përmirësime të paraqitjes të JavaScript janë paaftësuar"> <!ENTITY torbutton.prefs.sec_jit_desc_tooltip "ION JIT, Type Inference, ASM.JS."> -<!ENTITY torbutton.prefs.sec_baseline_jit_desc_tooltip "Baseline JIT."> -<!ENTITY torbutton.prefs.sec_jit_slower_desc "Scripts on some sites may run slower."> -<!ENTITY torbutton.prefs.sec_jar_desc "Remote JAR files are blocked."> +<!ENTITY torbutton.prefs.sec_baseline_jit_desc_tooltip "Baza JIT."> +<!ENTITY torbutton.prefs.sec_jit_slower_desc "Skriptet në disa webfaqe mund të ekzekutohen më ngadalë."> +<!ENTITY torbutton.prefs.sec_jar_desc "Skedarët e largët JAR janë penguar."> <!ENTITY torbutton.prefs.sec_jar_tooltip "JAR files are extremely rare on the web, but can be a source of XSS and other attacks."> <!ENTITY torbutton.prefs.sec_mathml_desc "Some mechanisms of displaying math equations are disabled."> <!ENTITY torbutton.prefs.sec_mathml_desc_tooltip "MathML is disabled.">

1 0

[translation/tails-persistence-setup_completed] Update translations for tails-persistence-setup_completed
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit 65e28ae4242302433919d52a93981f1de3f86bc4 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:15:33 2015 +0000 Update translations for tails-persistence-setup_completed --- uk/uk.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uk/uk.po b/uk/uk.po index b6532fb..e7147ec 100644 --- a/uk/uk.po +++ b/uk/uk.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: Tails developers <tails(a)boum.org>\n" "POT-Creation-Date: 2015-02-23 13:07+0100\n" -"PO-Revision-Date: 2015-03-14 12:24+0000\n" +"PO-Revision-Date: 2015-03-20 23:00+0000\n" "Last-Translator: LinuxChata\n" "Language-Team: Ukrainian (http://www.transifex.com/projects/p/torproject/language/uk/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-persistence-setup] Update translations for tails-persistence-setup
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit f8ea0d2a47e96547a2d19fc2ce9ceececb028204 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:15:29 2015 +0000 Update translations for tails-persistence-setup --- uk/uk.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uk/uk.po b/uk/uk.po index b6532fb..e7147ec 100644 --- a/uk/uk.po +++ b/uk/uk.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: Tails developers <tails(a)boum.org>\n" "POT-Creation-Date: 2015-02-23 13:07+0100\n" -"PO-Revision-Date: 2015-03-14 12:24+0000\n" +"PO-Revision-Date: 2015-03-20 23:00+0000\n" "Last-Translator: LinuxChata\n" "Language-Team: Ukrainian (http://www.transifex.com/projects/p/torproject/language/uk/)\n" "MIME-Version: 1.0\n"

1 0

[translation/liveusb-creator_completed] Update translations for liveusb-creator_completed
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit ff7b6cd70a210326056d98516b14410bb601cef0 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:15:25 2015 +0000 Update translations for liveusb-creator_completed --- uk/uk.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uk/uk.po b/uk/uk.po index 4849754..922e58f 100644 --- a/uk/uk.po +++ b/uk/uk.po @@ -12,7 +12,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2015-02-23 13:07+0100\n" -"PO-Revision-Date: 2015-03-14 12:21+0000\n" +"PO-Revision-Date: 2015-03-20 23:00+0000\n" "Last-Translator: LinuxChata\n" "Language-Team: Ukrainian (http://www.transifex.com/projects/p/torproject/language/uk/)\n" "MIME-Version: 1.0\n"

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit 9656ca934e2a188a0ae9ec0d31959019ea8af038 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:15:22 2015 +0000 Update translations for liveusb-creator --- uk/uk.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uk/uk.po b/uk/uk.po index 4849754..922e58f 100644 --- a/uk/uk.po +++ b/uk/uk.po @@ -12,7 +12,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2015-02-23 13:07+0100\n" -"PO-Revision-Date: 2015-03-14 12:21+0000\n" +"PO-Revision-Date: 2015-03-20 23:00+0000\n" "Last-Translator: LinuxChata\n" "Language-Team: Ukrainian (http://www.transifex.com/projects/p/torproject/language/uk/)\n" "MIME-Version: 1.0\n"

1 0

[translation/bridgedb_completed] Update translations for bridgedb_completed
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit 3b81e4a9e9abf4d7701479da37d243ad5c165199 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:15:07 2015 +0000 Update translations for bridgedb_completed --- uk/LC_MESSAGES/bridgedb.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uk/LC_MESSAGES/bridgedb.po b/uk/LC_MESSAGES/bridgedb.po index 00b8d59..3d5a428 100644 --- a/uk/LC_MESSAGES/bridgedb.po +++ b/uk/LC_MESSAGES/bridgedb.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-02-03 03:24+0000\n" -"PO-Revision-Date: 2015-03-14 12:34+0000\n" +"PO-Revision-Date: 2015-03-20 23:00+0000\n" "Last-Translator: LinuxChata\n" "Language-Team: Ukrainian (http://www.transifex.com/projects/p/torproject/language/uk/)\n" "MIME-Version: 1.0\n"

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 20 Mar '15

20 Mar '15

commit add607c124332f37fca9749a58c305c6d1fb605d Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 20 23:15:03 2015 +0000 Update translations for bridgedb --- uk/LC_MESSAGES/bridgedb.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uk/LC_MESSAGES/bridgedb.po b/uk/LC_MESSAGES/bridgedb.po index 00b8d59..3d5a428 100644 --- a/uk/LC_MESSAGES/bridgedb.po +++ b/uk/LC_MESSAGES/bridgedb.po @@ -13,7 +13,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2015-02-03 03:24+0000\n" -"PO-Revision-Date: 2015-03-14 12:34+0000\n" +"PO-Revision-Date: 2015-03-20 23:00+0000\n" "Last-Translator: LinuxChata\n" "Language-Team: Ukrainian (http://www.transifex.com/projects/p/torproject/language/uk/)\n" "MIME-Version: 1.0\n"

1 0