February 2017 - tor-commits - lists.torproject.org

[tor/release-0.2.6] Adjust 0.2.6.11 changelog entry from 0.3.0.4-rc to match
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 1f0909fd346bca6725da995c94fc37e6a52d10e5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:05:35 2017 -0500 Adjust 0.2.6.11 changelog entry from 0.3.0.4-rc to match --- ChangeLog | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index e74a18c..83de1db 100644 --- a/ChangeLog +++ b/ChangeLog @@ -99,14 +99,13 @@ Changes in version 0.2.6.11 - 2017-03-?? 0.2.1.10-alpha. Found by Yuan Jochen Kang, Suman Jana, and Baishakhi Ray. - o Major bugfixes (parsing, also in 0.3.0.4-rc): - - Fix an integer underflow bug when comparing malformed Tor versions. - This bug is harmless, except when Tor has been built with - --enable-expensive-hardening, which would turn it into a crash; - or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with - -ftrapv by default. - Part of TROVE-2017-001. Fixes bug 21278; bugfix on - 0.0.8pre1. Found by OSS-Fuzz. + o Major bugfixes (parsing, backported from 0.3.0.4-rc): + - Fix an integer underflow bug when comparing malformed Tor + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. Changes in version 0.2.6.10 - 2015-07-12

1 0

[tor/release-0.2.9] Adjust 0.2.9.10 changelog entries from 0.3.0.4-rc to match
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 5d018fc26a7023dace587b88dcfedd7716bcf241 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:04:48 2017 -0500 Adjust 0.2.9.10 changelog entries from 0.3.0.4-rc to match --- ChangeLog | 30 ++++++++++++++---------------- 1 file changed, 14 insertions(+), 16 deletions(-) diff --git a/ChangeLog b/ChangeLog index 4e9dc9e..2237690 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,5 @@ Changes in version 0.2.9.10 - 2017-03-?? - Tor 0.2.9.10 backports a security fix from later Tor releass. + Tor 0.2.9.10 backports a security fix from later Tor release. Tor 0.2.9.10 also includes fixes for some major issues affecting directory authorities, LibreSSL compatibility, and IPv6 correctness. @@ -23,17 +23,20 @@ Changes in version 0.2.9.10 - 2017-03-?? 21357; bugfix on commit 004f3f4e53 in 0.2.4.7-alpha. o Major bugfixes (parsing, also in 0.3.0.4-rc): - - Fix an integer underflow bug when comparing malformed Tor versions. - This bug is harmless, except when Tor has been built with - --enable-expensive-hardening, which would turn it into a crash; - or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with - -ftrapv by default. - Part of TROVE-2017-001. Fixes bug 21278; bugfix on - 0.0.8pre1. Found by OSS-Fuzz. - - o Minor features (directory authority, also in 0.3.0.4-rc): + - Fix an integer underflow bug when comparing malformed Tor + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. + + o Minor features (directory authorities, also in 0.3.0.4-rc): - Directory authorities now reject descriptors that claim to be - malformed versions of Tor. Helps prevent exploitation of bug 21278. + malformed versions of Tor. Helps prevent exploitation of + bug 21278. + - Reject version numbers with components that exceed INT32_MAX. + Otherwise 32-bit and 64-bit platforms would behave inconsistently. + Fixes bug 21450; bugfix on 0.0.8pre1. o Minor features (portability, compilation, backport from 0.3.0.3-alpha): - Autoconf now checks to determine if OpenSSL structures are opaque, @@ -56,11 +59,6 @@ Changes in version 0.2.9.10 - 2017-03-?? which could lead to bugs. Fixes bug 21280; bugfix on 0.0.9pre5. Patch by "junglefowl". - o Minor bugfixes (voting consistency, also in 0.3.0.4-rc): - - Reject version numbers with components that exceed INT32_MAX. - Otherwise 32-bit and 64-bit platforms would behave inconsistently. - Fixes bug 21450; bugfix on 0.0.8pre1. - Changes in version 0.2.9.9 - 2017-01-23 Tor 0.2.9.9 fixes a denial-of-service bug where an attacker could

1 0

[tor/release-0.2.8] Adjust 0.2.8.13 changelog entry from 0.3.0.4-rc to match
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit aa9c899724ac605cc207612c0a4a9b0c2b4a4cc7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:05:10 2017 -0500 Adjust 0.2.8.13 changelog entry from 0.3.0.4-rc to match --- ChangeLog | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index af3f2d0..5b7f27d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -10,14 +10,13 @@ Changes in version 0.2.8.13 - 2017-03-?? a Tor release series with longer-term support, we recommend Tor 0.2.9.x. - o Major bugfixes (parsing, also in 0.3.0.4-rc): - - Fix an integer underflow bug when comparing malformed Tor versions. - This bug is harmless, except when Tor has been built with - --enable-expensive-hardening, which would turn it into a crash; - or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with - -ftrapv by default. - Part of TROVE-2017-001. Fixes bug 21278; bugfix on - 0.0.8pre1. Found by OSS-Fuzz. + o Major bugfixes (parsing, backported from 0.3.0.4-rc): + - Fix an integer underflow bug when comparing malformed Tor + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. o Minor features (geoip): - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2

1 0

[tor/release-0.3.0] More changelog edits
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit d6b62571213c34fb55c9ba5a09dbd642f7c876f4 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 09:55:09 2017 -0500 More changelog edits --- ChangeLog | 61 ++++++++++++++++++++++++++----------------------------------- 1 file changed, 26 insertions(+), 35 deletions(-) diff --git a/ChangeLog b/ChangeLog index dbe48b5..737a398 100644 --- a/ChangeLog +++ b/ChangeLog @@ -8,29 +8,25 @@ Changes in version 0.3.0.4-rc - 2017-03-?? will be nearly identical to it. o Major bugfixes (bridges): - - When the same bridge is configured multiple times at different - address:port combinations (but with the same identity), treat - those bridge instances as separate guards. This allows clients to - configure the same bridge with multiple pluggable transports, once - again. Fixes bug 21027; bugfix on 0.3.0.1-alpha. + - When the same bridge is configured multiple times with the same + identity, but at different address:port combinations, treat those + bridge instances as separate guards. This fix restores the ability + of clients to configure the same bridge with multiple pluggable + transports. Fixes bug 21027; bugfix on 0.3.0.1-alpha. o Major bugfixes (hidden service directory v3): - - When a descriptor lookup was done and it was not found in the - directory cache, it would crash on a NULL pointer instead of - returning the 404 code back to the client like it was suppose to. - Fixes bug 21471; bugfixes on tor-0.3.0.1-alpha. + - Stop crashing on a failed v3 hidden service descriptor lookup + failure. Fixes bug 21471; bugfixes on tor-0.3.0.1-alpha. - o Major bugfixes (HTTP, parsing): + o Major bugfixes (parsing): - When parsing a malformed content-length field from an HTTP message, do not read off the end of the buffer. This bug was a potential remote denial-of-service attack against Tor clients and - relays. A workaround was released in October 2016, which prevents - this bug from crashing Tor. This is a fix for the underlying - issue, which should no longer matter (if you applied the earlier - patch). Fixes bug 20894; bugfix on 0.2.0.16-alpha. Bug found by - fuzzing using AFL (http://lcamtuf.coredump.cx/afl/) - - o Major bugfixes (parsing): + relays. A workaround was released in October 2016, to prevent this + bug from crashing Tor. This is a fix for the underlying issue, + which should no longer matter (if you applied the earlier patch). + Fixes bug 20894; bugfix on 0.2.0.16-alpha. Bug found by fuzzing + using AFL (http://lcamtuf.coredump.cx/afl/) - Fix an integer underflow bug when comparing malformed Tor versions. This bug could crash Tor when built with --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor @@ -38,14 +34,17 @@ Changes in version 0.3.0.4-rc - 2017-03-?? it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz. - o Minor feature (protover): + o Minor feature (protocol versioning): - Add new protocol version for proposal 224. HSIntro now advertises version "3-4" and HSDir version "1-2". Fixes ticket 20656. - o Minor features (directory authority): + o Minor features (directory authorities): - Directory authorities now reject descriptors that claim to be malformed versions of Tor. Helps prevent exploitation of bug 21278. + - Reject version numbers with components that exceed INT32_MAX. + Otherwise 32-bit and 64-bit platforms would behave inconsistently. + Fixes bug 21450; bugfix on 0.0.8pre1. o Minor features (geoip): - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 @@ -68,8 +67,6 @@ Changes in version 0.3.0.4-rc - 2017-03-?? o Minor bugfixes (code correctness): - Repair a couple of (unreachable or harmless) cases of the risky comparison-by-subtraction pattern that caused bug 21278. - - o Minor bugfixes (correctness): - Remove a redundant check for the UseEntryGuards option from the options_transition_affects_guards() function. Fixes bug 21492; bugfix on 0.3.0.1-alpha. @@ -88,28 +85,22 @@ Changes in version 0.3.0.4-rc - 2017-03-?? instance of bug 21007; bugfix on 0.3.0.1-alpha. o Minor bugfixes (hidden service): - - When encoding a legacy ESTABLISH_INTRO cell, we were using the - sizeof() on a pointer instead of real size of the destination - buffer leading to an overflow passing an enormous value to the - signing digest function. Fortunately, that value was only used to - make sure the destination buffer length was big enough for the key - size and in this case it was. Fixes bug 21553; bugfix - on 0.3.0.1-alpha. + - Pass correct buffer length when encoding legacy ESTABLISH_INTRO + cells. Previously, we were using sizeof() on a pointer, instead of + the real destination buffer. Fortunately, that value was only used + to double-check that there was enough room--which was already + enforced elsewhere. Fixes bug 21553; bugfix on 0.3.0.1-alpha. o Minor bugfixes (testing): - - Fix Raspbian build missing socket errno in test util. Fixes bug - 21116; bugfix on tor-0.2.8.2. Patch by "hein". + - Fix Raspbian build issues related to missing socket errno in + test_util.c. Fixes bug 21116; bugfix on tor-0.2.8.2. Patch + by "hein". - Rename "make fuzz" to "make test-fuzz-corpora", since it doesn't actually fuzz anything. Fixes bug 21447; bugfix on 0.3.0.3-alpha. - Use bash in src/test/test-network.sh. This ensures we reliably call chutney's newer tools/test-network.sh when available. Fixes bug 21562; bugfix on 0.2.9.1-alpha. - o Minor bugfixes (voting consistency): - - Reject version numbers with components that exceed INT32_MAX. - Otherwise 32-bit and 64-bit platforms would behave inconsistently. - Fixes bug 21450; bugfix on 0.0.8pre1. - o Documentation: - Small fixes to the fuzzing documentation. Closes ticket 21472.

1 0

[translation/exoneratorproperties] Update translations for exoneratorproperties
by translation＠torproject.org 28 Feb '17

28 Feb '17

commit ddaba4534bff1682a31609fc2058c180d6df1459 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Feb 28 14:48:20 2017 +0000 Update translations for exoneratorproperties --- pt/exonerator.properties | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pt/exonerator.properties b/pt/exonerator.properties index c28ebe1..0c1ae09 100644 --- a/pt/exonerator.properties +++ b/pt/exonerator.properties @@ -23,18 +23,18 @@ summary.serverproblem.nodata.title=Problema de servidor summary.serverproblem.nodata.body.text=A base de dados não contém dados para a data solicitada. Por favor tente mais tarde. Se o problema persistir, por favor %s\! summary.serverproblem.nodata.body.link=deixe-nos saber summary.negativesamenetwork.title=Resultado negativo -summary.negativesamenetwork.body=We did not find IP address %s on or within a day of %s. But we did find other IP addresses of Tor relays in the same /%d network around the time\: +summary.negativesamenetwork.body=Nós não encontramos o endereço de IP %s sobre ou dentro de um dia %s.. Mas nós encontramos outros endereços de IP das retransmissões do Tor na mesma rede /%d às\: summary.positive.title=Resultado positivo summary.positive.body=Encontrámos um ou mais transmissores Tor no endereço IP %s summary.negative.title=Resultado negativo -summary.negative.body=We did not find IP address %s on or within a day of %s. +summary.negative.body=Nós não encontramos o endereço de IP %s sobre ou dentro de um dia %s. technicaldetails.heading=Detalhes técnicos -technicaldetails.pre=Looking up IP address %s on or within one day of %s. Tor clients could have selected this or these Tor relays to build circuits. +technicaldetails.pre=Procurar o endereço de IP %s sobre ou dentro de um dia de %s. Os clientes Tor poderão ter selecionado esta ou estas retransmissões do Tor para criar os circuitos. technicaldetails.colheader.timestamp=Data/Hora (UTC) technicaldetails.colheader.ip=Endereço(s) de IP technicaldetails.colheader.fingerprint=Assinatuira digital de identidade technicaldetails.colheader.nickname=Apelido -technicaldetails.colheader.exit=Exit relay +technicaldetails.colheader.exit=Sair da retransmissão technicaldetails.nickname.unknown=Desconhecido technicaldetails.exit.unknown=Desconhecido technicaldetails.exit.yes=Sim @@ -42,7 +42,7 @@ technicaldetails.exit.no=Não permanentlink.heading=Hiperligação permanente footer.abouttor.heading=Sobre o Tor footer.abouttor.body.text=Tor is an international software project to anonymize Internet traffic by %s.  Therefore, if you see traffic from a Tor relay, this traffic usually originates from someone using Tor, rather than from the relay operator.  The Tor Project and Tor relay operators have no records of the traffic that passes over the network and therefore cannot provide any information about its origin.  Be sure to %s, and don't hesitate to %s for more information. -footer.abouttor.body.link1=encrypting packets and sending them through a series of hops before they reach their destination +footer.abouttor.body.link1=encriptar pacotes e enviá-los através de uma série de etapas antes de estes atingirem o seu destino footer.abouttor.body.link2=saber mais sobre o Tor footer.abouttor.body.link3=contactar The Tor Project, Inc. footer.aboutexonerator.heading=Sobre ExoneraTor

1 0

[translation/torbutton-torbuttondtd] Update translations for torbutton-torbuttondtd
by translation＠torproject.org 28 Feb '17

28 Feb '17

commit f0b54586be6d646aa40265e08208fc0aa07ec5c6 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Feb 28 14:46:42 2017 +0000 Update translations for torbutton-torbuttondtd --- pt/torbutton.dtd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pt/torbutton.dtd b/pt/torbutton.dtd index 10877de..4674f00 100644 --- a/pt/torbutton.dtd +++ b/pt/torbutton.dtd @@ -27,12 +27,12 @@ <!ENTITY torbutton.cookiedialog.doNotSaveAllCookies "Não Proteger Novos Cookies"> <!ENTITY torbutton.prefs.restrict_thirdparty "Restringir os cookies de terceiros e outros dados de rastreamento"> <!ENTITY torbutton.prefs.restrict_thirdparty.accesskey "R"> -<!ENTITY torbutton.prefs.restrict_thirdparty_tooltip "Keep this box checked to prevent various browser features from being abused to track you as you browse the web. Modified features include blob URLs, broadcast channels, the browser cache, cookies, favicons, HTTP Auth headers, link preconnects, localStorage, mediaSource URLs, OCSP requests, SharedWorkers, and TLS session tickets."> +<!ENTITY torbutton.prefs.restrict_thirdparty_tooltip "Mantenha esta caixa selecionada para evitar que várias funcionalidades do navegador sejam utilizadas de forma abusiva para monitorizá-lo ao navegar na Web. As funcionalidades modificadas incluem URLs blob, canais de transmissão, a cache do navegador, cookies, favicons, cabeçalhos de Autorização HTTP, préligações de hiperligação, Armazenamento local, Fonte de multimédia, pedidos de OCSP, Trabalhadores Partilhados, e pedidos de sessão TLS."> <!ENTITY torbutton.prefs.resist_fingerprinting "Alterar os detalhes que o diferencia dos outros utilizadores do Navegador Tor"> <!ENTITY torbutton.prefs.resist_fingerprinting.accesskey "F"> -<!ENTITY torbutton.prefs.resist_fingerprinting_tooltip "Keep this box checked to hide things from websites that could be unique about you, including your battery status, computer performance, keyboard layout, locale, the location of installed plugins, the list of installed plugins, your network status, screen orientation, screen size, site-specific zoom levels, supported file types, system colors, and WebGL capabilities."> +<!ENTITY torbutton.prefs.resist_fingerprinting_tooltip "Mantenha esta caixa selecionada para ocultar as coisas dos sites da Web que poderão ser únicas sobre si, incluindo o estado da bateria, desempenho do computador, disposição do teclado, idioma, a localização dos plug-ins instalados, a lista dos plug-ins instalados, o seu estado da rede, orientação do ecrã, tamanho do ecrã, níveis de zoom específicos do site, tipos de ficheiro suportados, cores do sistema, e capacidades de WebGL."> <!ENTITY torbutton.prefs.sec_caption "Nível de Segurança"> -<!ENTITY torbutton.prefs.sec_caption_tooltip "The Security Slider lets you disable certain browser features that may make your browser more vulnerable to hacking attempts."> +<!ENTITY torbutton.prefs.sec_caption_tooltip "O Cursor de Segurança deixa-o desativar algumas funcionalidades do navegador que pode tornar o mesmo mais vulnerável a tentativas de pirataria."> <!ENTITY torbutton.prefs.sec_low "Baixo (predefinição)"> <!ENTITY torbutton.prefs.sec_low_usable_desc "Isto proporciona a melhor experiência usável."> <!ENTITY torbutton.prefs.sec_low_desc "Neste nível de segurança, as funções do navegador estão ativadas.">

1 0

[tor/release-0.3.0] rewrite a little.
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 35ea6fb58038c910a55a84fc555f7ab30f24a18b Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 09:46:32 2017 -0500 rewrite a little. --- ChangeLog | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/ChangeLog b/ChangeLog index 8cf24c4..dbe48b5 100644 --- a/ChangeLog +++ b/ChangeLog @@ -4,8 +4,8 @@ Changes in version 0.3.0.4-rc - 2017-03-?? keep them from coming back. This is the first release candidate in the Tor 0.3.0 series. If we - find no new bugs or regressions here, the first stable 0.2.8 release - will be identical to it. + find no new bugs or regressions here, the first stable 0.3.0 release + will be nearly identical to it. o Major bugfixes (bridges): - When the same bridge is configured multiple times at different @@ -32,11 +32,11 @@ Changes in version 0.3.0.4-rc - 2017-03-?? o Major bugfixes (parsing): - Fix an integer underflow bug when comparing malformed Tor - versions. This bug is harmless, except when Tor has been built - with --enable-expensive-hardening, which would turn it into a - crash; or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were - built with -ftrapv by default. Part of TROVE-2017-001. Fixes bug - 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz. + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. o Minor feature (protover): - Add new protocol version for proposal 224. HSIntro now advertises

1 0

[translation/tor-launcher-network-settings_completed] Update translations for tor-launcher-network-settings_completed
by translation＠torproject.org 28 Feb '17

28 Feb '17

commit f02084269cfe040bcadb7bc0990e5f2f45b2557b Author: Translation commit bot <translation(a)torproject.org> Date: Tue Feb 28 14:46:14 2017 +0000 Update translations for tor-launcher-network-settings_completed --- pt/network-settings.dtd | 37 ++++++++++++++++++++++--------------- 1 file changed, 22 insertions(+), 15 deletions(-) diff --git a/pt/network-settings.dtd b/pt/network-settings.dtd index 7790807..5c0ae5c 100644 --- a/pt/network-settings.dtd +++ b/pt/network-settings.dtd @@ -1,8 +1,8 @@ <!ENTITY torsettings.dialog.title "Configurações da Rede Tor">  -<!ENTITY torlauncher.localePicker.title "Linguagem do Navegador Tor"> -<!ENTITY torlauncher.localePicker.prompt "Por favor seleccione um idioma."> +<!ENTITY torlauncher.localePicker.title "Idioma do Navegador Tor"> +<!ENTITY torlauncher.localePicker.prompt "Por favor, selecione um idioma.">  @@ -11,28 +11,34 @@ <!ENTITY torSettings.yes "Sim"> <!ENTITY torSettings.no "Não"> -<!ENTITY torSettings.firstQuestion "Qual das seguintes frases melhor descreve a sua situação?"> +<!ENTITY torSettings.firstQuestion "Qual das seguintes frases descreve melhor a sua situação?"> <!ENTITY torSettings.configurePrompt1 "Esta ligação à Internet deste computador está censurada ou é efetuada via proxy."> -<!ENTITY torSettings.configurePrompt2 "Eu preciso de configurar a ponte ou as definições de proxy local."> +<!ENTITY torSettings.configurePrompt2 "Eu preciso de configurar a ponte ou as definições do proxy local antes de ligar à rede Tor ."> <!ENTITY torSettings.configure "Configurar"> -<!ENTITY torSettings.connectPrompt2 "Eu gostaria de me ligar diretamente à rede Tor."> -<!ENTITY torSettings.connectPrompt3 "Isto irá funcionar na maior parte das situações."> +<!ENTITY torSettings.connectPrompt2 "Eu gostaria de efetuar uma ligação direta à rede Tor."> +<!ENTITY torSettings.connectPrompt3 "Isto irá funcionar na maioria das situações."> <!ENTITY torSettings.connect "Ligar"> <!ENTITY torSettings.proxyPageTitle "Configuração do Proxy Local"> -<!ENTITY torSettings.proxyQuestion "Este computador precisa de utilizar um proxy para aceder à Internet."> +<!ENTITY torSettings.proxyQuestion "Este computador precisa de utilizar um proxy para aceder à Internet?">  -<!ENTITY torSettings.proxyHelp "Se não tem a certeza de como responder a esta questão, procure nas definições da Internet de outro navegador para ver se este está configurado para utilizar um proxy local."> +<!ENTITY torSettings.proxyExplanation1 "Na maioria dos casos não é necessário um proxy local, mas este poderá ser necessário quando ligar através da rede de uma empresa, escola ou universidade."> +<!ENTITY torSettings.proxyExplanation2 "Se não tem a certeza de como responder a esta pergunta, consulte as definições da Internet noutro navegador ou verifique as definições da rede do seu sistema para verificar se é necessário ou não um proxy local."> <!ENTITY torSettings.enterProxy "Insira as definições do proxy."> <!ENTITY torSettings.bridgePageTitle "Configuração das Pontes Tor"> <!ENTITY torSettings.bridgeQuestion "O seu Provedor de Serviços da Internet (ISP) bloqueia ou então censura as ligações à Rede Tor?"> -<!ENTITY torSettings.bridgeHelp "Se não tem a certeza de como responder a esta questão, escolha No.  Se escolher 'Sim', ser-lhe-á pedido para configurar as Pontes do Tor, que são retransmissões não listadas e que torna mais difícil o bloqueio das ligações à Rede Tor."> +<!ENTITY torSettings.bridgeExplanation1 "Se não tem a certeza sobre como responder a esta pergunta, escolha Não (se não consegue ligar-se à rede Tor sem uma ponte, pode adicionar uma mais tarde)."> +<!ENTITY torSettings.bridgeExplanation2 "Se escolher 'Sim', ser-lhe-á pedido para configurar as Pontes do Tor, que são retransmissões não listadas o que torna mais difícil o bloqueio das ligações à Rede Tor."> <!ENTITY torSettings.bridgeSettingsPrompt "Poderá utilizar o conjunto de pontes fornecido ou poderá obter um conjunto de pontes personalizadas.">  <!ENTITY torsettings.startingTor "A aguardar que o Tor inicie..."> -<!ENTITY torsettings.restartTor "Reiniciar o Tor"> +<!ENTITY torsettings.restartTor "Reiniciar Tor"> +<!ENTITY torsettings.reconfigTor "Reconfigurar"> + +<!ENTITY torsettings.discardSettings.prompt "Configurou as pontes do Tor ou inseriu as definições do proxy local.  Para efetuar uma ligação direta à rede Tor, estas definições devem ser removidas."> +<!ENTITY torsettings.discardSettings.proceed "Remover Definições e Ligar"> <!ENTITY torsettings.optional "Opcional"> @@ -46,10 +52,11 @@ <!ENTITY torsettings.useProxy.type.socks4 "SOCKS 4"> <!ENTITY torsettings.useProxy.type.socks5 "SOCKS 5"> <!ENTITY torsettings.useProxy.type.http "HTTP / HTTPS"> -<!ENTITY torsettings.firewall.checkbox "Este computador atravessa uma firewall que só permite ligações a algumas portas."> +<!ENTITY torsettings.firewall.checkbox "Este computador liga através de uma firewall que só permite ligações para determinadas portas."> <!ENTITY torsettings.firewall.allowedPorts "Portas permitidas:"> <!ENTITY torsettings.useBridges.checkbox "O meu Provedor de Serviço da Internet (ISP) bloqueia as ligações à rede Tor"> <!ENTITY torsettings.useBridges.default "Ligar com as pontes fornecidas"> +<!ENTITY torsettings.useBridges.note "Cada tipo de ponte utiliza um método diferente para evitar a censura.  Se uma ponte não funcionar, tente novamente utilizando uma diferente."> <!ENTITY torsettings.useBridges.type "Tipo de transporte:"> <!ENTITY torsettings.useBridges.custom "Insira as pontes personalizadas"> <!ENTITY torsettings.useBridges.label "Insira uma ou mais retransmissões de ponte (uma por linha)."> @@ -57,12 +64,12 @@ <!ENTITY torsettings.copyLog "Copiar o Registo do Tor para a Área de Transferência"> <!ENTITY torsettings.bridgeHelpTitle "Ajuda da Retransmissão de Ponte"> -<!ENTITY torsettings.bridgeHelp1 "Se não consegue ligar-se à rede Tor, pode ser devido a algum bloqueio do seu provedor de internet (ISP) ou outro intermediário está a bloquear o Tor.  Normalmente, pode contornar este problema usando Tor Bridges, que são pontos de passagem não listados mais difíceis de bloquear."> -<!ENTITY torsettings.bridgeHelp1B "Pode usar o conjunto de bridges pré-configurado fornecido, ou pode obter um conjunto de endereços personalizados usando um dos três métodos:"> +<!ENTITY torsettings.bridgeHelp1 "Se não consegue ligar-se à rede Tor, pode ser devido a algum bloqueio do seu Provedor de Serviço de Internet (ISP) ou outra agência está a bloquear o Tor.  Frequentemente, pode contornar este problema utilizando Tor Bridges, o qual são pontos de passagem não listados que são mais difíceis de bloquear."> +<!ENTITY torsettings.bridgeHelp1B "Poderá utilizar o conjunto de pontes pré-configurado fornecido ou poderá obter um conjunto de endereços personalizados, utilizando um deste métodos:"> <!ENTITY torsettings.bridgeHelp2Heading "Através da Web"> <!ENTITY torsettings.bridgeHelp2 "Utilize um navegador da Web para visitar https://bridges.torproject.org"> -<!ENTITY torsettings.bridgeHelp3Heading "Através do Respondedor Automático do Correio Eletrónico"> -<!ENTITY torsettings.bridgeHelp3.emailDesc "Enviar mensagem para bridges(a)torproject.org com a linha 'get bridges' sozinha no corpo da mensagem.  Contudo, para tornar mais difícil para os atacantes aprenderem sobre os endereços de pontes, tem de enviar a mensagem de um dos seguintes fornecedores de serviços de correio eletrónico (por esta ordem de preferência):"> +<!ENTITY torsettings.bridgeHelp3Heading "Através do Respondedor Automático de Correio Eletrónico"> +<!ENTITY torsettings.bridgeHelp3.emailDesc "Envie uma mensagem para bridges(a)torproject.org com a linha 'get bridges' no corpo da mensagem.  Contudo, para tornar mais difícil para um atacante aprender sobre os endereços de pontes, deve enviar este pedido a partir dos seguintes provedores de serviços de correio eletrónico (listados pela ordem de preferência):"> <!ENTITY torsettings.bridgeHelp3.emailList "https://www.riseup.net, https://mail.google.com, ou https://mail.yahoo.com"> <!ENTITY torsettings.bridgeHelp4Heading "Através do Suporte"> <!ENTITY torsettings.bridgeHelp4 "Em último caso, pode solicitar os endereços de ponte, enviando uma mensagem elegante para help(a)rt.torproject.org.  Por favor, note que uma pessoa irá precisar de responder a cada pedido.">

1 0

[translation/tor-launcher-network-settings] Update translations for tor-launcher-network-settings
by translation＠torproject.org 28 Feb '17

28 Feb '17

commit 9265521ed6932832e7193c3a6b7dc7068b366d49 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Feb 28 14:46:07 2017 +0000 Update translations for tor-launcher-network-settings --- pt/network-settings.dtd | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/pt/network-settings.dtd b/pt/network-settings.dtd index 346bace..5c0ae5c 100644 --- a/pt/network-settings.dtd +++ b/pt/network-settings.dtd @@ -22,13 +22,13 @@ <!ENTITY torSettings.proxyPageTitle "Configuração do Proxy Local"> <!ENTITY torSettings.proxyQuestion "Este computador precisa de utilizar um proxy para aceder à Internet?">  -<!ENTITY torSettings.proxyExplanation1 "Na maioria dos casos não é necessário um proxy local, mas poderá ser necessário ao ligar-se através da rede de uma empresa, escola ou universidade."> -<!ENTITY torSettings.proxyExplanation2 "Se você não tem a certeza de como responder a esta pergunta, consulte as definições de Internet noutro navegador ou verifique as definições de rede do seu sistema para certificar-se de que necessita de um proxy local."> +<!ENTITY torSettings.proxyExplanation1 "Na maioria dos casos não é necessário um proxy local, mas este poderá ser necessário quando ligar através da rede de uma empresa, escola ou universidade."> +<!ENTITY torSettings.proxyExplanation2 "Se não tem a certeza de como responder a esta pergunta, consulte as definições da Internet noutro navegador ou verifique as definições da rede do seu sistema para verificar se é necessário ou não um proxy local."> <!ENTITY torSettings.enterProxy "Insira as definições do proxy."> <!ENTITY torSettings.bridgePageTitle "Configuração das Pontes Tor"> <!ENTITY torSettings.bridgeQuestion "O seu Provedor de Serviços da Internet (ISP) bloqueia ou então censura as ligações à Rede Tor?"> -<!ENTITY torSettings.bridgeExplanation1 "Se você não tem a certeza sobre como responder a esta questão, escolha Não (se não consegue ligar-se à rede Tor sem uma ponte, você pode adicionar uma mais tarde)."> -<!ENTITY torSettings.bridgeExplanation2 "If you choose Yes, you will be asked to configure Tor Bridges, which are unlisted relays that make it more difficult to block connections to the Tor Network."> +<!ENTITY torSettings.bridgeExplanation1 "Se não tem a certeza sobre como responder a esta pergunta, escolha Não (se não consegue ligar-se à rede Tor sem uma ponte, pode adicionar uma mais tarde)."> +<!ENTITY torSettings.bridgeExplanation2 "Se escolher 'Sim', ser-lhe-á pedido para configurar as Pontes do Tor, que são retransmissões não listadas o que torna mais difícil o bloqueio das ligações à Rede Tor."> <!ENTITY torSettings.bridgeSettingsPrompt "Poderá utilizar o conjunto de pontes fornecido ou poderá obter um conjunto de pontes personalizadas.">  @@ -37,7 +37,7 @@ <!ENTITY torsettings.restartTor "Reiniciar Tor"> <!ENTITY torsettings.reconfigTor "Reconfigurar"> -<!ENTITY torsettings.discardSettings.prompt "You have configured Tor bridges or you have entered local proxy settings.  To make a direct connection to the Tor network, these settings must be removed."> +<!ENTITY torsettings.discardSettings.prompt "Configurou as pontes do Tor ou inseriu as definições do proxy local.  Para efetuar uma ligação direta à rede Tor, estas definições devem ser removidas."> <!ENTITY torsettings.discardSettings.proceed "Remover Definições e Ligar"> <!ENTITY torsettings.optional "Opcional"> @@ -56,7 +56,7 @@ <!ENTITY torsettings.firewall.allowedPorts "Portas permitidas:"> <!ENTITY torsettings.useBridges.checkbox "O meu Provedor de Serviço da Internet (ISP) bloqueia as ligações à rede Tor"> <!ENTITY torsettings.useBridges.default "Ligar com as pontes fornecidas"> -<!ENTITY torsettings.useBridges.note "Each type of bridge uses a different method to avoid censorship.  If one bridge does not work, try again using a different one."> +<!ENTITY torsettings.useBridges.note "Cada tipo de ponte utiliza um método diferente para evitar a censura.  Se uma ponte não funcionar, tente novamente utilizando uma diferente."> <!ENTITY torsettings.useBridges.type "Tipo de transporte:"> <!ENTITY torsettings.useBridges.custom "Insira as pontes personalizadas"> <!ENTITY torsettings.useBridges.label "Insira uma ou mais retransmissões de ponte (uma por linha)."> @@ -65,7 +65,7 @@ <!ENTITY torsettings.copyLog "Copiar o Registo do Tor para a Área de Transferência"> <!ENTITY torsettings.bridgeHelpTitle "Ajuda da Retransmissão de Ponte"> <!ENTITY torsettings.bridgeHelp1 "Se não consegue ligar-se à rede Tor, pode ser devido a algum bloqueio do seu Provedor de Serviço de Internet (ISP) ou outra agência está a bloquear o Tor.  Frequentemente, pode contornar este problema utilizando Tor Bridges, o qual são pontos de passagem não listados que são mais difíceis de bloquear."> -<!ENTITY torsettings.bridgeHelp1B "You may use the preconfigured, provided set of bridge addresses or you may obtain a custom set of addresses by using one of these methods:"> +<!ENTITY torsettings.bridgeHelp1B "Poderá utilizar o conjunto de pontes pré-configurado fornecido ou poderá obter um conjunto de endereços personalizados, utilizando um deste métodos:"> <!ENTITY torsettings.bridgeHelp2Heading "Através da Web"> <!ENTITY torsettings.bridgeHelp2 "Utilize um navegador da Web para visitar https://bridges.torproject.org"> <!ENTITY torsettings.bridgeHelp3Heading "Através do Respondedor Automático de Correio Eletrónico">

1 0

[tor/master] Remove changes files from master for items in <=0.3.0.4-rc
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 3c56db431e3a879b4086e1cd6297a2e7ef59eeb1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 09:27:04 2017 -0500 Remove changes files from master for items in <=0.3.0.4-rc --- changes/bug20711 | 7 ------- changes/bug20894 | 9 --------- changes/bug21007_case2 | 4 ---- changes/bug21027 | 8 -------- changes/bug21116 | 3 --- changes/bug21278_extras | 3 --- changes/bug21278_prevention | 4 ---- changes/bug21369_check | 3 --- changes/bug21420 | 3 --- changes/bug21447 | 4 ---- changes/bug21450 | 4 ---- changes/bug21471 | 5 ----- changes/bug21472 | 3 --- changes/bug21492 | 5 ----- changes/bug21553 | 7 ------- changes/bug21562 | 4 ---- changes/feature21570 | 5 ----- changes/geoip-february2017 | 4 ---- changes/ticket20656 | 3 --- changes/trove-2017-001.2 | 8 -------- 20 files changed, 96 deletions(-) diff --git a/changes/bug20711 b/changes/bug20711 deleted file mode 100644 index 0bc0d94..0000000 --- a/changes/bug20711 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes (directory mirrors): - - Allow relays to use directory mirrors without a DirPort: these relays - need to be contacted over their ORPorts using a begindir connection. - Fixes bug 20711; bugfix on 0.2.8.2-alpha. - - Clarify the message logged when a remote relay is unexpectedly missing - an ORPort or DirPort: users were confusing this with a local port. - Fixes bug 20711; bugfix on 0.2.8.2-alpha. diff --git a/changes/bug20894 b/changes/bug20894 deleted file mode 100644 index 2dbf9b9..0000000 --- a/changes/bug20894 +++ /dev/null @@ -1,9 +0,0 @@ - o Major bugfixes (HTTP, parsing): - - When parsing a malformed content-length field from an HTTP message, - do not read off the end of the buffer. This bug was a potential - remote denial-of-service attack against Tor clients and relays. - A workaround was released in October 2016, which prevents this - bug from crashing Tor. This is a fix for the underlying issue, - which should no longer matter (if you applied the earlier patch). - Fixes bug 20894; bugfix on 0.2.0.16-alpha. Bug found by fuzzing - using AFL (http://lcamtuf.coredump.cx/afl/) diff --git a/changes/bug21007_case2 b/changes/bug21007_case2 deleted file mode 100644 index 4334444..0000000 --- a/changes/bug21007_case2 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (guards): - - Don't warn about a missing guard state on timeout-measurement - circuits: they aren't supposed to be using guards. Fixes an - instance of bug 21007; bugfix on 0.3.0.1-alpha. diff --git a/changes/bug21027 b/changes/bug21027 deleted file mode 100644 index d20df87..0000000 --- a/changes/bug21027 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes (bridges): - - - When the same bridge is configured multiple times at different - address:port combinations (but with the same identity), treat - those bridge instances as separate guards. This allows clients to - configure the same bridge with multiple pluggable transports, once - again. Fixes bug 21027; bugfix on 0.3.0.1-alpha. - diff --git a/changes/bug21116 b/changes/bug21116 deleted file mode 100644 index 2304ab0..0000000 --- a/changes/bug21116 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (test): - - Fix Raspbian build missing socket errno in test util. Fixes bug 21116.; - bugfix on tor-0.2.8.2. Patch by "hein". diff --git a/changes/bug21278_extras b/changes/bug21278_extras deleted file mode 100644 index ffdf4a0..0000000 --- a/changes/bug21278_extras +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (code correctness): - - Repair a couple of (unreachable or harmless) cases of the risky - comparison-by-subtraction pattern that caused bug 21278. diff --git a/changes/bug21278_prevention b/changes/bug21278_prevention deleted file mode 100644 index e07f0a6..0000000 --- a/changes/bug21278_prevention +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (directory authority): - - Directory authorities now reject descriptors that claim to be - malformed versions of Tor. Helps prevent exploitation of bug 21278. - diff --git a/changes/bug21369_check b/changes/bug21369_check deleted file mode 100644 index 2cd808c..0000000 --- a/changes/bug21369_check +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (reliability, crash): - - Try better to detect problems in buffers where they might grow (or - think they have grown) over 2 GB in size. Diagnostic for bug 21369. diff --git a/changes/bug21420 b/changes/bug21420 deleted file mode 100644 index 0144044..0000000 --- a/changes/bug21420 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (certificate expiration time): - - Avoid using link certificates that don't become valid till - some time in the future. Fixes bug 21420; bugfix on 0.2.4.11-alpha diff --git a/changes/bug21447 b/changes/bug21447 deleted file mode 100644 index c025b92..0000000 --- a/changes/bug21447 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (testing): - - Rename "make fuzz" to "make test-fuzz-corpora", since it doesn't - actually fuzz anything. Fixes bug 21447; bugfix on 0.3.0.3-alpha. - diff --git a/changes/bug21450 b/changes/bug21450 deleted file mode 100644 index a1cf89a..0000000 --- a/changes/bug21450 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (voting consistency): - - Reject version numbers with components that exceed INT32_MAX. - Otherwise 32-bit and 64-bit platforms would behave inconsistently. - Fixes bug 21450; bugfix on 0.0.8pre1. diff --git a/changes/bug21471 b/changes/bug21471 deleted file mode 100644 index 684035b..0000000 --- a/changes/bug21471 +++ /dev/null @@ -1,5 +0,0 @@ - o Major bugfixes (hidden service directory v3): - - When a descriptor lookup was done and it was not found in the directory - cache, it would crash on a NULL pointer instead of returning the 404 - code back to the client like it was suppose to. Fixes bug 21471.; - bugfixes on tor-0.3.0.1-alpha. diff --git a/changes/bug21472 b/changes/bug21472 deleted file mode 100644 index f31ec91..0000000 --- a/changes/bug21472 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Small fixes to the fuzzing documentation. Closes ticket - 21472. diff --git a/changes/bug21492 b/changes/bug21492 deleted file mode 100644 index 2ed7947..0000000 --- a/changes/bug21492 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (correctness): - - Remove a redundant check for the UseEntryGuards option from the - options_transition_affects_guards() function. Fixes bug 21492; - bugfix on 0.3.0.1-alpha. - diff --git a/changes/bug21553 b/changes/bug21553 deleted file mode 100644 index 6ffa3e2..0000000 --- a/changes/bug21553 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes (hidden service): - - When encoding a legacy ESTABLISH_INTRO cell, we were using the sizeof() - on a pointer instead of real size of the destination buffer leading to - an overflow passing an enormous value to the signing digest function. - Fortunately, that value was only used to make sure the destination - buffer length was big enough for the key size and in this case it was. - Fixes bug 21553; bugfix on tor-0.3.0.1-alpha. diff --git a/changes/bug21562 b/changes/bug21562 deleted file mode 100644 index 48396a0..0000000 --- a/changes/bug21562 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (testing): - - Use bash in src/test/test-network.sh. This ensures we reliably call - chutney's newer tools/test-network.sh when available. - Fixes bug 21562; bugfix on tor-0.2.9.1-alpha. diff --git a/changes/feature21570 b/changes/feature21570 deleted file mode 100644 index 40555ee..0000000 --- a/changes/feature21570 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (testing): - - During 'make test-network-all', if tor logs any warnings, ask chutney - to output them. Requires a recent version of chutney with the 21572 - patch. - Implements 21570. diff --git a/changes/geoip-february2017 b/changes/geoip-february2017 deleted file mode 100644 index ec54b61..0000000 --- a/changes/geoip-february2017 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 - Country database. - diff --git a/changes/ticket20656 b/changes/ticket20656 deleted file mode 100644 index 28192e8..0000000 --- a/changes/ticket20656 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor feature (protover): - - Add new protocol version for proposal 224. HSIntro now advertises - version "3-4" and HSDir version "1-2". Fixes ticket 20656. diff --git a/changes/trove-2017-001.2 b/changes/trove-2017-001.2 deleted file mode 100644 index 3ef073c..0000000 --- a/changes/trove-2017-001.2 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes (parsing): - - Fix an integer underflow bug when comparing malformed Tor versions. - This bug is harmless, except when Tor has been built with - --enable-expensive-hardening, which would turn it into a crash; - or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with - -ftrapv by default. - Part of TROVE-2017-001. Fixes bug 21278; bugfix on - 0.0.8pre1. Found by OSS-Fuzz.

1 0