March 2017 - tor-commits - lists.torproject.org

[tor/release-0.2.5] Pick a date, update ReleaseNotes. (0.2.5)
by nickm＠torproject.org 03 Mar '17

03 Mar '17

commit 45245fe29e2e5a0e36c6e4a340d44c6d98cbba1d Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 3 14:56:01 2017 -0500 Pick a date, update ReleaseNotes. (0.2.5) --- ChangeLog | 2 +- ReleaseNotes | 122 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 123 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 2d897f0..3e3ca32 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.2.5.13 - 2017-03-?? +Changes in version 0.2.5.13 - 2017-03-03 Tor 0.2.5.13 backports a number of security fixes from later Tor releases. Anybody running Tor 0.2.5.13 or earlier should upgrade to this release, if for some reason they cannot upgrade to a later diff --git a/ReleaseNotes b/ReleaseNotes index e3889d1..f9a2fa9 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,128 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.5.13 - 2017-03-03 + Tor 0.2.5.13 backports a number of security fixes from later Tor + releases. Anybody running Tor 0.2.5.13 or earlier should upgrade to + this release, if for some reason they cannot upgrade to a later + release series. + + Note that support for Tor 0.2.5.x is ending next year: we will not issue + any fixes for the Tor 0.2.5.x series after 1 May 2018. If you need + a Tor release series with longer-term support, we recommend Tor 0.2.9.x. + + o Directory authority changes (backport from 0.2.8.5-rc): + - Urras is no longer a directory authority. Closes ticket 19271. + + o Directory authority changes (backport from 0.2.9.2-alpha): + - The "Tonga" bridge authority has been retired; the new bridge + authority is "Bifroest". Closes tickets 19728 and 19690. + + o Directory authority key updates (backport from 0.2.8.1-alpha): + - Update the V3 identity key for the dannenberg directory authority: + it was changed on 18 November 2015. Closes task 17906. Patch + by "teor". + + o Major features (security fixes, backport from 0.2.9.4-alpha): + - Prevent a class of security bugs caused by treating the contents + of a buffer chunk as if they were a NUL-terminated string. At + least one such bug seems to be present in all currently used + versions of Tor, and would allow an attacker to remotely crash + most Tor instances, especially those compiled with extra compiler + hardening. With this defense in place, such bugs can't crash Tor, + though we should still fix them as they occur. Closes ticket + 20384 (TROVE-2016-10-001). + + o Major bugfixes (parsing, security, backport from 0.2.9.8): + - Fix a bug in parsing that could cause clients to read a single + byte past the end of an allocated region. This bug could be used + to cause hardened clients (built with --enable-expensive-hardening) + to crash if they tried to visit a hostile hidden service. Non- + hardened clients are only affected depending on the details of + their platform's memory allocator. Fixes bug 21018; bugfix on + 0.2.0.8-alpha. Found by using libFuzzer. Also tracked as TROVE- + 2016-12-002 and as CVE-2016-1254. + + o Major bugfixes (security, client, DNS proxy, backport from 0.2.8.3-alpha): + - Stop a crash that could occur when a client running with DNSPort + received a query with multiple address types, and the first + address type was not supported. Found and fixed by Scott Dial. + Fixes bug 18710; bugfix on 0.2.5.4-alpha. + + o Major bugfixes (security, correctness, backport from 0.2.7.4-rc): + - Fix an error that could cause us to read 4 bytes before the + beginning of an openssl string. This bug could be used to cause + Tor to crash on systems with unusual malloc implementations, or + systems with unusual hardening installed. Fixes bug 17404; bugfix + on 0.2.3.6-alpha. + + o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): + - Avoid a difficult-to-trigger heap corruption attack when extending + a smartlist to contain over 16GB of pointers. Fixes bug 18162; + bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. + Reported by Guido Vranken. + + o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): + - Avoid crashing when running as a DNS proxy. Fixes bug 16248; + bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". + + o Major bugfixes (guard selection, backport from 0.2.7.6): + - Actually look at the Guard flag when selecting a new directory + guard. When we implemented the directory guard design, we + accidentally started treating all relays as if they have the Guard + flag during guard selection, leading to weaker anonymity and worse + performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered + by Mohsen Imani. + + o Major bugfixes (key management, backport from 0.2.8.3-alpha): + - If OpenSSL fails to generate an RSA key, do not retain a dangling + pointer to the previous (uninitialized) key value. The impact here + should be limited to a difficult-to-trigger crash, if OpenSSL is + running an engine that makes key generation failures possible, or + if OpenSSL runs out of memory. Fixes bug 19152; bugfix on + 0.2.1.10-alpha. Found by Yuan Jochen Kang, Suman Jana, and + Baishakhi Ray. + + o Major bugfixes (parsing, backported from 0.3.0.4-rc): + - Fix an integer underflow bug when comparing malformed Tor + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. + + o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): + - Make memwipe() do nothing when passed a NULL pointer or buffer of + zero size. Check size argument to memwipe() for underflow. Fixes + bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", + patch by "teor". + + o Minor features (bug-resistance, backport from 0.2.8.2-alpha): + - Make Tor survive errors involving connections without a + corresponding event object. Previously we'd fail with an + assertion; now we produce a log message. Related to bug 16248. + + o Minor features (geoip): + - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (compilation, backport from 0.2.7.6): + - Fix a compilation warning with Clang 3.6: Do not check the + presence of an address which can never be NULL. Fixes bug 17781. + + o Minor bugfixes (crypto error-handling, backport from 0.2.7.2-alpha): + - Check for failures from crypto_early_init, and refuse to continue. + A previous typo meant that we could keep going with an + uninitialized crypto library, and would have OpenSSL initialize + its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced + when implementing ticket 4900. Patch by "teor". + + o Minor bugfixes (hidden service, backport from 0.2.7.1-alpha): + - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells on + a client authorized hidden service. Fixes bug 15823; bugfix + on 0.2.1.6-alpha. + + Changes in version 0.2.5.12 - 2015-04-06 Tor 0.2.5.12 backports two fixes from 0.2.6.7 for security issues that could be used by an attacker to crash hidden services, or crash clients

1 0

[torspec/master] Modernize proposal 140 a bit
by nickm＠torproject.org 03 Mar '17

03 Mar '17

commit 74368063c69ad31ee7e49aa52d71ede7fd404e1e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 3 13:50:27 2017 -0500 Modernize proposal 140 a bit Update to new stats, note newer proposals, note flavors, add parameters to say how much to cache, restore diff-only URLs, say what "Digest" means. -nickm --- proposals/140-consensus-diffs.txt | 128 ++++++++++++++++++++++++-------------- 1 file changed, 83 insertions(+), 45 deletions(-) diff --git a/proposals/140-consensus-diffs.txt b/proposals/140-consensus-diffs.txt index aa71f79..13565ee 100644 --- a/proposals/140-consensus-diffs.txt +++ b/proposals/140-consensus-diffs.txt @@ -12,6 +12,10 @@ Status: Accepted 25-May-2014: Adapted to the new dir-spec version 3 and made the diff urls backwards-compatible. -mvdan + 1-Mar-2017: Update to new stats, note newer proposals, note flavors, + diffs, add parameters, restore diff-only URLs, say what "Digest" + means. -nickm + 1. Overview. Tor clients and servers need a list of which relays are on the @@ -28,15 +32,24 @@ Status: Accepted 2. Numbers - After implementing proposal 138 which removes nodes that are not - running from the list a consensus document is about 92 kilobytes - in size after compression. + After implementing proposal 138, which removed nodes that are not + running from the list, a consensus document was about 92 kilobytes + in size after compression... back in 2008 when this proposal was first + written. + + But now in March 2017, that figure is more like 625 kilobytes. - The diff between two consecutive consensus, in ed format, is on - average 13 kilobytes compressed. + The diff between two consecutive consensuses, in ed format, is on + average 37 kilobytes compressed. So by making this change, we could + save something like 94% of our consensus download bandwidth. 3. Proposal +3.0. Preliminaries. + + Unless otherwise specified, all hashes in this document are SHA3-256 + hashes, encoded in base64. + 3.1 Clients If a client has a consensus that is recent enough it SHOULD @@ -45,48 +58,38 @@ Status: Accepted [XXX: what is recent enough? time delta in hours / size of compressed diff - 0 20 - 1 9650 - 2 17011 - 3 23150 - 4 29813 - 5 36079 - 6 39455 - 7 43903 - 8 48907 - 9 54549 - 10 60057 - 11 67810 - 12 71171 - 13 73863 - 14 76048 - 15 80031 - 16 84686 - 17 89862 - 18 94760 - 19 94868 - 20 94223 - 21 93921 - 22 92144 - 23 90228 - [ size of gzip compressed "diff -e" between the consensus on - 2008-06-01-00:00:00 and the following consensuses that day. - Consensuses have been modified to exclude down routers per - proposal 138. ] - - Data suggests that for the first few hours diffs are very useful, - saving about 60% for the first three hours, 30% for the first 10, - and almost nothing once we are past 16 hours. - ] + +1: 38177 +2: 66955 +3: 93502 +4: 118959 +5: 143450 +6: 167136 +12: 291354 +18: 404008 +24: 416663 +30: 431240 +36: 443858 +42: 454849 +48: 464677 +54: 476716 +60: 487755 +66: 497502 +72: 506421 + + Data suggests that for the first few hours' diffs are very useful, + saving at least 50% for the first 12 hours. After that, returns seem to + be more marginal. But note the savings from proposals like 274-276, which + make diffs smaller over a much longer timeframe. ] + 3.2 Servers - Directory authorities and servers need to keep up to X [XXX: depends - on how long clients try to download diffs per above] old consensus - documents so they can build diffs. They should offer a diff to the - most recent consensus at the following request: + Directory authorities and servers need to keep a number of old consensus + documents so they can build diffs. (See section 5 below ). They should + offer a diff to the most recent consensus at the following request: - HTTP/1.0 GET /tor/status-vote/current/consensus/<FPRLIST>.z + HTTP/1.0 GET /tor/status-vote/current/consensus{-Flavor}/<FPRLIST>.z X-Or-Diff-From-Consensus: HASH1 HASH2... where the hashes are the full digests of the consensuses the client @@ -118,6 +121,15 @@ Status: Accepted I currently lean towards the empty diff.] + Additionally, specific diff for a given consensus hash should be available + a URL of the form: + + /tor/status-vote/current/consensus{-Flavor}/diff/<HASH>/<FPRLIST>.z + + This differs from the previous request type in that it should never + return a whole consensus: if a diff is not available, it should return + 404. + 4. Diff Format Diffs start with the token "network-status-diff-version" followed by a @@ -145,9 +157,9 @@ Status: Accepted We support the following ed commands, each on a line by itself: - "<n1>d" Delete line n1 - - "<n1>,<n2>d" Delete lines n1 through n2, including + - "<n1>,<n2>d" Delete lines n1 through n2, inclusive - "<n1>c" Replace line n1 with the following block - - "<n1>,<n2>c" Replace lines n1 through n2, including, with the + - "<n1>,<n2>c" Replace lines n1 through n2, inclusive, with the following block. - "<n1>a" Append the following block after line n1. - "a" Append the following block after the current line. @@ -170,3 +182,29 @@ Status: Accepted just a period (".") ends the block (and is not part of the lines to add). Note that it is impossible to insert a line with just a single dot. + +4.1. Concatenating multiple diffs + + Directory caches may, at their discretion, return the concatenation of + multiple diffs using the format above. Such diffs are to be applied from + first to last. This allows the caches to cache a smaller number of + compressed diffs, at the expense of some loss in bandwidth efficiency. + + +5. Networkstatus parameters + + The following parameters govern how relays and clients use this protocol. + + min-consensuses-age-to-cache-for-diff + (min 0, max 744, default 6) + max-consensuses-age-to-cache-for-diff + (min 0, max 8192, default 72) + + These two parameters determine how much consensus history (in + hours) relays should try to cache in order to serve diffs. + + try-diff-for-consensus-newer-than + (min 0, max 8192, default 72) + + This parameter determines how old a consensus can be (in hours) + before a client should no longer try to find a diff for it.

1 0

[tor-browser-bundle/master] Release preparations for 7.0a2
by gk＠torproject.org 03 Mar '17

03 Mar '17

commit 409e1aa1aa580d9d4d193666ed89ca8ceb05acb7 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Mar 3 15:42:45 2017 +0000 Release preparations for 7.0a2 Version bumps, Changelog update, and update of config.yml --- Bundle-Data/Docs/ChangeLog.txt | 25 +++++++++++++++++++++++++ gitian/versions.alpha | 14 +++++++------- tools/update-responses/config.yml | 10 +++++----- 3 files changed, 37 insertions(+), 12 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 6dc7b45..43e771f 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,28 @@ +Tor Browser 7.0a2 -- March 7 2017 + * All Platforms + * Update Firefox to 45.8.0esr + * Tor to 0.3.0.4-rc + * OpenSSL to 1.0.2k + * Update Torbutton to 1.9.7.1 + * Bug 21396: Allow leaking of resource/chrome URIs (off by default) + * Bug 21574: Add link for zh manual and create manual links dynamically + * Bug 21330: Non-usable scrollbar appears in tor browser security settings + * Bug 21324: Don't update NoScript button with timer update + * Translation updates + * Update HTTPS-Everywhere to 5.2.11 + * Bug 21514: Restore W^X JIT implementation removed from ESR45 + * Bug 21536: Remove scramblesuit bridge + * Bug 21342: Move meek-azure to the meek.azureedge.net backend and cymrubridge02 bridge + * Bug 21348: Make snowflake only available on Linux for now + * Linux + * Bug 21326: Update the "Using a system-installed Tor" section in start script + * Build system + * OS X + * Bug 21343: Remove unused FTE related parts for macOS + * Linux + * Bug 17034: Use our built binutils and GCC for building tor + * Clean-up + Tor Browser 7.0a1-hardened -- January 25 2017 * All Platforms * Update Firefox to 45.7.0esr diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 0644778..6c06648 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -10,15 +10,15 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.7.0esr +FIREFOX_VERSION=45.8.0esr TORBROWSER_UPDATE_CHANNEL=alpha TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1-build1 -TOR_TAG=tor-0.3.0.2-alpha +TOR_TAG=tor-0.3.0.4-rc TORLAUNCHER_TAG=0.2.10.2 -TORBUTTON_TAG=1.9.7 -HTTPSE_TAG=5.2.9 +TORBUTTON_TAG=1.9.7.1 +HTTPSE_TAG=5.2.11 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.22-stable @@ -52,10 +52,10 @@ UNIURI_TAG=8902c56451e9b58ff940bbe5fec35d5f9c04584a GITIAN_TAG=tor-browser-builder-4-2 -OPENSSL_VER=1.0.2j +OPENSSL_VER=1.0.2k GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION -FIREFOX_LANG_BUILD=build1 +FIREFOX_LANG_BUILD=build2 BINUTILS_VER=2.24 GCC_VER=5.1.0 CLANG_VER=r247539 @@ -105,7 +105,7 @@ NOTOSCFONT_PACKAGE=NotoSansSC-Regular.otf NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=e7aff292be21c259c6af26469c7a9b3ba26e9abaaffd325e3dccc9785256c431 +OPENSSL_HASH=6b3977c61f2aedf0f96367dcfb5c6e578cf37e7b8d913b4ecb6643c3cb88d8c0 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 613da0e..1861a8c 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -19,7 +19,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - alpha: 7.0a1 + alpha: 7.0a2 release: 6.0.1 versions: 6.0.1: @@ -33,11 +33,11 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 7.0a1: - platformVersion: 45.7.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-70a1-released + 7.0a2: + platformVersion: 45.8.0 + detailsURL: https://blog.torproject.org/blog/tor-browser-70a2-released incremental_from: - - 6.5a6 + - 7.0a1 migrate_archs: osx32: osx64 migrate_langs:

1 0

[translation/tails-greeter-2] Update translations for tails-greeter-2
by translation＠torproject.org 03 Mar '17

03 Mar '17

commit 91712fda6fba95bcdff221adcdecfbec63790079 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 3 17:18:11 2017 +0000 Update translations for tails-greeter-2 --- el/el.po | 29 +++++++++++++++++------------ 1 file changed, 17 insertions(+), 12 deletions(-) diff --git a/el/el.po b/el/el.po index 2aa7c56..b356c91 100644 --- a/el/el.po +++ b/el/el.po @@ -58,6 +58,9 @@ msgid "" "This option makes Tails look like Microsoft Windows 10. This can be useful " "to avoid attracting suspicion in public places." msgstr "" +"Αυτή η επιλογή κάνει το Tails να μοιάζει με τα Microsoft Windows 10. Αυτό " +"είναι χρήσιμο για να μην τραβάς την προσοχή και κινείς υποψίες σε δημόσιους " +"χώρους." #. This string will never be displayed in the 1st version of the greeter. #: ../data/greeter.ui.h:12 @@ -91,6 +94,8 @@ msgstr "Να μην αλλοιώνονται οι διευθύνσεις MAC" #: ../data/greeter.ui.h:17 ../tailsgreeter/gui.py:514 msgid "Cannot unlock encrypted storage with this passphrase." msgstr "" +"Δεν μπορούμε να ξεκλειδώσουμε τον κρυπτογραφημένο αποθηκευτικό χώρο με αυτή " +"την φράση κλειδί." #: ../data/greeter.ui.h:18 msgid "" @@ -100,7 +105,7 @@ msgstr "" #: ../data/greeter.ui.h:19 msgid "Welcome to Tails!" -msgstr "" +msgstr "Καλωσήρθατε στο Tails!" #. This string will never be displayed in the 1st version of the greeter. #: ../data/greeter.ui.h:21 @@ -127,7 +132,7 @@ msgstr "Γλώσσα" #: ../data/greeter.ui.h:26 msgid "Keyboard Layout" -msgstr "" +msgstr "Τοπολογία πληκτρολογίου" #: ../data/greeter.ui.h:27 msgid "Formats" @@ -139,15 +144,15 @@ msgstr "Ζώνη Ώρας" #: ../data/greeter.ui.h:29 msgid "Encrypted Persistent Storage" -msgstr "" +msgstr "Μόνιμος κρυπτογραφημένος χώρος αποθήκευσης" #: ../data/greeter.ui.h:30 msgid "Show Passphrase" -msgstr "" +msgstr "Εμφάνιση συνθηματικού" #: ../data/greeter.ui.h:31 msgid "Configure Persistent Storage" -msgstr "" +msgstr "Ρύθμιση μόνιμου χώρου αποθήκευσης" #: ../data/greeter.ui.h:32 msgid "Enter your passphrase to unlock the persistent storage" @@ -156,7 +161,7 @@ msgstr "" #: ../data/greeter.ui.h:33 ../tailsgreeter/gui.py:460 #: ../tailsgreeter/gui.py:510 msgid "Unlock" -msgstr "" +msgstr "Ξεκλείδωμα" #: ../data/greeter.ui.h:34 msgid "Relock Persistent Storage" @@ -168,15 +173,15 @@ msgstr "" #: ../data/greeter.ui.h:36 ../tailsgreeter/gui.py:554 msgid "Additional Settings" -msgstr "" +msgstr "Επιπλέον Ρυθμίσεις" #: ../data/greeter.ui.h:37 msgid "Save Additional Settings" -msgstr "" +msgstr "Αποθήκευση επιπλέον ρυθμίσεων" #: ../data/greeter.ui.h:38 msgid "Add an additional setting" -msgstr "" +msgstr "Προσθήκη επιπλέον ρύθμισης" #: ../data/greeter.ui.h:39 msgid "Network Configuration" @@ -209,11 +214,11 @@ msgstr "" #: ../data/greeter.ui.h:45 msgid "Off (default)" -msgstr "" +msgstr "Κλειστό (προεπιλογή)" #: ../data/greeter.ui.h:46 msgid "On (default)" -msgstr "" +msgstr "Ανοιχτό (προεπιλογή)" #: ../data/greeter.ui.h:47 msgid "Network Connection" @@ -237,7 +242,7 @@ msgstr "" #: ../tailsgreeter/gui.py:481 msgid "Unlocking…" -msgstr "" +msgstr "Ξεκλειδώνεται..." #: ../tailsgreeter/gui.py:562 msgid "Cancel"

1 0

[translation/tails-greeter-2] Update translations for tails-greeter-2
by translation＠torproject.org 03 Mar '17

03 Mar '17

commit c0fe44427954fbf7b463aeadc30ff8d0057c0136 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 3 16:48:11 2017 +0000 Update translations for tails-greeter-2 --- el/el.po | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/el/el.po b/el/el.po index 5d9e792..2aa7c56 100644 --- a/el/el.po +++ b/el/el.po @@ -10,7 +10,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2017-01-31 10:47+0100\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" -"Last-Translator: dpdt1 <dpdt1(a)espiv.net>, 2016\n" +"Last-Translator: Adrian Pappas <pappasadrian(a)gmail.com>, 2017\n" "Language-Team: Greek (https://www.transifex.com/otf/teams/1519/el/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -62,11 +62,11 @@ msgstr "" #. This string will never be displayed in the 1st version of the greeter. #: ../data/greeter.ui.h:12 msgid "Microsoft Windows 10 camouflage" -msgstr "" +msgstr "Καμουφλάζ Microsoft Windows 10" #: ../data/greeter.ui.h:13 msgid "MAC Address Spoofing" -msgstr "" +msgstr "Αλλοίωση διεύθυνσης MAC" #: ../data/greeter.ui.h:14 msgid "" @@ -75,14 +75,18 @@ msgid "" " as it helps you hide your geographical location. But it might also create " "connectivity problems or look suspicious." msgstr "" +"Η αλλοίωση διεύθυνσης MAC κρύβει τον σειριακό αριθμό των καρτών δικτύου σας " +"(Ethernet ή Wi-Fi) για τα τοπικά δίκτυα. Αυτό είναι γενικά ασφαλέστερο γιατί" +" σας βοηθήσει να κρύψετε τη γεωγραφική θέση σας. Μπορεί όμως να δημιουργήσει" +" προβλήματα συνδεσιμότητας ή να φαίνεται ύποπτο." #: ../data/greeter.ui.h:15 msgid "Spoof all MAC addresses (default)" -msgstr "" +msgstr "Αλλοίωση όλων των διευθύνσεων MAC (προεπιλογή)" #: ../data/greeter.ui.h:16 msgid "Don't spoof MAC addresses" -msgstr "" +msgstr "Να μην αλλοιώνονται οι διευθύνσεις MAC" #: ../data/greeter.ui.h:17 ../tailsgreeter/gui.py:514 msgid "Cannot unlock encrypted storage with this passphrase."

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 03 Mar '17

03 Mar '17

commit f81b47443f31e175ea65641742585171e30d026b Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 3 11:48:22 2017 +0000 Update translations for tor-browser-manual --- vi/vi.po | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/vi/vi.po b/vi/vi.po index 4e4bd22..e542f55 100644 --- a/vi/vi.po +++ b/vi/vi.po @@ -562,6 +562,7 @@ msgstr "" #: known-issues.page:43 msgid "Tor can not use a bridge if a proxy is set." msgstr "" +"Tor không thể sử dụng cầu nối nếu một trung gian uỷ quyền được cài đặt." #: known-issues.page:48 msgid "" @@ -576,12 +577,18 @@ msgid "" "executable text files when they are opened\" to \"Ask every time\", then " "click OK." msgstr "" +"Để chạy Trình duyệt Tor trong Ubuntu, người dùng cần thực thi một mã kịch " +"bản shell. Mở \"Files\" (Unity's explorer), mở Preferences → Behavior Tab →" +" Đặt \"Run executable text files when they are opened\" thành \"Ask every " +"time\", rồi kích OK." #: known-issues.page:62 msgid "" "Tor Browser can also be started from the command line by running the " "following command from inside the Tor Browser directory:" msgstr "" +"Trình duyệt Tor cũng có thể được khởi động từ dòng lệnh bằng cách chạy lệnh " +"sau từ bên trong thư mục chứa Trình duyệt Tor:" #: known-issues.page:66 #, no-wrap @@ -590,14 +597,18 @@ msgid "" " ./start-tor-browser.desktop\n" " " msgstr "" +"\n" +"./start-tor-browser.desktop" #: managing-identities.page:6 msgid "Learn how to control personally-identifying information in Tor Browser" msgstr "" +"Học cách làm sao để kiểm soát thông tin định danh cá nhân trong Trình duyệt " +"Tor" #: managing-identities.page:10 msgid "Managing identities" -msgstr "" +msgstr "Quản trị các định danh" #: managing-identities.page:12 msgid "" @@ -607,6 +618,12 @@ msgid "" "trackers, and advertising beacons, all of which can link your activity " "across different sites." msgstr "" +"Khi bạn kết nối tới một trang web, không chỉ những người vận hành trang web " +"đó có thể ghi lại thông tin về sự truy cập của bạn. Hầu hết các trang web " +"ngày nay sử dụng các dịch vụ của bên thứ ba, bao gồm các nút “Thích” của " +"mạng xã hội, các bên theo dấu và phân tích, và các kỹ thuật điều phối quảng " +"cáo, tất cả những điều này có thể liên kết các hoạt động của bạn từ nhiều " +"trang web khác nhau." #: managing-identities.page:20 msgid ""

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 03 Mar '17

03 Mar '17

commit ed16880aba867614dba81acf46b031f23fc89569 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 3 11:18:19 2017 +0000 Update translations for tor-browser-manual --- vi/vi.po | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/vi/vi.po b/vi/vi.po index 03c0610..4e4bd22 100644 --- a/vi/vi.po +++ b/vi/vi.po @@ -616,10 +616,15 @@ msgid "" " Browser includes some additional features that help you control what " "information can be tied to your identity." msgstr "" +"Sử dụng mạng lưới Tor ngăn chặn các bên quan sát có thể tìm ra vị trí và địa" +" chỉ IP chính xác của bạn, nhưng ngay cả khi không có những thông tin này họ" +" vẫn có thể liên kết các vùng hoạt động khác nhau của bạn. Vì lý do này, " +"Trình duyệt Tor có thêm một vài đặc tính giúp bạn kiểm soát thông tin nào có" +" thể gán với định danh của bạn." #: managing-identities.page:29 msgid "The URL bar" -msgstr "" +msgstr "Thanh địa chỉ URL" #: managing-identities.page:30 msgid ""

1 0

[torbutton/master] Release preparations for 1.9.7.1
by gk＠torproject.org 03 Mar '17

03 Mar '17

commit 391ea08d24b00bd161e7916ff62d572d9102d375 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Mar 3 09:52:03 2017 +0000 Release preparations for 1.9.7.1 Version bump, and CHANGELOG update --- src/CHANGELOG | 16 ++++++++++++++++ src/install.rdf | 2 +- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 80b22e3..bc1092b 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,10 @@ +1.9.7.1 + * Bug 21396: Allow leaking of resource/chrome URIs (off by default) + * Bug 21574: Add link for zh manual and create manual links dynamically + * Bug 21330: Non-usable scrollbar appears in tor browser security settings + * Bug 21324: Don't update NoScript button with timer update + * Translation updates + 1.9.7 * Bug 19898: Use DuckDuckGo on about:tor * Bug 21091: Hide the update check menu entry when running under the sandbox @@ -6,6 +13,15 @@ * Bug 21131: Remove 2016 donation banner * Translation updates +1.9.6.12 + * Bug 20951: Back out Unix domain socket related patches for Tor Browser 6.5 + * Bug 19898: Use DuckDuckGo on about:tor + * Bug 21243: Add links to es, fr, and pt Tor Browser manual + * Bug 21091: Hide the update check menu entry when running under the sandbox + * Bug 21131: Remove 2016 donation banner + * Bug 14429: Make sure the automatic resizing is disabled + * Translation updates + 1.9.6.9 * Bug 20947: Donation banner improvements diff --git a/src/install.rdf b/src/install.rdf index 6c9572d..3077598 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.7</em:version> + <em:version>1.9.7.1</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

1 0

[tor-browser-bundle/maint-6.5] Release preparations for 6.5.1
by gk＠torproject.org 03 Mar '17

03 Mar '17

commit dbbc765ad9ba158a7538255a5c7a027e859a106f Author: Georg Koppen <gk(a)torproject.org> Date: Fri Mar 3 08:11:35 2017 +0000 Release preparations for 6.5.1 build2 bumps the Torbutton and Tor Browser branch to pick up last minute bug fixes. --- Bundle-Data/Docs/ChangeLog.txt | 4 ++-- gitian/versions | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 571b677..311a894 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -3,13 +3,13 @@ Tor Browser 6.5.1 -- March 6 2017 * Update Firefox to 45.8.0esr * Tor to 0.2.9.10 * OpenSSL to 1.0.2k - * Update Torbutton to 1.9.6.13 + * Update Torbutton to 1.9.6.14 * Bug 21396: Allow leaking of resource/chrome URIs (off by default) * Bug 21574: Add link for zh manual and create manual links dynamically * Bug 21330: Non-usable scrollbar appears in tor browser security settings * Translation updates * Update HTTPS-Everywhere to 5.2.11 - * Bug 21514: Back out backported W^X patches due to conflicts in 45.8.0esr + * Bug 21514: Restore W^X JIT implementation removed from ESR45 * Bug 21536: Remove scramblesuit bridge * Bug 21342: Move meek-azure to the meek.azureedge.net backend and cymrubridge02 bridge * Linux diff --git a/gitian/versions b/gitian/versions index f7c21df..df49b55 100755 --- a/gitian/versions +++ b/gitian/versions @@ -14,10 +14,10 @@ FIREFOX_VERSION=45.8.0esr TORBROWSER_UPDATE_CHANNEL=release -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-2-build1 TOR_TAG=tor-0.2.9.10 TORLAUNCHER_TAG=0.2.10.3 -TORBUTTON_TAG=1.9.6.13 +TORBUTTON_TAG=1.9.6.14 HTTPSE_TAG=5.2.11 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 @@ -47,7 +47,7 @@ GITIAN_TAG=tor-browser-builder-4-1 OPENSSL_VER=1.0.2k GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION -FIREFOX_LANG_BUILD=build1 +FIREFOX_LANG_BUILD=build2 BINUTILS_VER=2.24 GCC_VER=5.1.0 CLANG_VER=r247539

1 0

[torbutton/maint-1.9.6] fixup! Bug 21396: Allow leaking of resource/chrome URIs
by gk＠torproject.org 03 Mar '17

03 Mar '17

commit bcbef88add4cdb4fe42c2827c8fe3e04c045a002 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Mar 2 11:28:13 2017 +0000 fixup! Bug 21396: Allow leaking of resource/chrome URIs --- src/components/content-policy.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/components/content-policy.js b/src/components/content-policy.js index b11c4e7..096827b 100644 --- a/src/components/content-policy.js +++ b/src/components/content-policy.js @@ -17,9 +17,10 @@ let { bindPrefAndInit } = function ContentPolicy() { this.uriFingerprinting = null; + let that = this; bindPrefAndInit("extensions.torbutton.resource_and_chrome_uri_fingerprinting", function (enabled) { - this.uriFingerprinting = enabled; + that.uriFingerprinting = enabled; }); }

1 0