September 2018 - tor-commits - lists.torproject.org

[tor-browser/tor-browser-60.2.0esr-8.0-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 14 Sep '18

14 Sep '18

commit 32b4b24c4cf56b9e88c7aae60c1db5affabd99b1 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Sep 12 13:44:31 2018 +0000 fixup! TB4: Tor Browser's Firefox preference overrides. This fixes bug 27535 and enables the TLS 1.3 draft version included in ESR60. --- browser/app/profile/000-tor-browser.js | 3 --- 1 file changed, 3 deletions(-) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index b7c2ff8207f2..d9e609a71eb8 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -293,9 +293,6 @@ pref("media.audio_data.enabled", false); // Patch written by Jeff Gibat (iSEC). pref("network.jar.block-remote-files", true); -// Enable TLS 1.1 and 1.2: -// https://trac.torproject.org/projects/tor/ticket/11253 -pref("security.tls.version.max", 3); // Disable RC4 fallback. This will go live in Firefox 44, Chrome and IE/Edge: // https://blog.mozilla.org/security/2015/09/11/deprecating-the-rc4-cipher/ pref("security.tls.unrestricted_rc4_fallback", false);

1 0

[tor-browser/tor-browser-60.2.0esr-8.5-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 14 Sep '18

14 Sep '18

commit dc3519d999329f06042409786568e8e871503a92 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Sep 12 13:44:31 2018 +0000 fixup! TB4: Tor Browser's Firefox preference overrides. This fixes bug 27535 and enables the TLS 1.3 draft version included in ESR60. --- browser/app/profile/000-tor-browser.js | 3 --- 1 file changed, 3 deletions(-) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index b7c2ff8207f2..d9e609a71eb8 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -293,9 +293,6 @@ pref("media.audio_data.enabled", false); // Patch written by Jeff Gibat (iSEC). pref("network.jar.block-remote-files", true); -// Enable TLS 1.1 and 1.2: -// https://trac.torproject.org/projects/tor/ticket/11253 -pref("security.tls.version.max", 3); // Disable RC4 fallback. This will go live in Firefox 44, Chrome and IE/Edge: // https://blog.mozilla.org/security/2015/09/11/deprecating-the-rc4-cipher/ pref("security.tls.unrestricted_rc4_fallback", false);

1 0

[translation/torbutton-browseronboardingproperties] Update translations for torbutton-browseronboardingproperties
by translation＠torproject.org 14 Sep '18

14 Sep '18

commit 3139543b517a678927df5cc793267a7097c7c2a3 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 14 14:48:47 2018 +0000 Update translations for torbutton-browseronboardingproperties --- pt_BR/browserOnboarding.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pt_BR/browserOnboarding.properties b/pt_BR/browserOnboarding.properties index 5937981eb..3a869e850 100644 --- a/pt_BR/browserOnboarding.properties +++ b/pt_BR/browserOnboarding.properties @@ -25,7 +25,7 @@ onboarding.tour-tor-circuit-display.button=See My Path onboarding.tour-tor-security=Segurança onboarding.tour-tor-security.title=Escolha sua experiência. onboarding.tour-tor-security.description=Nós também fornecemos a você configurações adicionais para aumentar a segurança do seu browser. Nossas Configurações de Segurança permitem você bloquear elementos que podem ser utilizados para atacar o seu computador. Clique abaixo para ver o que as diferentes opções fazem. -onboarding.tour-tor-security.button=Review Settings +onboarding.tour-tor-security.button=Reveja Configurações onboarding.tour-tor-expect-differences=Experience Tips onboarding.tour-tor-expect-differences.title=Espere algumas diferenças. @@ -44,7 +44,7 @@ onboarding.tor-circuit-display.one-of-three=1 de 3 onboarding.tor-circuit-display.two-of-three=2 de 3 onboarding.tor-circuit-display.three-of-three=3 de 3 -onboarding.tor-circuit-display.intro.title=How do circuits work? +onboarding.tor-circuit-display.intro.title=Como circuitos funcionam ? onboarding.tor-circuit-display.intro.msg=Circuits are made up of randomly assigned relays, which are computers around the world configured to forward Tor traffic. Circuits allow you to browse privately and to connect to onion services. onboarding.tor-circuit-display.diagram.title=Circuit Display

1 0

[tor/release-0.3.4] Merge branch 'maint-0.3.3' into maint-0.3.4
by nickm＠torproject.org 14 Sep '18

14 Sep '18

commit 8f689e0eb2b9c7bd51e4ddfe5e9f57d72fb45385 Merge: 82b128277 281854bab Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 14 10:48:01 2018 -0400 Merge branch 'maint-0.3.3' into maint-0.3.4 changes/bug27708 | 4 ++++ src/or/config.c | 1 + 2 files changed, 5 insertions(+)

1 0

[tor/release-0.3.4] Merge branch 'maint-0.3.4' into release-0.3.4
by nickm＠torproject.org 14 Sep '18

14 Sep '18

commit 1ab85566d8cb8707ea29ab02b10edf2da5cfb1ca Merge: bd4c50f36 8f689e0eb Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 14 10:48:01 2018 -0400 Merge branch 'maint-0.3.4' into release-0.3.4 changes/bug27708 | 4 ++++ src/or/config.c | 1 + 2 files changed, 5 insertions(+)

1 0

[tor/maint-0.3.3] If options_act() fails, restore the previous value of global_options
by nickm＠torproject.org 14 Sep '18

14 Sep '18

commit 281854bab7001cc838c91b521b41b666140e124f Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 14 10:34:45 2018 -0400 If options_act() fails, restore the previous value of global_options Before 0.3.3.1-alpha, we would exit() in this case immediately. But now that we leave tor_main() more conventionally, we need to make sure we restore things so as not to cause a double free. Fixes bug 27708; bugfix on 0.3.3.1-alpha. --- changes/bug27708 | 4 ++++ src/or/config.c | 1 + 2 files changed, 5 insertions(+) diff --git a/changes/bug27708 b/changes/bug27708 new file mode 100644 index 000000000..d283b1951 --- /dev/null +++ b/changes/bug27708 @@ -0,0 +1,4 @@ + o Major bugfixes (restart-in-process): + - Fix a use-after-free error that could be caused by passing Tor an + impossible set of options that would fail during options_act(). + Fixes bug 27708; bugfix on 0.3.3.1-alpha. diff --git a/src/or/config.c b/src/or/config.c index ac37324a2..58080c65e 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -868,6 +868,7 @@ set_options(or_options_t *new_val, char **msg) "Acting on config options left us in a broken state. Dying."); tor_shutdown_event_loop_and_exit(1); } + global_options = old_options; return -1; } /* Issues a CONF_CHANGED event to notify controller of the change. If Tor is

1 0

[tor/maint-0.3.4] If options_act() fails, restore the previous value of global_options
by nickm＠torproject.org 14 Sep '18

14 Sep '18

commit 281854bab7001cc838c91b521b41b666140e124f Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 14 10:34:45 2018 -0400 If options_act() fails, restore the previous value of global_options Before 0.3.3.1-alpha, we would exit() in this case immediately. But now that we leave tor_main() more conventionally, we need to make sure we restore things so as not to cause a double free. Fixes bug 27708; bugfix on 0.3.3.1-alpha. --- changes/bug27708 | 4 ++++ src/or/config.c | 1 + 2 files changed, 5 insertions(+) diff --git a/changes/bug27708 b/changes/bug27708 new file mode 100644 index 000000000..d283b1951 --- /dev/null +++ b/changes/bug27708 @@ -0,0 +1,4 @@ + o Major bugfixes (restart-in-process): + - Fix a use-after-free error that could be caused by passing Tor an + impossible set of options that would fail during options_act(). + Fixes bug 27708; bugfix on 0.3.3.1-alpha. diff --git a/src/or/config.c b/src/or/config.c index ac37324a2..58080c65e 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -868,6 +868,7 @@ set_options(or_options_t *new_val, char **msg) "Acting on config options left us in a broken state. Dying."); tor_shutdown_event_loop_and_exit(1); } + global_options = old_options; return -1; } /* Issues a CONF_CHANGED event to notify controller of the change. If Tor is

1 0

[tor/maint-0.3.4] Merge branch 'maint-0.3.3' into maint-0.3.4
by nickm＠torproject.org 14 Sep '18

14 Sep '18

commit 8f689e0eb2b9c7bd51e4ddfe5e9f57d72fb45385 Merge: 82b128277 281854bab Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 14 10:48:01 2018 -0400 Merge branch 'maint-0.3.3' into maint-0.3.4 changes/bug27708 | 4 ++++ src/or/config.c | 1 + 2 files changed, 5 insertions(+)

1 0

[tor/master] Merge branch 'maint-0.3.3' into maint-0.3.4
by nickm＠torproject.org 14 Sep '18

14 Sep '18

commit 8f689e0eb2b9c7bd51e4ddfe5e9f57d72fb45385 Merge: 82b128277 281854bab Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 14 10:48:01 2018 -0400 Merge branch 'maint-0.3.3' into maint-0.3.4 changes/bug27708 | 4 ++++ src/or/config.c | 1 + 2 files changed, 5 insertions(+)

1 0

[tor/master] If options_act() fails, restore the previous value of global_options
by nickm＠torproject.org 14 Sep '18

14 Sep '18

commit 281854bab7001cc838c91b521b41b666140e124f Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 14 10:34:45 2018 -0400 If options_act() fails, restore the previous value of global_options Before 0.3.3.1-alpha, we would exit() in this case immediately. But now that we leave tor_main() more conventionally, we need to make sure we restore things so as not to cause a double free. Fixes bug 27708; bugfix on 0.3.3.1-alpha. --- changes/bug27708 | 4 ++++ src/or/config.c | 1 + 2 files changed, 5 insertions(+) diff --git a/changes/bug27708 b/changes/bug27708 new file mode 100644 index 000000000..d283b1951 --- /dev/null +++ b/changes/bug27708 @@ -0,0 +1,4 @@ + o Major bugfixes (restart-in-process): + - Fix a use-after-free error that could be caused by passing Tor an + impossible set of options that would fail during options_act(). + Fixes bug 27708; bugfix on 0.3.3.1-alpha. diff --git a/src/or/config.c b/src/or/config.c index ac37324a2..58080c65e 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -868,6 +868,7 @@ set_options(or_options_t *new_val, char **msg) "Acting on config options left us in a broken state. Dying."); tor_shutdown_event_loop_and_exit(1); } + global_options = old_options; return -1; } /* Issues a CONF_CHANGED event to notify controller of the change. If Tor is

1 0