September 2019 - tor-commits - lists.torproject.org

[tor-browser-build/master] Release preparations for 9.0a7
by gk＠torproject.org 28 Sep '19

28 Sep '19

commit 9d253167005def507583f90f01f0fc96e2bdbe07 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Sep 27 21:50:14 2019 +0000 Release preparations for 9.0a7 Changelog update and versions bump --- projects/firefox/config | 2 +- .../tor-browser/Bundle-Data/Docs/ChangeLog.txt | 58 ++++++++++++++++++++++ projects/tor-launcher/config | 2 +- projects/tor/config | 2 +- rbm.conf | 6 +-- 5 files changed, 64 insertions(+), 6 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index 334a1a8..3391a5a 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-2-build2' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-2-build3' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 2ecd3d1..0f18eae 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,61 @@ +Tor Browser 9.0a7 -- October 1 2019 + * All platforms + * Bug 30304: Browser locale can be obtained via DTD strings + * Bug 31065: Set network.proxy.allow_hijacking_localhost to true + * Bug 24653: Merge securityLevel.properties into torbutton.dtd + * Bug 31725: Pick up mk in Torbutton properly + * Bug 31164: Set up default bridge at Karlstad University + * Bug 15563: Disable ServiceWorkers on all platforms + * Translations update + * Windows + OS X + Linux + * Update Tor to 0.4.2.1-alpha + * Update OpenSSL to 1.1.1d + * Bug 31844: OpenSSL 1.1.1d fails to compile for some platforms/architectures + * Update Tor Launcher to 0.2.19.4 + * Bug 31303: Do not launch tor in browser toolbox + * Bug 31491: Clean up the old meek http helper browser profiles + * Translations update + * Bug 31598: Disable warning on window resize if letterboxing is enabled + * Bug 31562: Fix circuit display for error pages + * Bug 31575: Firefox is phoning home during start-up + * Bug 31491: Clean up the old meek http helper browser profiles + * Bug 26345: Hide tracking protection UI + * Bug 31601: Disable recommended extensions again + * Bug 31604: Don't show Firefox Home when opening new tabs + * Bug 31457: disable per-installation profiles + * Bug 28822: Re-implement desktop onboarding for ESR 68 + * Bug 25483: Provide Snowflake based on Pion for Windows, macOS, and Linux + * Windows + * Bug 30800: ftp:// on Windows can be used to leak the system time zone + * OS X + * Bug 30126: Make Tor Browser on macOS compatible with Apple's notarization + * Bug 31702: Backport Mozilla's bug 1578075 + * Linux + * Bug 31646: Update abicheck to require newer libstdc++.so.6 + * Bug 31380: Snowflake does not start on older Linux systems + * Android + * Update Tor to 0.4.1.5 + * Bug 31192: Support x86_64 target on Android + * Bug 30380: Cancel dormant by startup + * Bug 30943: Show version number on mobile + * Bug 31720: Enable website suggestions in address bar + * Build System + * All platforms + * Bug 31621: Fix node bug that makes large writes to stdout fail + * Bug 27493: Clean up mozconfig options + * Bug 31308: Sync mozconfig files used in tor-browser over to tor-browser-build for esr68 + * Windows + * Bug 30384: Use 64bit containers to build 32bit Windows Tor Browser + * Bug 31538: Windows bundles based on ESR 68 are not built reproducibly + * Bug 31584: Clean up mingw-w64 project + * Bug 31596: Bump mingw-w64 version to pick up fix for #31567 + * Bug 39187: Bump NSIS version to 3.04 + * Bug 31732: Windows nightly builds are busted due to mingw-w64 commit bump + * Linux + * Bug 31448: gold and lld break linking 32bit Linux bundles + * Bug 31618: linux32 builds of Tor Browser 9.0a6 are not matching + * Bug 31450: Use still GCC for our ASan builds + Tor Browser 8.5.6 -- September 9 2019 * Android * Update Torbutton to 2.1.14 diff --git a/projects/tor-launcher/config b/projects/tor-launcher/config index 9c85b4c..6b9a3cf 100644 --- a/projects/tor-launcher/config +++ b/projects/tor-launcher/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 0.2.19.3 +version: 0.2.19.4 git_url: https://git.torproject.org/tor-launcher.git git_hash: '[% c("version") %]' gpg_keyring: torbutton.gpg diff --git a/projects/tor/config b/projects/tor/config index 9a735c2..7bec267 100644 --- a/projects/tor/config +++ b/projects/tor/config @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -version: 0.4.1.5 +version: 0.4.2.1-alpha git_hash: 'tor-[% c("version") %]' git_url: https://git.torproject.org/tor.git git_submodule: 1 diff --git a/rbm.conf b/rbm.conf index 008fab7..2fe2391 100644 --- a/rbm.conf +++ b/rbm.conf @@ -24,10 +24,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '9.0a6' - torbrowser_build: 'build4' + torbrowser_version: '9.0a7' + torbrowser_build: 'build1' torbrowser_incremental_from: - - 9.0a4 + - 9.0a6 project_name: tor-browser multi_lingual: 0 build_mar: 1

1 0

[translation/tbmanual-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot
by translation＠torproject.org 28 Sep '19

28 Sep '19

commit 1cd8dcd88abee8652d74ac764b38535f7affb170 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 27 21:50:17 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot --- contents+es.po | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/contents+es.po b/contents+es.po index 47e968a6e..68ded1c8d 100644 --- a/contents+es.po +++ b/contents+es.po @@ -1062,6 +1062,14 @@ msgid "" "[FAQ](https://www.torproject.org/docs/faq#EntryGuards) and [Support " "Portal](https://support.torproject.org/tbb/tbb-2/)." msgstr "" +"En el circuito, el nodo de entrada o Guarda es el primer nodo, y es " +"aleatoria y automáticamente seleccionado por Tor. Pero es diferente de los " +"otros nodos en el circuito. A los efectos de evitar los ataques que tratan " +"de trazar un perfil, el nodo Guarda cambia solamente cada 2-3 meses, a " +"diferencia de los otros nodos, que cambian con cada nuevo dominio. Para más " +"información acerca de Guardas, consulta las <a " +"href=\"/es/docs/faq#EntryGuards\">Preguntas Más Frecuentes</a> y el <a " +"href=\"https://support.torproject.org/es/tbb/tbb-2/\">Portal de Soporte</a>." #: https//tb-manual.torproject.org/managing-identities/ #: (content/managing-identities/contents+en.lrtopic.body) @@ -1113,6 +1121,9 @@ msgid "" "* See the [Secure Connections](/secure-connections) page for important " "information on how to secure your connection when logging in." msgstr "" +"* Mira la página [Conexiones seguras](/es/secure-connections) para conocer " +"información importante sobre como protegerte cuando inicias sesión en otras " +"páginas." #: https//tb-manual.torproject.org/managing-identities/ #: (content/managing-identities/contents+en.lrtopic.body)

1 0

[translation/tbmanual-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot
by translation＠torproject.org 28 Sep '19

28 Sep '19

commit 35823705acd5ef7b9897d05b59b40770bd2e53bd Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 27 21:20:21 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot --- contents+es.po | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/contents+es.po b/contents+es.po index 0572145ce..47e968a6e 100644 --- a/contents+es.po +++ b/contents+es.po @@ -866,6 +866,12 @@ msgid "" "transports”. See the [Pluggable Transports](/en-US/transports) page for more" " information on the types of transport that are currently available." msgstr "" +"El acceso directo a la red Tor a veces puede estar bloqueado por tu " +"Proveedor de Servicios de Internet (ISP) o por un gobierno. El Navegador Tor" +" incluye algunas herramientas de evasión para evitar estos bloqueos. Estas " +"herramientas se llaman \"transportes conectables\". Lee la página <a " +"href=\"/es/transports\">Transportes Conectables</a> para más información " +"sobre los tipos de transporte que están disponibles actualmente." #: https//tb-manual.torproject.org/circumvention/ #: (content/circumvention/contents+en.lrtopic.body) @@ -928,6 +934,10 @@ msgid "" "way (for more details, see the [Pluggable Transports](/en-US/transports) " "page), and their effectiveness depends on your individual circumstances." msgstr "" +"Cada uno de los transportes listados en el menú de arranque de Tor funciona " +"de forma diferente (para más detalles, lee la página <a " +"href=\"/es/transports\">Transportes conectables</a>) y la efectividad de " +"cada uno depende de tu situación." #: https//tb-manual.torproject.org/circumvention/ #: (content/circumvention/contents+en.lrtopic.body) @@ -935,6 +945,9 @@ msgid "" "If you are trying to circumvent a blocked connection for the first time, you" " should try the different transports: obfs4, fte, and meek-azure." msgstr "" +"Si es la primera vez que intentas eludir una conexión bloqueada, has de " +"probar con los distintos transportes que hay disponibles: obfs4, fte y meek-" +"azure." #: https//tb-manual.torproject.org/circumvention/ #: (content/circumvention/contents+en.lrtopic.body) @@ -943,6 +956,10 @@ msgid "" "need to enter bridge addresses manually. Read the [Bridges](/en-US/bridges/)" " section to learn what bridges are and how to obtain them." msgstr "" +"Si pruebas todas estas opciones y no consigues conectar con ninguna de " +"ellas, necesitarás introducir direcciones de puentes de red manualmente. Lee" +" la sección <a href=\"/es/bridges/\">Puentes</a> para saber qué son los " +"repetidores puente y cómo obtenerlos." #: https//tb-manual.torproject.org/managing-identities/ #: (content/managing-identities/contents+en.lrtopic.title)

1 0

[translation/tbmanual-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot
by translation＠torproject.org 28 Sep '19

28 Sep '19

commit c8da1c9d1acaf9864a97c9c9cfa592d17b6743b3 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 27 20:50:21 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot --- contents+es.po | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/contents+es.po b/contents+es.po index 5f7b66cc7..0572145ce 100644 --- a/contents+es.po +++ b/contents+es.po @@ -4,6 +4,7 @@ # erinm, 2019 # Zuhualime Akoochimoya, 2019 # Emma Peel, 2019 +# dfiguera <dfb(a)fastmail.com>, 2019 # msgid "" msgstr "" @@ -11,7 +12,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2019-09-05 17:40+CET\n" "PO-Revision-Date: 2018-11-14 12:31+0000\n" -"Last-Translator: Emma Peel, 2019\n" +"Last-Translator: dfiguera <dfb(a)fastmail.com>, 2019\n" "Language-Team: Spanish (https://www.transifex.com/otf/teams/1519/es/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -525,6 +526,13 @@ msgid "" "so an adversary cannot identify them easily. Using bridges in combination " "with pluggable transports helps to disguise the fact that you are using Tor." msgstr "" +"La mayoría de los [transportes conectables](/transports), como obfs3 y obfs4" +" requieren del uso de repetidores \"puente\". Al igual que los repetidores " +"de Tor normales, los puentes son operados por voluntarios/as. Sin embargo, " +"dichos puentes no están listados públicamente, como sí lo entán los " +"repetidores normales, para que un adversario no los pueda identificar " +"fácilmente. Usar puentes combinándolos con transportes conectables ayuda a " +"camuflar el hecho de que estás usando Tor." #: https//tb-manual.torproject.org/bridges/ #: (content/bridges/contents+en.lrtopic.body)

1 0

[tor-browser/tor-browser-68.1.0esr-9.0-2] fixup! Bug 25741 - TBA: Add mobile-override of 000-tor-browser prefs
by gk＠torproject.org 28 Sep '19

28 Sep '19

commit 8fe3191e67d007cf35969d888453096bd823af76 Author: Matthew Finkel <Matthew.Finkel(a)gmail.com> Date: Thu Sep 26 01:13:52 2019 +0000 fixup! Bug 25741 - TBA: Add mobile-override of 000-tor-browser prefs --- mobile/android/app/000-tor-browser-android.js | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/mobile/android/app/000-tor-browser-android.js b/mobile/android/app/000-tor-browser-android.js index 2410706bb5f5..7fdf796e5caf 100644 --- a/mobile/android/app/000-tor-browser-android.js +++ b/mobile/android/app/000-tor-browser-android.js @@ -23,7 +23,6 @@ pref("webchannel.allowObject.urlWhitelist", ""); // Disable browser auto updaters pref("app.update.auto", false); -pref("app.update.enabled", false); pref("browser.startup.homepage_override.mstone", "ignore"); // Clear data on quit @@ -39,10 +38,6 @@ pref("privacy.clearOnShutdown.siteSettings",true); // Disable Control media casting & mirroring features pref("browser.casting.enabled", false); -pref("browser.mirroring.enabled", false); - -// Disable autoplay -pref("media.autoplay.enabled", false); // controls if we want camera support pref("device.camera.enabled", false); @@ -62,3 +57,7 @@ pref("media.hls.enabled", false); // Inherit locale from the OS, used for multi-locale builds pref("intl.locale.requested", ""); + +// Disable WebAuthn. It requires Google Play Services, so it isn't +// available, but avoid any potential problems. +pref("security.webauth.webauthn_enable_android_fido2", false);

1 0

[tor-browser/tor-browser-68.1.0esr-9.0-2] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 28 Sep '19

28 Sep '19

commit 726047a459acf9d8c26fcfdd72584f0196dd60ce Author: Matthew Finkel <Matthew.Finkel(a)gmail.com> Date: Fri Sep 27 19:37:42 2019 +0000 fixup! TB4: Tor Browser's Firefox preference overrides. Bug 15563 - Disable ServiceWorkers on all platforms --- browser/app/profile/000-tor-browser.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 09386d32a12c..1b936a3beb3d 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -119,6 +119,9 @@ pref("browser.pocket.api", ""); pref("browser.pocket.site", ""); pref("network.http.referer.hideOnionSource", true); +// Disable ServiceWorkers by default +pref("dom.serviceWorkers.enabled", false); + // Fingerprinting pref("webgl.disable-extensions", true); pref("webgl.disable-fail-if-major-performance-caveat", true);

1 0

[tor-browser-build/master] Bug 29187: Bump NSIS to 3.04
by boklm＠torproject.org 28 Sep '19

28 Sep '19

commit 936f5d7ad170e4d0dddc141906f006a6273196c8 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jan 28 09:24:01 2019 +0000 Bug 29187: Bump NSIS to 3.04 --- projects/nsis/config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/nsis/config b/projects/nsis/config index 81273ab..0e6f7ad 100644 --- a/projects/nsis/config +++ b/projects/nsis/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 3.03 +version: 3.04 filename: 'nsis-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' var: container: @@ -16,7 +16,7 @@ input_files: - project: container-image - filename: 'nsis-[% c("version") %].tar.bz2' URL: 'https://downloads.sourceforge.net/nsis/nsis-[% c("version") %]-src.tar.bz2' - sha256sum: abae7f4488bc6de7a4dd760d5f0e7cd3aad7747d4d7cd85786697c8991695eaa + sha256sum: 609536046c50f35cfd909dd7df2ab38f2e835d0da3c1048aa0d48c59c5a4f4f5 - filename: no-insert-timestamp.patch - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]'

1 0

[gettor/master] Fix script
by hiro＠torproject.org 28 Sep '19

28 Sep '19

commit eff3cc36781d0c140ee9220c9b3465ce26cf9b99 Author: hiro <hiro(a)torproject.org> Date: Fri Sep 27 21:50:35 2019 +0200 Fix script --- bin/gettor_check | 1 + scripts/check_service | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/bin/gettor_check b/bin/gettor_check index 93ff1d9..4c9cca6 100755 --- a/bin/gettor_check +++ b/bin/gettor_check @@ -22,3 +22,4 @@ if test $status -ne 0 then /home/gettor/gettor/bin/gettor_service start fi +deactivate diff --git a/scripts/check_service b/scripts/check_service index acc3640..ed7f6a6 100644 --- a/scripts/check_service +++ b/scripts/check_service @@ -111,7 +111,7 @@ if __name__ == "__main__": status_file.write("CRITICAL: %s" % message) sys.exit(status) - time.sleep(180) + time.sleep(600) try: status, message = test_email_from_gmail(password)

1 0

[tor-browser/tor-browser-68.1.0esr-9.0-2] Update Torbutton to latest master
by gk＠torproject.org 28 Sep '19

28 Sep '19

commit 13e5b02421dd03a5625091847608dd832466d98e Author: Georg Koppen <gk(a)torproject.org> Date: Fri Sep 27 19:29:49 2019 +0000 Update Torbutton to latest master --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index 2abe720e3f1d..a85133e2dc52 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit 2abe720e3f1dbe1b49b41fe78719f318407babd0 +Subproject commit a85133e2dc52c707f936857402d4753d961c30f9

1 0

[gettor/master] Fix script
by hiro＠torproject.org 28 Sep '19

28 Sep '19

commit efa32fa132e2d4069e0be982b7c723a341867fce Author: hiro <hiro(a)torproject.org> Date: Fri Sep 27 21:29:53 2019 +0200 Fix script --- scripts/update_files | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/update_files b/scripts/update_files index a7e5918..0ce81b2 100755 --- a/scripts/update_files +++ b/scripts/update_files @@ -40,7 +40,7 @@ for row in $( wget $r git add . git commit -m '[dist ci] commit from CI runner - update with new torbrowser downloads' - diffs=$(git diff origin releases) + diffs=$(git diff origin/releases) if [ -z "$diffs" ]; then echo "No new releases" else @@ -48,7 +48,7 @@ for row in $( fi git checkout torbrowser-releases git merge releases - diffs=$(git diff github torbrowser-releases) + diffs=$(git diff github/torbrowser-releases) if [ -z "$diffs" ]; then echo "No new releases" else

1 0