- tor-commits - lists.torproject.org

[tor-browser] branch tor-browser-102.4.0esr-12.0-2 updated: fixup! Firefox preference overrides.
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.4.0esr-12.0-2 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.4.0esr-12.0-2 by this push: new e2c53373c56c fixup! Firefox preference overrides. e2c53373c56c is described below commit e2c53373c56c93b1fde33512762f790676c75880 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Wed Oct 26 21:18:43 2022 +0000 fixup! Firefox preference overrides. Bug 27258: font whitelist means we don't have to set gfx.downloadable_fonts.fallback_delay --- browser/app/profile/001-base-profile.js | 1 - 1 file changed, 1 deletion(-) diff --git a/browser/app/profile/001-base-profile.js b/browser/app/profile/001-base-profile.js index 3f93614a7bbb..0d344b55eca8 100644 --- a/browser/app/profile/001-base-profile.js +++ b/browser/app/profile/001-base-profile.js @@ -202,7 +202,6 @@ pref("dom.push.enabled", false); // Fingerprinting pref("webgl.disable-fail-if-major-performance-caveat", true); pref("webgl.enable-webgl2", false); -pref("gfx.downloadable_fonts.fallback_delay", -1); pref("browser.startup.homepage_override.buildID", "20100101"); pref("browser.link.open_newwindow.restriction", 0); // Bug 9881: Open popups in new tabs (to avoid fullscreen popups) // Set video VP9 to 0 for everyone (bug 22548) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated: changelog: Add 0.4.7.11 stable
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new a7a90a3f11 changelog: Add 0.4.7.11 stable a7a90a3f11 is described below commit a7a90a3f11dc415ac5d86a32877c16685fbe68c2 Author: David Goulet <dgoulet(a)torproject.org> AuthorDate: Thu Nov 10 10:29:02 2022 -0500 changelog: Add 0.4.7.11 stable Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- ChangeLog | 124 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 124 insertions(+) diff --git a/ChangeLog b/ChangeLog index 4d41ddd4a7..ed3875a629 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,127 @@ +Changes in version 0.4.7.11 - 2022-11-10 + This version contains several major fixes aimed at helping defend against + network denial of service. It is also extending drastically the MetricsPort + for relays to help us gather more internal data to investigate performance + and attacks. + + We strongly recommend to upgrade to this version especially for Exit relays + in order to help the network defend against this ongoing DDoS. + + o Directory authority changes (dizum, Faravahar): + - Change dizum IP address. Closes ticket 40687. + - Remove Faravahar until its operator, Sina, set it back up online + outside of Team Cymru network. Closes ticket 40688. + + o Major bugfixes (geoip data): + - IPFire informed us on August 12th that databases generated after + (including) August 10th did not have proper ARIN network + allocations. We are updating the database to use the one generated + on August 9th, 2022. Fixes bug 40658; bugfix on 0.4.5.13. + + o Major bugfixes (onion service): + - Set a much higher circuit build timeout for opened client rendezvous + circuit. Before this, tor would time them out very quickly leading to + unnecessary retries meaning more load on the network. Fixes bug 40694; + bugfix on 0.3.5.1-alpha. + + o Major bugfixes (OSX): + - Fix coarse-time computation on Apple platforms (like Mac M1) where + the Mach absolute time ticks do not correspond directly to + nanoseconds. Previously, we computed our shift value wrong, which + led us to give incorrect timing results. Fixes bug 40684; bugfix + on 0.3.3.1-alpha. + + o Major bugfixes (relay): + - Improve security of our DNS cache by randomly clipping the TTL + value. TROVE-2021-009. Fixes bug 40674; bugfix on 0.3.5.1-alpha. + + o Minor feature (Mac and iOS build): + - Change how combine_libs works on Darwin like platforms to make + sure we don't include any `__.SYMDEF` and `__.SYMDEF SORTED` + symbols on the archive before we repack and run ${RANLIB} on the + archive. This fixes a build issue with recent Xcode versions on + Mac Silicon and iOS. Closes ticket 40683. + + o Minor feature (metrics): + - Add various congestion control counters to the MetricsPort. Closes + ticket 40708. + + o Minor feature (performance): + - Bump the maximum amount of CPU that can be used from 16 to 128. Note + that NumCPUs torrc option overrides this hardcoded maximum. Fixes bug + 40703; bugfix on 0.3.5.1-alpha. + + o Minor feature (relay): + - Make an hardcoded value for the maximum of per CPU tasks into a + consensus parameter. + - Two new consensus parameters are added to control the wait time in + queue of the onionskins. One of them is the torrc + MaxOnionQueueDelay options which supersedes the consensus + parameter. Closes ticket 40704. + + o Minor feature (relay, DoS): + - Apply circuit creation anti-DoS defenses if the outbound circuit + max cell queue size is reached too many times. This introduces two + new consensus parameters to control the queue size limit and + number of times allowed to go over that limit. Closes ticket 40680. + + o Minor feature (relay, metrics): + - Add DoS defenses counter to MetricsPort. + - Add congestion control RTT reset counter to MetricsPort. + - Add counters to the MetricsPort how many connections, per type, + are currently opened and how many were created. + - Add relay flags from the consensus to the MetricsPort. + - Add total number of opened circuits to MetricsPort. + - Add total number of streams seen by an Exit to the MetricsPort. + - Add traffic stats as in number of read/written bytes in total. + - Related to ticket 40194. + + o Minor features (fallbackdir): + - Regenerate fallback directories generated on November 10, 2022. + + o Minor features (geoip data): + - Update the geoip files to match the IPFire Location Database, as + retrieved on 2022/11/10. + + o Minor bugfixes (authorities, sandbox): + - Allow to write file my-consensus-<flavor-name> to disk when + sandbox is activated. Fixes bug 40663; bugfix on 0.3.5.1-alpha. + + o Minor bugfixes (dirauth): + - Directory authorities stop voting a consensus "Measured" weight + for relays with the Authority flag. Now these relays will be + considered unmeasured, which should reserve their bandwidth for + their dir auth role and minimize distractions from other roles. In + place of the "Measured" weight, they now include a + "MeasuredButAuthority" weight (not used by anything) so the + bandwidth authority's opinion on this relay can be recorded for + posterity. Lastly, remove the AuthDirDontVoteOnDirAuthBandwidth + torrc option which never worked right. Fixes bugs 40698 and 40700; + bugfix on 0.4.7.2-alpha. + + o Minor bugfixes (onion service client): + - A collapsing onion service circuit should be seen as an + "unreachable" error so it can be retried. Fixes bug 40692; bugfix + on 0.3.5.1-alpha. + + o Minor bugfixes (onion service): + - Make the service retry a rendezvous if the circuit is being + repurposed for measurements. Fixes bug 40696; bugfix + on 0.3.5.1-alpha. + + o Minor bugfixes (relay overload statistics): + - Count total create cells vs dropped create cells properly, when + assessing if our fraction of dropped cells is too high. We only + count non-client circuits in the denominator, but we would include + client circuits in the numerator, leading to surprising log lines + claiming that we had dropped more than 100% of incoming create + cells. Fixes bug 40673; bugfix on 0.4.7.1-alpha. + + o Code simplification and refactoring (bridges): + - Remove unused code related to ExtPort connection ID. Fixes bug + 40648; bugfix on 0.3.5.1-alpha. + + Changes in version 0.4.7.10 - 2022-08-12 This version updates the geoip cache that we generate from IPFire location database to use the August 9th, 2022 one. Everyone MUST update to this -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[pluggable-transports/snowflake-webext] branch main updated (ea9285f -> e050640)
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. cohosh pushed a change to branch main in repository pluggable-transports/snowflake-webext. from ea9285f Update translations for sv fix new b472999 refactor: remove unnecessary checks in `ProxyPair.flush()` new 5f50e52 refactor: remove some dead code new 0233e36 refactor: mark a method as static new 369e06b refactor: remove unnecessary property new 64c66d2 refactor: rename a var new e050640 refactor: add some JSDocs The 6 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: proxypair.js | 26 +++++++++----------------- snowflake.js | 4 ++-- 2 files changed, 11 insertions(+), 19 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 6

[tor] branch release-0.4.7 updated (1885fa4d36 -> af4fff5ec6)
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch release-0.4.7 in repository tor. from 1885fa4d36 Merge branch 'maint-0.4.7' into release-0.4.7 new cca19a4099 version: Bump version to 0.4.7.11-dev new af4fff5ec6 Merge branch 'maint-0.4.7' into release-0.4.7 The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 1

[tor] branch maint-0.4.7 updated (ffcb8a76af -> cca19a4099)
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch maint-0.4.7 in repository tor. from ffcb8a76af version: Bump version to 0.4.7.11 new cca19a4099 version: Bump version to 0.4.7.11-dev The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated: version: Bump version to 0.4.7.11-dev
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new cca19a4099 version: Bump version to 0.4.7.11-dev new 30e41ce9ad Merge branch 'maint-0.4.7' cca19a4099 is described below commit cca19a40991f1b6df7586b5c9f5491989ee54bca Author: Tor CI Release <no-email(a)torproject.org> AuthorDate: Thu Nov 10 14:58:26 2022 +0000 version: Bump version to 0.4.7.11-dev --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index 8deee3f0ef..2fd3257d94 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.7.11]) +AC_INIT([tor],[0.4.7.11-dev]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -18,7 +18,7 @@ AC_DEFINE_UNQUOTED([CONFIG_FLAGS], ["$configure_flags"], [Flags passed to config # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2022-11-10"], # for 0.4.7.11 +AC_DEFINE(APPROX_RELEASE_DATE, ["2022-11-10"], # for 0.4.7.11-dev [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 49082e21ad..8e015baf5c 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.7.11" +!define VERSION "0.4.7.11-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 4a408e3bb8..ef37d56dc3 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.7.11" +#define VERSION "0.4.7.11-dev" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] annotated tag tor-0.4.7.11 created (now 98d8be4420)
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to annotated tag tor-0.4.7.11 in repository tor. at 98d8be4420 (tag) tagging 1885fa4d36ea26c1e6e42a776cab29a65a355691 (commit) replaces tor-0.4.7.10 by David Goulet on Thu Nov 10 10:16:18 2022 -0500 - Log ----------------------------------------------------------------- Tor 0.4.7.11 -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEEt0QX7d8irJ+ekPSRQuhqKhH0jTYFAmNtFcYACgkQQuhqKhH0 jTal1wf/ZD9B4WV24ag71hJLmNH1Bul6qmegvtzpPIWlF5VXOk8Z5TZljB61ooP/ +ER5PckC98pmdh5NZbLBiZUJF3P6+Btve+QkACOCwaJS5c1F7rsYWNXsA0SxO8kK 5SNwBEOaqEe7tnDqPOHcCP72ALxxeE/Kr2nZMWuNn53zuVNPsITu0b7U6cdB+kXV EoWBqY6ZHi0/7QunFIPYuI+RZeUsmzaSw3HFxM8Op6TkuUZed5Wnm5DYTI+oKvGV NgGFDUjyt5wW386NInCt+id3dZFh35lMxAIZMcBC6vw5inpJo5KXQp9fHETgUWEi 9dbrsIuh9CcgmbsUKWRif0vReAk6og== =erFr -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch release-0.4.7 updated (4b28cf7941 -> 1885fa4d36)
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch release-0.4.7 in repository tor. from 4b28cf7941 Merge branch 'maint-0.4.7' into release-0.4.7 new e39be4a14f Update geoip files to match ipfire location db, 2022/11/10. new 58bd4e0899 fallbackdir: Update list generated on November 10, 2022 new 776c3adeb4 Merge branch 'maint-0.4.7' into release-0.4.7 new f5e5ae7300 release: ChangeLog and ReleaseNotes for 0.4.7.11 new ffcb8a76af version: Bump version to 0.4.7.11 new 1885fa4d36 Merge branch 'maint-0.4.7' into release-0.4.7 The 6 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: ChangeLog | 124 + ReleaseNotes | 124 + changes/bug40673 | 7 - changes/bug40684 | 6 - changes/bug40698 | 11 - changes/geoip-2022-08-12 | 5 - changes/ticket40194 | 9 - changes/ticket40648 | 3 - changes/ticket40663 | 3 - changes/ticket40674 | 3 - changes/ticket40680 | 6 - changes/ticket40683 | 6 - changes/ticket40687 | 2 - changes/ticket40688 | 3 - changes/ticket40692 | 3 - changes/ticket40694 | 5 - changes/ticket40696 | 3 - changes/ticket40703 | 4 - changes/ticket40704 | 6 - changes/ticket40708 | 3 - configure.ac | 4 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/app/config/fallback_dirs.inc | 971 ++- src/config/geoip | 14896 ++++++++++++++++++++-------------- src/config/geoip6 | 9140 ++++++++++++++------- src/win32/orconfig.h | 2 +- 26 files changed, 15608 insertions(+), 9743 deletions(-) delete mode 100644 changes/bug40673 delete mode 100644 changes/bug40684 delete mode 100644 changes/bug40698 delete mode 100644 changes/geoip-2022-08-12 delete mode 100644 changes/ticket40194 delete mode 100644 changes/ticket40648 delete mode 100644 changes/ticket40663 delete mode 100644 changes/ticket40674 delete mode 100644 changes/ticket40680 delete mode 100644 changes/ticket40683 delete mode 100644 changes/ticket40687 delete mode 100644 changes/ticket40688 delete mode 100644 changes/ticket40692 delete mode 100644 changes/ticket40694 delete mode 100644 changes/ticket40696 delete mode 100644 changes/ticket40703 delete mode 100644 changes/ticket40704 delete mode 100644 changes/ticket40708 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 3

[tor] branch maint-0.4.7 updated (e94c27c0ab -> ffcb8a76af)
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch maint-0.4.7 in repository tor. from e94c27c0ab metrics: Split cc with counters and gauges new e39be4a14f Update geoip files to match ipfire location db, 2022/11/10. new 58bd4e0899 fallbackdir: Update list generated on November 10, 2022 new ffcb8a76af version: Bump version to 0.4.7.11 The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/fallbackdirs-2022-11-10 | 2 + changes/{geoip-2022-08-11 => geoip-2022-11-10} | 2 +- configure.ac | 4 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/app/config/fallback_dirs.inc | 971 +- src/config/geoip | 14896 +++++++++++++---------- src/config/geoip6 | 9140 +++++++++----- src/win32/orconfig.h | 2 +- 8 files changed, 15363 insertions(+), 9656 deletions(-) create mode 100644 changes/fallbackdirs-2022-11-10 copy changes/{geoip-2022-08-11 => geoip-2022-11-10} (74%) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated (b5afc7d62a -> a2a5b51f2b)
by gitolite role 10 Nov '22

10 Nov '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from b5afc7d62a Merge branch 'maint-0.4.7' new e39be4a14f Update geoip files to match ipfire location db, 2022/11/10. new 58bd4e0899 fallbackdir: Update list generated on November 10, 2022 new e14c4fe771 Merge branch 'maint-0.4.7' new ffcb8a76af version: Bump version to 0.4.7.11 new a2a5b51f2b Merge branch 'maint-0.4.7' The 5 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/fallbackdirs-2022-11-10 | 2 + changes/{geoip-2022-08-11 => geoip-2022-11-10} | 2 +- src/app/config/fallback_dirs.inc | 971 +- src/config/geoip | 14896 +++++++++++++---------- src/config/geoip6 | 9140 +++++++++----- 5 files changed, 15359 insertions(+), 9652 deletions(-) create mode 100644 changes/fallbackdirs-2022-11-10 copy changes/{geoip-2022-08-11 => geoip-2022-11-10} (74%) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 5