- tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.0.7-build1
by richard (＠richard) 01 Jun '23

01 Jun '23

richard pushed new tag tbb-12.0.7-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.0] Bug 40859: Prepare stable release 12.0.7
by richard (＠richard) 01 Jun '23

01 Jun '23

richard pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build Commits: a4c88083 by Richard Pospesel at 2023-05-31T18:32:49+00:00 Bug 40859: Prepare stable release 12.0.7 - - - - - 9 changed files: - projects/browser/Bundle-Data/Docs/ChangeLog.txt - projects/browser/allowed_addons.json - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/manual/config - projects/openssl/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs/ChangeLog.txt ===================================== @@ -1,3 +1,52 @@ +Tor Browser 12.0.7 - May 31 2023 + * All Platforms + * Updated Translations + * Updated NoScript to 11.4.22 + * Updated OpenSSL to 1.1.1u + * Bug 41764: TTP-02-004 OOS: No user-activation required to download files (Low) [tor-browser] + * Bug 41794: Rebase Tor Browser and Base Browser stable to 102.12esr [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.12esr + * Bug 41777: Internally shippped manual does not adapt to RTL languages (it always align to the left) [tor-browser] + * Android + * Updated GeckoView to 102.12esr + * Bug 41805: Backport Android-specific security fixes from Firefox 114 to ESR 102.12-based Tor Browser [tor-browser] + +Tor Browser 12.5a6 - May 22 2023 + * All Platforms + * Updated Translations + * Updated Go to 11.9.9 + * Bug 40860: Improve the transition from the old fontconfig file to the new one [tor-browser-build] + * Bug 41728: Pin bridges.torproject.org domains to Let's Encrypt's root cert public key [tor-browser] + * Bug 41738: Replace the patch to disable live reload with its preference [tor-browser] + * Bug 41757: Rebase Tor Browser Alpha to 102.11.0esr [tor-browser] + * Bug 41763: TTP-02-003 WP1: Data URI allows JS execution despite safest security level (Low) [tor-browser] + * Bug 41764: TTP-02-004 OOS: No user-activation required to download files (Low) [tor-browser] + * Bug 41775: Avoid re-defining some macros in nsUpdateDriver.cpp [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.11esr + * Bug 41607: Update "New Circuit" icon [tor-browser] + * Bug 41736: Customize the default CustomizableUI toolbar using CustomizableUI.jsm [tor-browser] + * Bug 41770: Keyboard navigation broken leaving the toolbar tor circuit button [tor-browser] + * Bug 41777: Internally shippped manual does not adapt to RTL languages (it always align to the left) [tor-browser] + * Windows + Linux + * Bug 41654: UpdateInfo jumped into Data [tor-browser] + * Linux + * Bug 41732: implement linux font whitelist as defense-in-depth [tor-browser] + * Bug 41776: System fonts are temporarily leaked on Linux after the browser is updated from 12.5a4 or earlier [tor-browser] + * Android + * Updated GeckoView to 102.11esr + * Build System + * All Platforms + * Bug 33953: Provide a way for easily updating Go dependencies of projects [tor-browser-build] + * Bug 40673: Avoid building each go module separately [tor-browser-build] + * Bug 40818: Enable wasm target for rust compiler [tor-browser-build] + * Bug 40841: Adapt signing scripts to new signing machines [tor-browser-build] + * Bug 40849: Move Go dependencies to the projects dependent on them, not as a standalone projects [tor-browser-build] + * Bug 40856: Unblock nightly builds [tor-browser-build] + * Windows + * Bug 40846: Temporarily disable Windows signing [tor-browser-build] + Tor Browser 12.0.6 - May 09 2023 * All Platforms * Updated Translations ===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 976883, + "average_daily_users": 973594, "categories": { "android": [ "experimental", @@ -221,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5607, - "bayesian_average": 4.559531365183289, - "count": 4987, - "text_count": 1578 + "average": 4.5606, + "bayesian_average": 4.559432842250225, + "count": 5014, + "text_count": 1582 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 24385 + "weekly_downloads": 24071 }, "notes": null }, @@ -337,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 258784, + "average_daily_users": 254357, "categories": { "android": [ "security-privacy" @@ -553,10 +553,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8166, - "bayesian_average": 4.811948101281903, - "count": 1336, - "text_count": 237 + "average": 4.8142, + "bayesian_average": 4.809547541054201, + "count": 1340, + "text_count": 238 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", "requires_payment": false, @@ -641,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3623 + "weekly_downloads": 3420 }, "notes": null }, @@ -657,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1128787, + "average_daily_users": 1107746, "categories": { "android": [ "security-privacy" @@ -669,7 +669,7 @@ "contributions_url": "https://paypal.me/SupportEFF?utm_content=product-page-contribute&utm_medium…", "created": "2014-05-01T18:23:16Z", "current_version": { - "id": 5520250, + "id": 5564707, "compatibility": { "firefox": { "min": "60.0", @@ -680,7 +680,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -691,22 +691,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "<ul><li>Added a note to the popup to explain that if you would like to log into websites with your Google account, you need to fully allow <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/361ac6552f690217a6c9f0…" rel=\"nofollow\">accounts.google.com</a></li><li>Added dark theme support to widget replacement placeholders</li><li>Fixed blocking service worker-initiated requests in Chrome</li><li>Fixed various site breakages</li><li>Added Hindi translations</li><li>Improved Traditional Chinese translations</li></ul>" + "en-US": "<ul><li>Expanded protection for \"cookieblocked\" (slider set to yellow) domains. These domains are allowed to load without access to cookies, as a compromise to avoid breaking websites. However, sometimes the same domain is used to serve both unobjectionable content as well as obnoxious fingerprinters that do not need cookies to track your browsing. Privacy Badger will now fully block these fingerprinters.</li><li>Disabled Google's Topics API by default. The Topics API replaces Federated Learning of Cohorts (FLoC).</li><li>You can now see where Privacy Badger observed tracking by a given domain by clicking on the domain name in the list of tracking domains on the options page</li><li>Fixed various site breakages</li><li>Added Vietnamese translations</li><li>Improved translations (Finnish, French, Hebrew, Persian, European Portuguese, Russian, Spanish)</li></ul>" }, - "reviewed": "2023-02-02T18:47:37Z", - "version": "2023.1.31", + "reviewed": "2023-05-16T10:58:52Z", + "version": "2023.5.10", "files": [ { - "id": 4064595, - "created": "2023-01-31T16:05:01Z", - "hash": "sha256:0082d8ffe7b25f370a313d9b899b0c1ba1669b21b3a11791fe5ecf031aeb6a6c", + "id": 4109050, + "created": "2023-05-10T19:28:15Z", + "hash": "sha256:8ff7650d1ce133894293d1a3e268bb24d300e77a1c25488ed17846e71d8b33e8", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 1834581, + "size": 1975567, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4064595/privacy_badger17-…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4109050/privacy_badger17-…", "permissions": [ "tabs", "http://*/*", @@ -1134,7 +1134,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-02-02T18:47:37Z", + "last_updated": "2023-05-16T10:58:52Z", "name": { "en-US": "Privacy Badger" }, @@ -1180,10 +1180,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8012, - "bayesian_average": 4.79841359051625, - "count": 2223, - "text_count": 426 + "average": 4.8019, + "bayesian_average": 4.7991176799749775, + "count": 2236, + "text_count": 428 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", "requires_payment": false, @@ -1207,7 +1207,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18076 + "weekly_downloads": 16871 }, "notes": null }, @@ -1223,7 +1223,7 @@ "picture_url": null } ], - "average_daily_users": 6319454, + "average_daily_users": 6290605, "categories": { "android": [ "security-privacy" @@ -1388,7 +1388,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-05-08T12:35:48Z", + "last_updated": "2023-05-30T13:20:46Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1533,10 +1533,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7808, - "bayesian_average": 4.780398687268275, - "count": 15366, - "text_count": 3994 + "average": 4.7807, + "bayesian_average": 4.78029998149622, + "count": 15480, + "text_count": 4023 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1598,7 +1598,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 131497 + "weekly_downloads": 129742 }, "notes": null }, @@ -1614,7 +1614,7 @@ "picture_url": null } ], - "average_daily_users": 167016, + "average_daily_users": 168553, "categories": { "android": [ "photos-media" @@ -1713,10 +1713,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4874, - "bayesian_average": 4.4822747330216925, - "count": 1114, - "text_count": 416 + "average": 4.4853, + "bayesian_average": 4.4801851669083215, + "count": 1119, + "text_count": 419 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/re…", "requires_payment": false, @@ -1738,7 +1738,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 411 + "weekly_downloads": 369 }, "notes": null }, @@ -1754,7 +1754,7 @@ "picture_url": null } ], - "average_daily_users": 88255, + "average_daily_users": 87582, "categories": { "android": [ "experimental", @@ -1867,9 +1867,9 @@ ], "promoted": null, "ratings": { - "average": 4.3684, - "bayesian_average": 4.354580970236878, - "count": 399, + "average": 4.37, + "bayesian_average": 4.356186612333998, + "count": 400, "text_count": 112 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/reviews/", @@ -1892,7 +1892,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 900 + "weekly_downloads": 1654 }, "notes": null }, @@ -1908,7 +1908,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 259842, + "average_daily_users": 259693, "categories": { "android": [ "photos-media", @@ -2127,10 +2127,10 @@ "category": "recommended" }, "ratings": { - "average": 4.6521, - "bayesian_average": 4.647356516825427, - "count": 1256, - "text_count": 241 + "average": 4.6514, + "bayesian_average": 4.646681076783187, + "count": 1268, + "text_count": 244 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2151,7 +2151,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 4089 + "weekly_downloads": 4107 }, "notes": null }, @@ -2174,7 +2174,7 @@ "picture_url": null } ], - "average_daily_users": 110772, + "average_daily_users": 111400, "categories": { "android": [ "other" @@ -2457,10 +2457,10 @@ "category": "recommended" }, "ratings": { - "average": 4.443, - "bayesian_average": 4.438340772354168, - "count": 1210, - "text_count": 322 + "average": 4.4415, + "bayesian_average": 4.436837247090715, + "count": 1214, + "text_count": 323 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2480,7 +2480,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 40 + "weekly_downloads": 50 }, "notes": null }, @@ -2496,7 +2496,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 313446, + "average_daily_users": 307454, "categories": { "android": [ "performance", @@ -2510,7 +2510,7 @@ "contributions_url": "https://www.paypal.com/donate/?hosted_button_id=9ERKTU5MBH4EW&utm_content=p…", "created": "2005-05-13T10:51:32Z", "current_version": { - "id": 5546627, + "id": 5566736, "compatibility": { "firefox": { "min": "59.0", @@ -2521,7 +2521,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5546627", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5566736", "is_strict_compatibility_enabled": false, "license": { "id": 13, @@ -2532,22 +2532,22 @@ "url": "http://www.gnu.org/licenses/gpl-2.0.html" }, "release_notes": { - "en-US": "v 11.4.21\n============================================================\nx Fixed mislabeled Tor Browser settings override option\nx [L10n] Updated mk" + "en-US": "v 11.4.22\n============================================================\nx [L10n] Updated uk\nx Consistently apply DEFAULT policy to top-level data: URLs" }, - "reviewed": "2023-04-04T12:01:03Z", - "version": "11.4.21", + "reviewed": "2023-05-18T09:07:59Z", + "version": "11.4.22", "files": [ { - "id": 4090970, - "created": "2023-03-30T09:39:24Z", - "hash": "sha256:0fd3b66a2780d03a5b3cd460216105f3df2b27c6d3a552c1769c5de48c9e2338", + "id": 4111078, + "created": "2023-05-15T08:32:54Z", + "hash": "sha256:46a84c85df4c6be11905388ad2b66aeb5a010ed615484112c8c1710ad13bc36e", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 951542, + "size": 948900, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4090970/noscript-11.4.21.…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4111078/noscript-11.4.22.…", "permissions": [ "contextMenus", "storage", @@ -2614,7 +2614,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-04-04T12:01:03Z", + "last_updated": "2023-05-21T21:36:00Z", "name": { "de": "NoScript", "el": "NoScript", @@ -2686,10 +2686,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4106, - "bayesian_average": 4.407881097196251, - "count": 2058, - "text_count": 799 + "average": 4.4061, + "bayesian_average": 4.403390290765897, + "count": 2071, + "text_count": 804 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2733,7 +2733,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7698 + "weekly_downloads": 7195 }, "notes": null }, @@ -2749,7 +2749,7 @@ "picture_url": null } ], - "average_daily_users": 150188, + "average_daily_users": 150677, "categories": { "android": [ "performance", @@ -2864,10 +2864,10 @@ "category": "recommended" }, "ratings": { - "average": 3.9071, - "bayesian_average": 3.902833394829747, - "count": 1130, - "text_count": 402 + "average": 3.9026, + "bayesian_average": 3.898323122758472, + "count": 1129, + "text_count": 401 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", "requires_payment": false, @@ -2886,7 +2886,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 2266 + "weekly_downloads": 1722 }, "notes": null } ===================================== projects/browser/config ===================================== @@ -100,9 +100,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4090970/noscript-11.4.21.… + - URL: https://addons.mozilla.org/firefox/downloads/file/4111078/noscript-11.4.22.… name: noscript - sha256sum: 0fd3b66a2780d03a5b3cd460216105f3df2b27c6d3a552c1769c5de48c9e2338 + sha256sum: 46a84c85df4c6be11905388ad2b66aeb5a010ed615484112c8c1710ad13bc36e - filename: 'gtk3-settings.ini' enable: '[% c("var/linux") %]' - project: hfsplus-tools ===================================== projects/firefox/config ===================================== @@ -12,7 +12,7 @@ container: use_container: 1 var: - firefox_platform_version: 102.11.0 + firefox_platform_version: 102.12.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_branch: '12.0-1' browser_build: 1 ===================================== projects/geckoview/config ===================================== @@ -12,7 +12,7 @@ container: use_container: 1 var: - geckoview_version: 102.11.0esr + geckoview_version: 102.12.0esr torbrowser_branch: 12.0-1 browser_build: 1 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 74065 +version: 79869 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -17,8 +17,8 @@ var: input_files: - project: container-image - - URL: 'https://people.torproject.org/~pierov/tbb_files/manual_[% c("version") %].zip' + - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip' name: manual - sha256sum: 788c2dc2bfacbc6961ce443c5639706cc23fbb7b7730ed7f71a26396511305be + sha256sum: ee4c6e4ce4998736ae44dc3e6f92875a481b9e03860517764ea9af6c2bba24e0 - filename: packagemanual.py name: package_script ===================================== projects/openssl/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.1.1t +version: 1.1.1u filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -31,4 +31,4 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - URL: 'https://www.openssl.org/source/openssl-[% c("version") %].tar.gz' - sha256sum: 8dee9b24bdb1dcbf0c3d1e9b02fb8f6bf22165e807f45adeb7c9677536859d3b + sha256sum: e2f8d84b523eecd06c7be7626830370300fbcc15386bf5142d72758f6963ebc6 ===================================== projects/translation/config ===================================== @@ -6,19 +6,19 @@ version: '[% c("abbrev") %]' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 97c76d5183b16b069e66feaaf10e00c1d2c7d9e0 + git_hash: 12b7ac4074f64be4d62c4a7e134244988941ca88 targets: nightly: git_hash: 'base-browser' base-browser-fluent: base-browser-fluent: '[% INCLUDE build %]' - git_hash: d473c4dd005325d1be40bae0f816974e195a972d + git_hash: 7a5fa6b283ac0a983250dfb3870fb1ed9d9ec1ad targets: nightly: git_hash: 'basebrowser-newidentityftl' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 267f3c208a323df636ed11e7143164956d3d9d9b + git_hash: 96ce5976d1c1752ee1d920df58e1755464b9d575 targets: nightly: git_hash: 'tor-browser' @@ -26,7 +26,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 0deec2a78dea0013e8c4eaec1d40ef5aac4e43b0 + git_hash: 12c25e54e3a80c22c3c5fd6ccbc00effd37fc538 targets: nightly: git_hash: 'fenix-torbrowserstringsxml' ===================================== rbm.conf ===================================== @@ -71,13 +71,14 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '12.0.6' + torbrowser_version: '12.0.7' torbrowser_build: 'build1' torbrowser_incremental_from: # Build incrementals also from 12.0.4 until we have a new certificate for # Windows installers. - 12.0.4 - 12.0.5 + - 12.0.6 build_mar: 1 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor] branch main updated (2697723cf1 -> e30fdc14b2)
by gitolite role 01 Jun '23

01 Jun '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 2697723cf1 scripts: Use latest geoip database instead of using location new c2c6c7a5e6 Update geoip files to match ipfire location db, 2023/06/01. new 5e2f6d5433 fallbackdir: Update list generated on June 01, 2023 new 8b46d1c6ca release: ChangeLog for 0.4.8.1-alpha new e30fdc14b2 version: Bump version to 0.4.8.1-alpha The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: ChangeLog | 171 + changes/aarch64_sandbox | 5 - changes/bsd_libc | 3 - changes/bug40431 | 4 - changes/bug40523 | 4 - changes/bug40563 | 8 - changes/bug40603 | 5 - changes/bug40612 | 5 - changes/bug40619 | 3 - changes/bug40620 | 3 - changes/bug40626 | 6 - changes/bug40639 | 5 - changes/bug40642 | 9 - changes/bug40644 | 8 - changes/bug40645 | 5 - changes/bug40673 | 7 - changes/bug40684 | 6 - changes/bug40698 | 11 - changes/bug40732 | 7 - changes/bug40751 | 3 - changes/fallbackdirs-2022-08-11 | 2 - changes/fallbackdirs-2022-11-10 | 2 - changes/fallbackdirs-2022-12-06 | 2 - changes/fallbackdirs-2023-01-12 | 2 - changes/faster_tests | 3 - changes/geoip-2022-08-11 | 3 - changes/geoip-2022-08-12 | 5 - changes/geoip-2022-11-10 | 3 - changes/geoip-2022-12-06 | 3 - changes/geoip-2023-01-12 | 3 - changes/ip_bind_address_no_port | 5 - changes/issue40597 | 4 - changes/issue40613 | 3 - changes/issue40630 | 3 - changes/log-quotes | 3 - changes/prop275 | 12 - changes/ticket33669 | 3 - changes/ticket40194 | 9 - changes/ticket40437 | 4 - changes/ticket40546 | 3 - changes/ticket40593 | 16 - changes/ticket40596 | 4 - changes/ticket40601 | 4 - changes/ticket40604 | 5 - changes/ticket40623 | 4 - changes/ticket40634 | 3 - changes/ticket40647 | 4 - changes/ticket40648 | 3 - changes/ticket40649 | 4 - changes/ticket40652 | 10 - changes/ticket40663 | 3 - changes/ticket40664 | 3 - changes/ticket40674 | 3 - changes/ticket40680 | 6 - changes/ticket40683 | 6 - changes/ticket40687 | 2 - changes/ticket40688 | 3 - changes/ticket40691 | 3 - changes/ticket40692 | 3 - changes/ticket40694 | 5 - changes/ticket40696 | 3 - changes/ticket40703 | 4 - changes/ticket40704 | 6 - changes/ticket40705 | 7 - changes/ticket40708 | 3 - changes/ticket40713 | 4 - changes/ticket40719 | 3 - changes/ticket40722 | 5 - changes/ticket40724 | 3 - changes/ticket40727 | 3 - changes/ticket40729 | 3 - changes/ticket40730 | 5 - changes/ticket40741 | 2 - changes/ticket40745 | 3 - changes/ticket40753 | 5 - changes/ticket40755 | 3 - changes/ticket40757 | 8 - changes/ticket40758 | 3 - changes/ticket40760 | 3 - changes/ticket40785 | 4 - changes/ticket40797 | 4 - changes/ticket40799 | 6 - configure.ac | 4 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/app/config/fallback_dirs.inc | 991 +- src/config/geoip | 22267 +++++++++++++++++------------- src/config/geoip6 | 24581 ++++++++++++++++++++++++---------- 87 files changed, 30762 insertions(+), 17622 deletions(-) delete mode 100644 changes/aarch64_sandbox delete mode 100644 changes/bsd_libc delete mode 100644 changes/bug40431 delete mode 100644 changes/bug40523 delete mode 100644 changes/bug40563 delete mode 100644 changes/bug40603 delete mode 100644 changes/bug40612 delete mode 100644 changes/bug40619 delete mode 100644 changes/bug40620 delete mode 100644 changes/bug40626 delete mode 100644 changes/bug40639 delete mode 100644 changes/bug40642 delete mode 100644 changes/bug40644 delete mode 100644 changes/bug40645 delete mode 100644 changes/bug40673 delete mode 100644 changes/bug40684 delete mode 100644 changes/bug40698 delete mode 100644 changes/bug40732 delete mode 100644 changes/bug40751 delete mode 100644 changes/fallbackdirs-2022-08-11 delete mode 100644 changes/fallbackdirs-2022-11-10 delete mode 100644 changes/fallbackdirs-2022-12-06 delete mode 100644 changes/fallbackdirs-2023-01-12 delete mode 100644 changes/faster_tests delete mode 100644 changes/geoip-2022-08-11 delete mode 100644 changes/geoip-2022-08-12 delete mode 100644 changes/geoip-2022-11-10 delete mode 100644 changes/geoip-2022-12-06 delete mode 100644 changes/geoip-2023-01-12 delete mode 100644 changes/ip_bind_address_no_port delete mode 100644 changes/issue40597 delete mode 100644 changes/issue40613 delete mode 100644 changes/issue40630 delete mode 100644 changes/log-quotes delete mode 100644 changes/prop275 delete mode 100644 changes/ticket33669 delete mode 100644 changes/ticket40194 delete mode 100644 changes/ticket40437 delete mode 100644 changes/ticket40546 delete mode 100644 changes/ticket40593 delete mode 100644 changes/ticket40596 delete mode 100644 changes/ticket40601 delete mode 100644 changes/ticket40604 delete mode 100644 changes/ticket40623 delete mode 100644 changes/ticket40634 delete mode 100644 changes/ticket40647 delete mode 100644 changes/ticket40648 delete mode 100644 changes/ticket40649 delete mode 100644 changes/ticket40652 delete mode 100644 changes/ticket40663 delete mode 100644 changes/ticket40664 delete mode 100644 changes/ticket40674 delete mode 100644 changes/ticket40680 delete mode 100644 changes/ticket40683 delete mode 100644 changes/ticket40687 delete mode 100644 changes/ticket40688 delete mode 100644 changes/ticket40691 delete mode 100644 changes/ticket40692 delete mode 100644 changes/ticket40694 delete mode 100644 changes/ticket40696 delete mode 100644 changes/ticket40703 delete mode 100644 changes/ticket40704 delete mode 100644 changes/ticket40705 delete mode 100644 changes/ticket40708 delete mode 100644 changes/ticket40713 delete mode 100644 changes/ticket40719 delete mode 100644 changes/ticket40722 delete mode 100644 changes/ticket40724 delete mode 100644 changes/ticket40727 delete mode 100644 changes/ticket40729 delete mode 100644 changes/ticket40730 delete mode 100644 changes/ticket40741 delete mode 100644 changes/ticket40745 delete mode 100644 changes/ticket40753 delete mode 100644 changes/ticket40755 delete mode 100644 changes/ticket40757 delete mode 100644 changes/ticket40758 delete mode 100644 changes/ticket40760 delete mode 100644 changes/ticket40785 delete mode 100644 changes/ticket40797 delete mode 100644 changes/ticket40799 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 4

[tor] branch main updated: scripts: Use latest geoip database instead of using location
by gitolite role 01 Jun '23

01 Jun '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new 2697723cf1 scripts: Use latest geoip database instead of using location 2697723cf1 is described below commit 2697723cf1485a070776a90d210f872770496ae9 Author: David Goulet <dgoulet(a)torproject.org> AuthorDate: Thu Jun 1 09:32:11 2023 -0400 scripts: Use latest geoip database instead of using location Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- scripts/maint/geoip/update_geoip.sh | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/scripts/maint/geoip/update_geoip.sh b/scripts/maint/geoip/update_geoip.sh index 743683ab62..3e6b016519 100755 --- a/scripts/maint/geoip/update_geoip.sh +++ b/scripts/maint/geoip/update_geoip.sh @@ -5,7 +5,15 @@ set -e DIR=$(cd "$(dirname "$0")" && pwd) TMP=$(mktemp -d) -location --quiet update +DB_PATH="/var/lib/location/database.db" + +# In case it exists as a dead symlink. +if [ -e "$DB_PATH" ]; then + unlink "$DB_PATH" +fi + +curl -o "$DB_PATH.xz" "https://location.ipfire.org/databases/1/location.db.xz" +xz -d "$DB_PATH.xz" location dump "$TMP/geoip-dump.txt" OLDDIR=$(pwd) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated: test: Really fix the mem leak from prior commit
by gitolite role 01 Jun '23

01 Jun '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new 7f5355826b test: Really fix the mem leak from prior commit 7f5355826b is described below commit 7f5355826b91083c5e12fe7fc4013580f27b7771 Author: David Goulet <dgoulet(a)torproject.org> AuthorDate: Thu Jun 1 09:07:43 2023 -0400 test: Really fix the mem leak from prior commit Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- src/test/test_crypto_slow.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/test/test_crypto_slow.c b/src/test/test_crypto_slow.c index 3c44b8ded8..52091f190c 100644 --- a/src/test/test_crypto_slow.c +++ b/src/test/test_crypto_slow.c @@ -710,7 +710,6 @@ test_crypto_equix(void *arg) tt_int_op(expected, OP_EQ, result); } - equix_free(solve_ctx); equix_free(verify_ctx); } } -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated: test: Fix a mem leak reported by Coverity
by gitolite role 01 Jun '23

01 Jun '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new faff592c3b test: Fix a mem leak reported by Coverity faff592c3b is described below commit faff592c3bc4c3bdebd8ac3c24bd23c50dc4c833 Author: David Goulet <dgoulet(a)torproject.org> AuthorDate: Thu Jun 1 08:35:08 2023 -0400 test: Fix a mem leak reported by Coverity Here is the report: *** CID 1531835: Resource leaks (RESOURCE_LEAK) /src/test/test_crypto_slow.c: 683 in test_crypto_equix() 677 678 /* Solve phase: Make sure the test vector matches */ 679 memset(&output, 0xa5, sizeof output); 680 equix_result result; 681 result = equix_solve(solve_ctx, challenge_literal, 682 challenge_len, &output); >>> CID 1531835: Resource leaks (RESOURCE_LEAK) >>> Variable "solve_ctx" going out of scope leaks the storage it points to. Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- src/test/test_crypto_slow.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/test/test_crypto_slow.c b/src/test/test_crypto_slow.c index 23bc7a852f..3c44b8ded8 100644 --- a/src/test/test_crypto_slow.c +++ b/src/test/test_crypto_slow.c @@ -680,6 +680,7 @@ test_crypto_equix(void *arg) equix_result result; result = equix_solve(solve_ctx, challenge_literal, challenge_len, &output); + equix_free(solve_ctx); tt_int_op(result, OP_EQ, EQUIX_OK); tt_int_op(output.count, OP_EQ, num_sols); tt_int_op(output.flags, OP_EQ, sol_flags); -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch release-0.4.7 updated (aef76beccc -> eeb1f8b0fd)
by gitolite role 31 May '23

31 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch release-0.4.7 in repository tor. from aef76beccc Merge branch 'maint-0.4.7' into release-0.4.7 new 3036bedf30 Update CI builds to Debian Bullseye, fix associated compatibility bugs new d77f1e7aea Merge branch 'tor-gitlab/mr/714' into maint-0.4.7 new 066da91521 changes: Add file for MR 714 new eeb1f8b0fd Merge branch 'maint-0.4.7' into release-0.4.7 The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: .gitlab-ci.yml | 21 ++++++++++++--------- changes/ticket40799 | 6 ++++++ src/lib/sandbox/sandbox.c | 7 ++++++- 3 files changed, 24 insertions(+), 10 deletions(-) create mode 100644 changes/ticket40799 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 1

[tor] branch maint-0.4.7 updated (33d5a7da9e -> 066da91521)
by gitolite role 31 May '23

31 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch maint-0.4.7 in repository tor. from 33d5a7da9e gitignore: Add tags file from ctags new 3036bedf30 Update CI builds to Debian Bullseye, fix associated compatibility bugs new d77f1e7aea Merge branch 'tor-gitlab/mr/714' into maint-0.4.7 new 066da91521 changes: Add file for MR 714 The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: .gitlab-ci.yml | 21 ++++++++++++--------- changes/ticket40799 | 6 ++++++ src/lib/sandbox/sandbox.c | 7 ++++++- 3 files changed, 24 insertions(+), 10 deletions(-) create mode 100644 changes/ticket40799 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated (925201c946 -> 97008526db)
by gitolite role 31 May '23

31 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 925201c946 Merge branch 'tor-gitlab/mr/713' new 3036bedf30 Update CI builds to Debian Bullseye, fix associated compatibility bugs new d77f1e7aea Merge branch 'tor-gitlab/mr/714' into maint-0.4.7 new 066da91521 changes: Add file for MR 714 new 97008526db Merge branch 'maint-0.4.7' The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: .gitlab-ci.yml | 21 ++++++++++++--------- changes/ticket40799 | 6 ++++++ src/lib/sandbox/sandbox.c | 7 ++++++- 3 files changed, 24 insertions(+), 10 deletions(-) create mode 100644 changes/ticket40799 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 4

[tor] branch main updated: tls: Disable a warning with LibreSSL >= 3.8.0
by gitolite role 31 May '23

31 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new 9850dc59c0 tls: Disable a warning with LibreSSL >= 3.8.0 new 925201c946 Merge branch 'tor-gitlab/mr/713' 9850dc59c0 is described below commit 9850dc59c0db5cbcadc314be8d324a992880fce1 Author: orbea <orbea(a)riseup.net> AuthorDate: Mon May 29 12:56:37 2023 -0700 tls: Disable a warning with LibreSSL >= 3.8.0 Skip a warning using EC_GFp_nist_method() which was removed in LibreSSL 3.8. Based on a patch from OpenBSD. https://github.com/openbsd/ports/commit/33fe251a08cb11f30ce6094a2e0759c3bb6… These functions are deprecated since OpenSSL 3.0. https://www.openssl.org/docs/man3.1/man3/EC_GFp_nist_method.html --- src/lib/tls/tortls_openssl.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/lib/tls/tortls_openssl.c b/src/lib/tls/tortls_openssl.c index 12260c09d3..c0a89ac272 100644 --- a/src/lib/tls/tortls_openssl.c +++ b/src/lib/tls/tortls_openssl.c @@ -340,8 +340,10 @@ tor_tls_init(void) SSL_load_error_strings(); #endif /* defined(OPENSSL_1_1_API) */ -#if (SIZEOF_VOID_P >= 8 && \ - OPENSSL_VERSION_NUMBER >= OPENSSL_V_SERIES(1,0,1)) +#if (SIZEOF_VOID_P >= 8 && \ + OPENSSL_VERSION_NUMBER >= OPENSSL_V_SERIES(1,0,1) && \ + (!defined(LIBRESSL_VERSION_NUMBER) || \ + LIBRESSL_VERSION_NUMBER < 0x3080000fL)) long version = tor_OpenSSL_version_num(); /* LCOV_EXCL_START : we can't test these lines on the same machine */ -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0