April 2019 - tor-packagers - lists.torproject.org

torbrowser package on NetBSD
by Thomas Klausner 27 May '19

27 May '19

Hi! I've updated the very outdated tor-browser package in pkgsrc (on NetBSD). I used the patches we have for firefox-60esr and one additional one (see later in this mail). I have a couple of questions. There are no tarballs. Please provide some! :) I used the git tag 'tor-browser-60.5.1esr-8.5-1-build2' but I'm not sure to which tor-browser version that corresponds. "8.5"? What is the "-1"? What is the "-build2"? What version should I call that? Is there a different tag I should have used instead? tor-browser defaults to using socks port 9150, but tor defaults to port 9050. Why is that so? Is there an intended way (configure flag?) to change the tor-browser default? I've inherited the attached patch from the previous version of the package. It changes the default directory to one in the user's home, which makes more sense to me on a Unix system where the program is installed in a public path. Would this patch be acceptable for inclusion, or what do you suggest? I've tested the package by browsing random webpages, some onion sites and check.torproject.org. Is there anything else I can do test that the tor-browser package is functional and doesn't leak stuff it shouldn't? Thanks for any feedback! Thomas

2 2

Vanguards v0.3.1 is released (+Blog announcement soon)
by Mike Perry 20 Apr '19

20 Apr '19

Vanguards v0.3.1 is tagged on github at https://github.com/mikeperry-tor/vanguards. The tag is signed with the gpg key that signed this mail, and all of my other mails. Version 0.3.1 fixes a serious issue where sending a SIGHUP to Tor caused Vanguards to get disabled. Additionally, some false positive WARN messages were demoted to INFO and NOTICE, and given appropriate Tor bug numbers in those logs. Here is the changelog for 0.3.1: - Workaround for dropped cell WARNS due to Tor bugs #29699, #29700, #29786, and #29927. These cases are now logged at INFO/NOTICE, with specific Tor bug number for each case. #37 - Re-apply vanguard config params upon SIGHUP. #40. The addon requires Tor 0.3.3.x or above, and Tor 0.3.5.x is preferred. Please set dependencies and repository placement accordingly. The preferred interpreter for vanguards is pypy, with stem v1.7.0 or above. Please let me know if vanguards is available for repositories for your distribution, or in ppa's or alternate sources. I plan to make a release announcement on the Tor Blog and Twitter account soon, and I would like to provide install instructions for your favorite distribution(s). -- Mike Perry

2 1

Tor 0.4.0.4-rc is now available
by Nick Mathewson 11 Apr '19

11 Apr '19

Hi, all! There's a new release candidate for 0.4.0.x available at https://dist.torproject.org. Please remember to check the signatures. If no serious bugs are found here, this will become a stable release. You can find the changelog at https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.4.0.4-rc . (Also, a reminder: the clock is ticking on 0.2.9 and 0.3.4. Support for 0.3.4 will end on June 10 of this year; support for 0.2.9 will end January 1 of 2020. If you need a version with long term support, make sure that you upgrade to 0.3.5.x. As usual, our release plans are at https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor…) cheers, -- Nick

1 0