- tor-packagers - lists.torproject.org

New *stable* release: Tor 0.4.5.6
by Nick Mathewson 15 Feb '21

15 Feb '21

Hello! Tor 0.4.5.6 is now signed and uploaded to https://dist.torproject.org/ . It's officially a stable release now! Below is a list of the changes since 0.4.5.5-rc. For a list of all the changes since 0.4.4.7, see the ReleaseNotes file. Official announcements will follow after the website has updated. Changes in version 0.4.5.6 - 2021-02-15 The Tor 0.4.5.x release series is dedicated to the memory of Karsten Loesing (1979-2020), Tor developer, cypherpunk, husband, and father. Karsten is best known for creating the Tor metrics portal and leading the metrics team, but he was involved in Tor from the early days. For example, while he was still a student he invented and implemented the v2 onion service directory design, and he also served as an ambassador to the many German researchers working in the anonymity field. We loved him and respected him for his patience, his consistency, and his welcoming approach to growing our community. This release series introduces significant improvements in relay IPv6 address discovery, a new "MetricsPort" mechanism for relay operators to measure performance, LTTng support, build system improvements to help when using Tor as a static library, and significant bugfixes related to Windows relay performance. It also includes numerous smaller features and bugfixes. Below are the changes since 0.4.4.4-rc. For a complete list of changes since 0.4.4.7, see the ReleaseNotes file. o Major bugfixes (IPv6, relay): - Fix a bug that prevented a relay from publishing its descriptor if an auto-discovered IPv6 that was found unreachable. Fixes bug 40279; bugfix on 0.4.5.1-alpha. o Minor features (protocol versions): - Stop claiming to support the "DirCache=1" subprotocol version. Technically, we stopped supporting this subprotocol back in 0.4.5.1-alpha, but we needed to wait for the authorities to stop listing it as "required" before we could drop it from the list. Closes ticket 40221. o Minor bugfixes (logging): - Avoid a spurious log message about missing subprotocol versions, when the consensus that we're reading from is older than the current release. Previously we had made this message nonfatal, but in practice, it is never relevant when the consensus is older than the current release. Fixes bug 40281; bugfix on 0.4.0.1-alpha. o Minor bugfixes (metrics port): - Fix a bug warning when a metrics port socket was unexpectedly closed. Fixes bug 40257; bugfix on 0.4.5.1-alpha o Minor bugfixes (relay): - Allow relays to have a RFC1918 address if PublishServerDescriptor is set to 0 and AssumeReachable is set to 1. This is to support the use case of a bridge on a local network, exposed via a pluggable transport. Fixes bug 40208; bugfix on 0.4.5.1-alpha. o Minor bugfixes (relay, config): - Fix a problem in the removal of duplicate ORPorts from the internal port list when loading the config file. We were removing the wrong ports, breaking valid torrc uses cases for multiple ORPorts of the same address family. Fixes bug 40289; bugfix on 0.4.5.1-alpha. cheers, -- Nick

1 0

Of potential interest: changes to Tor's LTS policy
by Nick Mathewson 05 Feb '21

05 Feb '21

Hello! I've been working on a proposed change to Tor's LTS policies. I've run it by a few people already, and now I've posted it on tor-dev for broader comment. If you're not on tor-dev, you can read it at https://lists.torproject.org/pipermail/tor-dev/2021-February/014515.html (summary: If we decide to do this, we will still be able to do LTS releases, but we will backport fewer things to them, and we will make fewer promises about how well they will work on the network.) I'm especially interested in feedback from packagers here. best wishes, -- Nick

2 1

New stable releases: 0.4.4.7, 0.4.3.8, 0.3.5.13
by Nick Mathewson 03 Feb '21

03 Feb '21

Hello! The abovementioned releases are the latest in their series. They contain code that we hope will protect the network against denial-of-service attacks, and make v3 hidden services more robust in the presence of such attacks. You can download the source, as usual, at https://dist.torproject.org/. Note that support for 0.4.3.x will end later this month; if you're on that version, you should probably upgrade to 0.4.4.x or 0.4.5.x. See https://gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/CoreTorRele… for information on our supported release series and schedules. We anticipate that 0.4.5.x will be "officially" stable on 15 Feb, and that differences from 0.4.5.5-rc will be minimal. Official release announcements will follow after the website updates. Here are the changelogs: Changes in version 0.4.4.7 - 2021-02-03 Tor 0.4.4.7 backports numerous bugfixes from later releases, including one that made v3 onion services more susceptible to denial-of-service attacks, and a feature that makes some kinds of DoS attacks harder to perform. o Major bugfixes (onion service v3, backport from 0.4.5.3-rc): - Stop requiring a live consensus for v3 clients and services, and allow a "reasonably live" consensus instead. This allows v3 onion services to work even if the authorities fail to generate a consensus for more than 2 hours in a row. Fixes bug 40237; bugfix on 0.3.5.1-alpha. o Major feature (exit, backport from 0.4.5.5-rc): - Re-entry into the network is now denied at the Exit level to all relays' ORPorts and authorities' ORPorts and DirPorts. This change should help mitgate a set of denial-of-service attacks. Closes ticket 2667. o Minor feature (build system, backport from 0.4.5.4-rc): - New "make lsp" command to generate the compile_commands.json file used by the ccls language server. The "bear" program is needed for this. Closes ticket 40227. o Minor features (compilation, backport from 0.4.5.2-rc): - Disable deprecation warnings when building with OpenSSL 3.0.0 or later. There are a number of APIs newly deprecated in OpenSSL 3.0.0 that Tor still requires. (A later version of Tor will try to stop depending on these APIs.) Closes ticket 40165. o Minor features (crypto, backport from 0.4.5.3-rc): - Fix undefined behavior on our Keccak library. The bug only appeared on platforms with 32-byte CPU cache lines (e.g. armv5tel) and would result in wrong digests. Fixes bug 40210; bugfix on 0.2.8.1-alpha. Thanks to Bernhard Übelacker, Arnd Bergmann and weasel for diagnosing this. o Minor bugfixes (compatibility, backport from 0.4.5.1-rc): - Strip '\r' characters when reading text files on Unix platforms. This should resolve an issue where a relay operator migrates a relay from Windows to Unix, but does not change the line ending of Tor's various state files to match the platform, and the CRLF line endings from Windows end up leaking into other files such as the extra-info document. Fixes bug 33781; bugfix on 0.0.9pre5. o Minor bugfixes (compilation, backport from 0.4.5.3-rc): - Fix a compilation warning about unreachable fallthrough annotations when building with "--enable-all-bugs-are-fatal" on some compilers. Fixes bug 40241; bugfix on 0.3.5.4-alpha. o Minor bugfixes (SOCKS5, backport from 0.4.5.3-rc): - Handle partial SOCKS5 messages correctly. Previously, our code would send an incorrect error message if it got a SOCKS5 request that wasn't complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha. o Minor bugfixes (testing, backport from 0.4.5.2-alpha): - Fix the `config/parse_tcp_proxy_line` test so that it works correctly on systems where the DNS provider hijacks invalid queries. Fixes part of bug 40179; bugfix on 0.4.3.1-alpha. - Fix our Python reference-implementation for the v3 onion service handshake so that it works correctly with the version of hashlib provided by Python 3.9. Fixes part of bug 40179; bugfix on 0.3.1.6-rc. - Fix the `tortls/openssl/log_one_error` test to work with OpenSSL 3.0.0. Fixes bug 40170; bugfix on 0.2.8.1-alpha. Changes in version 0.4.3.8 - 2021-02-03 Tor 0.4.3.8 backports numerous bugfixes from later releases, including one that made v3 onion services more susceptible to denial-of-service attacks, and a feature that makes some kinds of DoS attacks harder to perform. Note that this is, in all likelihood, the last release of Tor 0.4.3.x, which will reach end-of-life on 15 Feb 2021. o Major bugfixes (onion service v3, backport from 0.4.5.3-rc): - Stop requiring a live consensus for v3 clients and services, and allow a "reasonably live" consensus instead. This allows v3 onion services to work even if the authorities fail to generate a consensus for more than 2 hours in a row. Fixes bug 40237; bugfix on 0.3.5.1-alpha. o Major bugfixes (stats, onion services, backport from 0.4.4.5): - Fix a bug where we were undercounting the Tor network's total onion service traffic, by ignoring any traffic originating from clients. Now we count traffic from both clients and services. Fixes bug 40117; bugfix on 0.2.6.2-alpha. o Major feature (exit, backport from 0.4.5.5-rc): - Re-entry into the network is now denied at the Exit level to all relays' ORPorts and authorities' ORPorts and DirPorts. This change should help mitgate a set of denial-of-service attacks. Closes ticket 2667. o Minor feature (build system, backport from 0.4.5.4-rc): - New "make lsp" command to generate the compile_commands.json file used by the ccls language server. The "bear" program is needed for this. Closes ticket 40227. o Minor features (compilation, backport from 0.4.5.2-rc): - Disable deprecation warnings when building with OpenSSL 3.0.0 or later. There are a number of APIs newly deprecated in OpenSSL 3.0.0 that Tor still requires. (A later version of Tor will try to stop depending on these APIs.) Closes ticket 40165. o Minor features (crypto, backport from 0.4.5.3-rc): - Fix undefined behavior on our Keccak library. The bug only appeared on platforms with 32-byte CPU cache lines (e.g. armv5tel) and would result in wrong digests. Fixes bug 40210; bugfix on 0.2.8.1-alpha. Thanks to Bernhard Übelacker, Arnd Bergmann and weasel for diagnosing this. o Minor bugfixes (compatibility, backport from 0.4.5.1-rc): - Strip '\r' characters when reading text files on Unix platforms. This should resolve an issue where a relay operator migrates a relay from Windows to Unix, but does not change the line ending of Tor's various state files to match the platform, and the CRLF line endings from Windows end up leaking into other files such as the extra-info document. Fixes bug 33781; bugfix on 0.0.9pre5. o Minor bugfixes (compilation, backport from 0.4.5.1-rc): - Resolve a compilation warning that could occur in test_connection.c. Fixes bug 40113; bugfix on 0.2.9.3-alpha. o Minor bugfixes (compilation, backport from 0.4.5.3-rc): - Fix a compilation warning about unreachable fallthrough annotations when building with "--enable-all-bugs-are-fatal" on some compilers. Fixes bug 40241; bugfix on 0.3.5.4-alpha. o Minor bugfixes (SOCKS5, backport from 0.4.5.3-rc): - Handle partial SOCKS5 messages correctly. Previously, our code would send an incorrect error message if it got a SOCKS5 request that wasn't complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha. o Minor bugfixes (testing, backport from 0.4.5.2-alpha): - Fix the `config/parse_tcp_proxy_line` test so that it works correctly on systems where the DNS provider hijacks invalid queries. Fixes part of bug 40179; bugfix on 0.4.3.1-alpha. - Fix our Python reference-implementation for the v3 onion service handshake so that it works correctly with the version of hashlib provided by Python 3.9. Fixes part of bug 40179; bugfix on 0.3.1.6-rc. - Fix the `tortls/openssl/log_one_error` test to work with OpenSSL 3.0.0. Fixes bug 40170; bugfix on 0.2.8.1-alpha. Changes in version 0.3.5.13 - 2020-02-03 Tor 0.3.5.13 backports numerous bugfixes from later releases, including one that made v3 onion services more susceptible to denial-of-service attacks, and a feature that makes some kinds of DoS attacks harder to perform. o Major bugfixes (onion service v3, backport from 0.4.5.3-rc): - Stop requiring a live consensus for v3 clients and services, and allow a "reasonably live" consensus instead. This allows v3 onion services to work even if the authorities fail to generate a consensus for more than 2 hours in a row. Fixes bug 40237; bugfix on 0.3.5.1-alpha. o Major bugfixes (stats, onion services, backport from 0.4.4.5): - Fix a bug where we were undercounting the Tor network's total onion service traffic, by ignoring any traffic originating from clients. Now we count traffic from both clients and services. Fixes bug 40117; bugfix on 0.2.6.2-alpha. o Major feature (exit, backport from 0.4.5.5-rc): - Re-entry into the network is now denied at the Exit level to all relays' ORPorts and authorities' ORPorts and DirPorts. This change should help mitgate a set of denial-of-service attacks. Closes ticket 2667. o Minor feature (build system, backport from 0.4.5.4-rc): - New "make lsp" command to generate the compile_commands.json file used by the ccls language server. The "bear" program is needed for this. Closes ticket 40227. o Minor features (compilation, backport from 0.4.5.2-rc): - Disable deprecation warnings when building with OpenSSL 3.0.0 or later. There are a number of APIs newly deprecated in OpenSSL 3.0.0 that Tor still requires. (A later version of Tor will try to stop depending on these APIs.) Closes ticket 40165. o Minor features (crypto, backport from 0.4.5.3-rc): - Fix undefined behavior on our Keccak library. The bug only appeared on platforms with 32-byte CPU cache lines (e.g. armv5tel) and would result in wrong digests. Fixes bug 40210; bugfix on 0.2.8.1-alpha. Thanks to Bernhard Übelacker, Arnd Bergmann and weasel for diagnosing this. o Minor bugfixes (compatibility, backport from 0.4.5.1-rc): - Strip '\r' characters when reading text files on Unix platforms. This should resolve an issue where a relay operator migrates a relay from Windows to Unix, but does not change the line ending of Tor's various state files to match the platform, and the CRLF line endings from Windows end up leaking into other files such as the extra-info document. Fixes bug 33781; bugfix on 0.0.9pre5. o Minor bugfixes (compilation, backport from 0.4.5.1-rc): - Resolve a compilation warning that could occur in test_connection.c. Fixes bug 40113; bugfix on 0.2.9.3-alpha. o Minor bugfixes (compilation, backport from 0.4.5.3-rc): - Fix a compilation warning about unreachable fallthrough annotations when building with "--enable-all-bugs-are-fatal" on some compilers. Fixes bug 40241; bugfix on 0.3.5.4-alpha. o Minor bugfixes (SOCKS5, backport from 0.4.5.3-rc): - Handle partial SOCKS5 messages correctly. Previously, our code would send an incorrect error message if it got a SOCKS5 request that wasn't complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha. o Minor bugfixes (testing, backport from 0.4.5.2-alpha): - Fix our Python reference-implementation for the v3 onion service handshake so that it works correctly with the version of hashlib provided by Python 3.9. Fixes part of bug 40179; bugfix on 0.3.1.6-rc. - Fix the `tortls/openssl/log_one_error` test to work with OpenSSL 3.0.0. Fixes bug 40170; bugfix on 0.2.8.1-alpha.

1 0

Tor 0.4.5.5-rc is released!
by Nick Mathewson 01 Feb '21

01 Feb '21

We need to do one more release candidate to fit in a couple of important fixes. We hope this is the last one before stable, though. Please check it out? Download as usual at https://dist.torproject.org/ Testing this release in particular is pretty vital, since we plan to backport the anti-DoS feature to other stable releases soon. Additionally, we're planning to put out stable releases later this week, if all goes well. Here's the changelog: Changes in version 0.4.5.5-rc - 2021-02-01 Tor 0.4.5.5-rc is the third release candidate in its series. We're coming closer and closer to a stable release series. This release fixes an annoyance with address detection code, and somewhat mitigates an ongoing denial-of-service attack. We anticipate no more code changes between this and the stable release, though of course that could change. o Major feature (exit): - Re-entry into the network is now denied at the Exit level to all relays' ORPorts and authorities' ORPorts and DirPorts. This change should help mitgate a set of denial-of-service attacks. Closes ticket 2667. o Minor bugfixes (relay, configuration): - Don't attempt to discover our address (IPv4 or IPv6) if no ORPort for it can be found in the configuration. Fixes bug 40254; bugfix on 0.4.5.1-alpha. best wishes,, -- Nick

1 0

Tor 0.4.5.4-rc is released
by Nick Mathewson 22 Jan '21

22 Jan '21

Hello, there's a new release candidate out for 0.4.5.4-rc. You can get it at the usual place at https://dist.torproject.org/ We hope we're almost out of bugs; we're currently planning to do somewhere between zero and one more release candidates before this release series is finally stable. As usual, you can find more about our planned release schedule at https://gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/CoreTorRele… Here's what's new: Changes in version 0.4.5.4-rc - 2021-01-22 Tor 0.4.5.4-rc is the second release candidate in its series. It fixes several bugs present in previous releases. We expect that the stable release will be the same, or almost the same, as this releasee candidate, unless serious bugs are found. o Major bugfixes (authority, IPv6): - Do not consider multiple relays in the same IPv6 /64 network to be sybils. Fixes bug 40243; bugfix on 0.4.5.1-alpha. o Major bugfixes (directory cache, performance, windows): - Limit the number of items in the consensus diff cache to 64 on Windows. We hope this will mitigate an issue where Windows relay operators reported Tor using 100% CPU, while we investigate better solutions. Fixes bug 24857; bugfix on 0.3.1.1-alpha. o Minor feature (build system): - New "make lsp" command to generate the compile_commands.json file used by the ccls language server. The "bear" program is needed for this. Closes ticket 40227. o Minor features (authority, logging): - Log more information for directory authority operators during the consensus voting process, and while processing relay descriptors. Closes ticket 40245. - Reject obsolete router/extrainfo descriptors earlier and more quietly, to avoid spamming the logs. Fixes bug 40238; bugfix on 0.4.5.1-alpha. o Minor bugfixes (compilation): - Fix another warning about unreachable fallthrough annotations when building with "--enable-all-bugs-are-fatal" on some compilers. Fixes bug 40241; bugfix on 0.4.5.3-rc. - Change the linker flag ordering in our library search code so that it works for compilers that need the libraries to be listed in the right order. Fixes bug 33624; bugfix on 0.1.1.0-alpha. o Minor bugfixes (config, bridge): - Don't initiate a connection to a bridge configured to use a missing transport. This change reverts an earlier fix that would try to avoid such situations during configuration chcecking, but which doesn't work with DisableNetwork. Fixes bug 40106; bugfix on 0.4.5.1-alpha. o Minor bugfixes (onion services): - Avoid a non-fatal assertion in certain edge-cases when establishing a circuit to an onion service. Fixes bug 32666; bugfix on 0.3.0.3-alpha. o Minor bugfixes (relay): - If we were unable to build our descriptor, don't mark it as having been advertised. Also remove an harmless BUG(). Fixes bug 40231; bugfix on 0.4.5.1-alpha.

1 0

Tor 0.4.5.3-rc is now released
by Nick Mathewson 12 Jan '21

12 Jan '21

Hello! Tor 0.4.5.3-rc is now available for download at https://dist.torproject.org/ . Official announcements will follow once the website has updated. Here's the changelog. Changes in version 0.4.5.3-rc - 2021-01-12 Tor 0.4.5.3-rc is the first release candidate in its series. It fixes several bugs, including one that broke onion services on certain older ARM CPUs. Though we anticipate that we'll be doing a bit more clean-up between now and the stable release, we expect that our remaining changes will be fairly simple. There will be at least one more release candidate before 0.4.5.x is stable. o Major bugfixes (onion service v3): - Stop requiring a live consensus for v3 clients and services, and allow a "reasonably live" consensus instead. This allows v3 onion services to work even if the authorities fail to generate a consensus for more than 2 hours in a row. Fixes bug 40237; bugfix on 0.3.5.1-alpha. o Minor features (crypto): - Fix undefined behavior on our Keccak library. The bug only appeared on platforms with 32-byte CPU cache lines (e.g. armv5tel) and would result in wrong digests. Fixes bug 40210; bugfix on 0.2.8.1-alpha. Thanks to Bernhard Übelacker, Arnd Bergmann and weasel for diagnosing this. o Minor features (documentation): - Mention the "!badexit" directive that can appear in an authority's approved-routers file, and update the description of the "!invalid" directive. Closes ticket 40188. o Minor bugfixes (compilation): - Fix a compilation warning about unreachable fallthrough annotations when building with "--enable-all-bugs-are-fatal" on some compilers. Fixes bug 40241; bugfix on 0.3.5.4-alpha. - Fix the "--enable-static-tor" switch to properly set the "-static" compile option onto the tor binary only. Fixes bug 40111; bugfix on 0.2.3.1-alpha. o Minor bugfixes (config, bridge): - Really fix the case where torrc has a missing ClientTransportPlugin but is configured with a Bridge line and UseBridges. Previously, we didn't look at the managed proxy list and thus would fail for the "exec" case. Fixes bug 40106; bugfix on 0.4.5.1-alpha. o Minor bugfixes (logging, relay): - Log our address as reported by the directory authorities, if none was configured or detected before. Fixes bug 40201; bugfix on 0.4.5.1-alpha. - When a launching bandwidth testing circuit, don't incorrectly call it a reachability test, or trigger a "CHECKING_REACHABILITY" control event. Fixes bug 40205; bugfix on 0.4.5.1-alpha. o Minor bugfixes (relay, statistics): - Report the correct connection statistics in our extrainfo documents. Previously there was a problem in the file loading function which would wrongly truncate a state file, causing the wrong information to be reported. Fixes bug 40226; bugfix on 0.4.5.1-alpha. o Minor bugfixes (SOCKS5): - Handle partial SOCKS5 messages correctly. Previously, our code would send an incorrect error message if it got a SOCKS5 request that wasn't complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha.

1 0

Tor 0.4.5.2-alpha is released
by Nick Mathewson 23 Nov '20

23 Nov '20

Hi! You can find the source for 0.4.5.2-alpha at the usual place, at https://dist.torproject.org/ . It fixes a few bugs in 0.4.5.1-alpha: everybody running 0.4.5.1-alpha will probably want to upgrade. If you don't package alphas directly, that's okay, but please at least make sure that this version builds and runs okay on your target platform: we've made some changes in the build system that should really be tested before we call this series stable. (It's always easier to fix things while we're still in alpha.) You can read the changelog at https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.4.5.2-alpha . I'll be sending out official announcements soon. peace, -- Nick

1 0

New releases: 0.3.5.12, 0.4.3.7, 0.4.4.6
by Nick Mathewson 12 Nov '20

12 Nov '20

Hello! There are new stable releases available today. These backport a bunch of fixes, including one for TROVE-2020-005, a medium-severity security issue that was fixed in 0.4.5.1-alpha. You can download them from the usual place at https://dist.torproject.org/ . Changelogs are here: https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.5.12 https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.4.3.7 https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.4.4.6 Note that there is an error in the 0.4.3.7 changelog: Support for 0.4.3.x will in fact end on 15 February 2021, not on 15 January 2020 (which is in the past). I'll send out official announcements after the download page has updated. yrs, -- Nick

1 0

New release: Tor 0.4.5.1-alpha
by Nick Mathewson 01 Nov '20

01 Nov '20

Hi, friends! There's a new alpha release out today: Tor 0.4.5.1-alpha. The website hasn't updated yet, but you can find the source at the usual place on https://dist.torproject.org/ . Note that I've updated my pgp key with a new expiration date: you may need to refresh it from the keyservers if it seems to be expired. Here is a changelog for this release: https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.4.5.1-alpha Please note that this release has a fix for a medium-severity issue, TROVE-2020-005. The impact of this security issue is that if an adversary steals or factors a relay's RSA legacy identity key without stealing its Ed25519 identity key, there is a timing-dependent active attack that the attacker could use to mis-route a small number of circuits through a TLS connection under the attacker's control. (The attacker could not use this to read traffic; only to observe traffic patterns.) We're going to backport this fix, and others, to the supported stable release series in the next week or so, so it would be great to have testing on 0.4.5.1-alpha in the meantime. all best wishes,, -- Nick

1 0

unknown option --enable-webrender
by Thomas Klausner 06 Oct '20

06 Oct '20

Hi! Every so often when updating tor-browser I see errors like this (new in 10.0): checking for vcs source checkout... no checking for a shell... /scratch/nih/tor-browser/work/.tools/bin/sh checking for host system type... x86_64--netbsd checking for target system type... x86_64--netbsd checking whether cross compiling... no Traceback (most recent call last): File "/scratch/nih/tor-browser/work/firefox-tor-browser-78.3.0esr-10.0-2-build2/configure.py", line 181, in <module> sys.exit(main(sys.argv)) File "/scratch/nih/tor-browser/work/firefox-tor-browser-78.3.0esr-10.0-2-build2/configure.py", line 52, in main sandbox.run(os.path.join(os.path.dirname(__file__), 'moz.configure')) File "/scratch/nih/tor-browser/work/firefox-tor-browser-78.3.0esr-10.0-2-build2/python/mozbuild/mozbuild/configure/__init__.py", line 494, in run raise InvalidOptionError(msg) mozbuild.configure.options.InvalidOptionError: Unknown option: --enable-webrender *** Error code 1 1. how do I fix this? (previously I saw this due to lines added by .mozconfig, but this time it's not coming from there) 2. what am I doing differently than the standard Linux build so that only I (and I think OpenBSD ports) see this? Cheers, Thomas

2 2