Hello!
We are happy to announce the first Tor Browser 11.0.4 release candidate
for wider testing. Packages can be found at:
https://people.torproject.org/~gk/builds/11.0.4-build2/
Tor Browser 11.0.4 updates Firefox to 91.5.0esr and gives our landing
page the usual Tor Browser look and feel bac
Hello!
We are happy to announce the first Tor Browser 11.0.3 release candidate
for wider testing. Packages can be found at:
https://people.torproject.org/~gk/builds/11.0.3-build1/
Tor Browser 11.0.3 updates Firefox to 91.4.1esr and picks up a number of
bug fixes for our 11.0 stable series. In
It's a necessary trade-off.
Is there a list of those firmwares somewhere (I couldn't find anything
on the Tails website about that topic after searching a bit) or is it
"just" a Debian package taken 1:1 from upstream?
Georg
OpenPGP_signature
Description: OpenPGP digital signat
ut of old mingw-gcc patch
* Bug 32616: Disable GetSecureOutputDirectoryPath() functionality
* Android
* Bug 32365: Localization is broken in Tor Browser 9 on Android
* Build System
* All Platforms
* Bug 32413: Bump Go version to 1.12.13
Georg
signature.asc
Description: OpenPGP di
e Gradle with --offline when building the browser part
* Bug 31564: Make Android bundles based on ESR 68 reproducible
* Bug 31981: Remove require-api.patch
* Bug 31979: TOPL: Sort dependency list
* Bug 30665: Remove unnecessary build patches for Firefox
Georg
signature.a
Hi!
We are happy to announce the first Tor Browser 8.5.4 release candidate
for wider testing. Bundles can be found at
https://people.torproject.org/~gk/builds/8.5.4-build2/
Tor Browser 8.5.4 contains updates to a number of its components. Above
all, we include Firefox 60.8.0esr which contains im
p one
* Build System
* All platforms
* Bug 30480: Check that signed tag contains expected tag name
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://www.autistici.org/mailman/listinfo/
bundles on 64bit Debian Wheezy
* Bug 26148: Update binutils to 2.31.1
* Bug 29758: Build firefox debug symbols for linux-i686
* Bug 29966: Use archive.debian.org for Wheezy images
* Bug 29183: Use linux-x86_64 langpacks on linux-x86_64
* Android
* Bug 29981: Add option to build wi
sajolida:
> anonym:
>> Georg Koppen:
>>> Tails - News:
>>>> This release is an emergency release to fix a critical security
>>>> vulnerability
>>>> in _Tor Browser_.
>>>>
>>>> It also fixes [other security
>>&
e the: "Specific Fingerprinting Defenses in the Tor
Browser", subsection 2. HTML5 Canvas Extraction at
https://2019.www.torproject.org/projects/torbrowser/design/)
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mail
anymore
* Update Torbutton to 2.0.11
* Bug 29021: Tell NoScript it is running within Tor Browser
* Windows
* Bug 29081: Harden libwinpthread
* Linux
* Bug 27531: Add separate LD_LIBRARY_PATH for fteproxy
Georg
signature.asc
Description: OpenPGP digital signature
intrigeri:
> Hi,
>
> Georg Koppen:
>> intrigeri:
>>> This relaxes me a bit regarding #27466, #26553, and #28044
>>> (Tor bugs, not Tails tickets).
>
>> No worries about those. We think we don't get those bugs into a stable
>> release shape
intrigeri:
> Hi Georg,
>
> Georg Koppen:
>> Don't wait on us here for Tor Browser 8.5. The current plan is to have
>> the release, which is scheduled for March 19, be a "normal" 8.0.x
>> release and getting 8.5 out end of March.
>> However, this is
tle further into April.
That said, also keep in mind that Pwn2Own will be between March 20-22
and Firefox is one of the targets. The actual schedule of exploit
attempts is usually revealed at the beginning of the week, so not sure
yet when a potential emergency release would need to happen (if at all).
value on 64-bit systems
* Bug 28695: Set default security.pki.name_matching_mode to enforce (3)
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://www.autistici.org/mailman/listinfo/tails
bundles in parallel
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to
tails-dev-unsubscr...@boum.org.
RHEL 6
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to
tails-dev-unsubscr...@boum.org.
Tails - News:
> # What's coming up?
>
> Tails 3.10 is [scheduled](https://tails.boum.org/contribute/calendar/) for
> October 22.
Are you sure about that? Firefox 60.3.0esr is scheduled for October 23
and I think you don't want to release before it is out.
Georg
sig
7482: Fix crash during start-up on macOS 10.9.x systems
* Linux
* Bug 26556: Fix broken Tor Browser icon path on Linux
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org
tor-browser-build for transition to ESR 60
* Bug 25481: Rust support for tor-browser and tor
* Bug 25304: Update GCC to 6.4.0
* Bug 16472: Update Binutils to 2.26.1
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev
Georg Koppen:
> Hi all!
>
> Tor Browser 7.5.4 is ready for testing. Bundles can be found on:
FWIW as the subject said this is about Tor Browser 7.5.6 and not 7.5.4.
Sorry for the extra noise,
Georg
signature.asc
Description: OpenPGP digital
Hi all!
Tor Browser 7.5.4 is ready for testing. Bundles can be found on:
https://people.torproject.org/~boklm/builds/7.5.6-build4
Tor Browser 7.5.6 contains security updates to Firefox and includes
newer versions of NoScript and HTTPS Everywhere. Moreover, we added the
latest Tor stable version,
a test if you can.
The full changelog since 7.5.2 is:
Tor Browser 7.5.3 -- March 26 2018
* All platforms
* Update Firefox to 52.7.3esr
* Update HTTPS Everywhere to 2018.3.13
* Bug 25339: Adapt build system for Python 3.6 based build procedure
Georg
signature.asc
Description
* Translations update
* Update NoScript to 5.1.8.4
* Bug 25356: Update obfs4proxy to v0.0.7
* Bug 25000: Add [System+Principal] to the NoScript whitelist
* Windows
* Bug 25112: Disable sandboxing on 64-bit Windows <= Vista
Georg
signature.asc
Description: OpenPGP digital signat
ump GCC version to 5.4.0
* Linux
* Bug 20929: Bump GCC version to 5.4.0
* Bug 23892: Include Firefox and Tor debug files in final build
directory
* Bug 24842: include libasan.so.2 and libubsan.so.0 in debug builds
Georg
signature.asc
Des
ship
* Bug 24052: Block file:// redirects early
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to
d Mozilla are about to get out).
Or put in different words: there are costs involved for upstream
projects by downstream releasing new versions earlier and there are
risks involved by downstream doing so (missing last minute bugfixes
etc.). But if you still think
us know if you find content sandboxing related issues
that are blockers for Tails.
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from thi
intrigeri:
> Hi,
>
> Georg Koppen:
>> anonym:
>>> Georg Koppen:
>>>> Just to inform you about things we learned a couple of minutes ago: the
>>>> Firefox release is due on Thursday. It got postponed by two days mainly
>>>> to give 57 be
anonym:
> Georg Koppen:
>> Hi,
>>
>> Just to inform you about things we learned a couple of minutes ago: the
>> Firefox release is due on Thursday. It got postponed by two days mainly
>> to give 57 beta more publicity.
>>
>> We'll follow and releas
Hi,
Just to inform you about things we learned a couple of minutes ago: the
Firefox release is due on Thursday. It got postponed by two days mainly
to give 57 beta more publicity.
We'll follow and release Tor Browser on Thursday as well.
Georg
signature.asc
Description: OpenPGP di
21830: Copying large text from web console leaks to /tmp
* Bug 23393: Don't crash all tabs when closing one tab
* OS X
* Bug 23404: Add missing Noto Sans Buginese font to the macOS whitelist
Georg
signature.asc
Description: OpenPGP digital sign
addons page
* Bug 22884: Fix broken about:tor page on higher security levels
* Windows
* Bug 22829: Remove default obfs4 bridge riemann.
* Bug 21617: Fix single RWX page on Windows (included in 52.3.0esr)
* OS X
* Bug 22829: Remove default obfs4 bridge riemann.
Georg
signature.asc
Hi!
Folks seem to be confused about Tor Browser 7.0 getting mentioned in the
Tails 3.0 changelog
(https://blog.torproject.org/comment/269162#comment-269162).
It seems to me you shipped 7.0.1, right? (At least I hope so, I have not
checked)
If so, could you update the blog post?
Georg
window too small on macOS 10.12
* Update HTTPS-Everywhere to 5.2.18
* Bug 22362: NoScript's XSS filter freezes the browser
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
missing from mar-tools archive
* Bug 21239: Adapt Linux Firefox descriptor to ESR52 (use GTK2)
* Bug 21960: Linux bundles based on ESR 52 are not reproducible anymore
* Bug 21629: Fix broken ASan builds when switching to ESR 52
* Bug 22444: Use hardening-wrapper when building
Georg Koppen:
> Hi all!
>
> Tor Browser 6.5.2 is ready for testing. Bundles can be found on:
>
> https://people.torproject.org/~gk/builds/6.5.2-build1/
For what it is worth we are currently doing a -build3 which we think
will be the final one. It should not affect Tails as it o
Hi all!
Tor Browser 6.5.2 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/6.5.2-build1/
This release updates Firefox to 45.9.0esr, Noscript to 5.0.2, and
HTTPS-Everywhere to 5.2.14.
Moreover, we included a fix for the broken Twitter experience and worked
* Linux
* Bug 21326: Update the "Using a system-installed Tor" section in
start script
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To u
mpiling
tor)
* Bug 19856: Make OS X builds reproducible (getting libfaketime back)
* Bug 19410: Fix incremental updates by taking signatures into account
* Bug 20210: In dmg2mar, extract old mar file to copy permissions
to the new one
Georg
signature.as
Georg Koppen:
> Hi,
>
> we have a candidate build for 6.0.8 that could need some testing.
> Bundles can be found on:
>
> https://people.torproject.org/~gk/builds/6.0.8-build1/
For what it is worth we are currently rebundling 6.0.8 to pick up some
donation banner improvements
engine URL for DuckDuckGo search
plugins
* Bug 20837: Activate iat-mode for certain obfs4 bridges
* Bug 20838: Uncomment NX01 default obfs4 bridge
* Bug 20840: Rotate ports a third time for default obfs4 bridges
Georg
signature.asc
Description: OpenPGP digital signature
bertagaz:
> Hi,
>
> On Thu, Nov 10, 2016 at 05:50:00PM +0000, Georg Koppen wrote:
>>
>> Tor Browser 6.0.6 is ready for testing. Bundles can be found on
>>
>> https://people.torproject.org/~boklm/builds/6.0.6-build5
>
> Thanks!
>
> I see there&#x
: Windows don't drag on macOS Sierra anymore
* Bug 20250: Meek fails on macOS Sierra if built with Go < 1.7
* Build system
* All platforms
* Bug 20023: Upgrade Go to 1.7.3
Georg
signature.asc
Description: OpenPGP digital signature
_
in the app home directory
* Build system
* All platforms
* Upgrade Go to 1.4.3
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe
ugust 16
* All Platforms
* Update Tor to 0.2.8.6
* Update NoScript to 2.9.0.14
* Bug 19890: Disable installation of system addons
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://m
sions
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to
tails-dev-unsubscr...@boum.org.
Seems I forgot to Cc you this time...
Georg
Forwarded Message
Subject: [tor-qa] Tor Browser 6.0.1 is ready for testing
Date: Sat, 4 Jun 2016 06:38:11 +
From: Georg Koppen
To: tor...@lists.torproject.org
This is an OpenPGP/MIME signed message (RFC 4880 and 3156
to Debian Wheezy guest VMs (10.04 LTS is EOL)
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to
tails-dev-unsubscr...@boum.org.
epage
* Translation updates
* Bug 18030: Isolate favicon requests on Page Info dialog
* Bug 18297: Use separate Noto JP,KR,SC,TC fonts
* Bug 18170: Make sure the homepage is shown after an update as well
* Windows
* Bug 18292: Disable staged updates on Windows
Georg
signatur
Bug 18169: Whitelist zh-CN UI font
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to
tails-dev-unsubscr...@boum.org.
* Bug 17122: Rename Japanese OS X bundle
* Bug 16707: Allow more system fonts to get used on OS X
* Bug 17661: Whitelist font .Helvetica Neue DeskInterface
* Linux
* Bug 16672: Don't use font whitelisting for Linux users
Georg
signature.asc
Description: OpenPGP digital sign
if you can.
The full changelog is:
Tor Browser 5.0.7 -- January 7 2016
* All Platforms
* Update NoScript to 2.9
* Update HTTPS Everywhere to 5.1.2
* Bug 17931: Tor Browser crashes in LogMessageToConsole()
* Bug 17875: Discourage editing of torrc-defaults
Georg
signature.asc
(fixup of #6253)
* Bug 16441: Suppress "Reset Tor Browser" prompt
* Bug 17747: Add ndnop3 as new default obfs4 bridge
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mai
anonym:
> Georg Koppen:
>> As far as I can see Tails is not including meek yet, correct? Thus, your
>> release plans should not be affected by a tentative build5 (meaning you
>> could just stick with build4 as build5 would only change the meek-amazon
>> fingerpri
as build5 would only change the meek-amazon
fingerprint). Am I something missing?
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from
a second Tor Browser
* Windows:
* Bug 16906: Don't depend on Windows crypto DLLs
* Linux:
* Bug 17329: Ensure that non-ASCII characters can be typed (fixup of
#5926)
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-d
FYI
Georg
Forwarded Message
Subject: [tor-qa] Tor Browser 5.0.3 is ready for testing
Date: Sat, 19 Sep 2015 00:46:57 -0700
From: Mike Perry
To: tor...@lists.torproject.org
The 5.0.3 release is up and ready for testing. The target release date
is Tuesday, Sept 22:
https
2.6.9.36
* Linux
* Bug 16860: Avoid duplicate icons on Unity and Gnome
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list
conds."
However, it might be easier to test whether this bug is fixed if you
omit step 3.
Tumblr seems to be affected as well. Testing there using the following
steps might help, too:
"After logged into tumblr, infinite scrolling down causes TBB 5 for
Linux x64 to crash after about 2-3
ts starting with
their esr38 cycle and forgot to doublecheck that.
Georg
>
> Here is the complete changelog since 4.5.3:
> * All Platforms
>* Update Firefox to 38.2.0esr
>* Update OpenSSL to 1.0.1p
>* Update HTTPS-Everywhere to 5.0.7
>* Update NoScript to 2
Jacob Appelbaum:
> On 8/7/15, Georg Koppen wrote:
>> Jacob Appelbaum:
>>> On 8/7/15, jvoisin wrote:
>>>> Hello,
>>>>
>>>> I disagree with your analysis;
>>>> while the Apparmor profile (♥) will prevent tragic things like gpg
sn't present in the current 31
ESR."
That's a quote from Liz Henry, the Firefox release manager.
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to
tails-dev-unsubscr...@boum.org.
Update FTE bridge #1 fingerprint
* Tor patch backport
* Bug 16430: Allow DNS names with _ characters in them (fixes
nytimes.com)
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum
Daniel Kahn Gillmor:
> On Fri 2015-06-12 15:13:18 -0400, Georg Koppen wrote:
>> We actually rebuilt parts of the 4.5.2 bundles mentioned above to
>> include the latest Tor (0.2.6.9) and above all a fixed OpenSSL (1.0.1n).
>
> Please use OpenSSL 1.0.1o, and not 1.0.1n.
&
Georg Koppen:
> Hi,
>
> Tor Browser 4.5.2-build1 is up at for testing:
>
> https://people.torproject.org/~gk/builds/4.5.2-build1/
We actually rebuilt parts of the 4.5.2 bundles mentioned above to
include the latest Tor (0.2.6.9) and above all a fixed OpenSSL (1.0.1n).
We plan t
Torbutton breaks the Add-ons Manager
* Linux
* Bug 16026: Fix crash in GStreamer
* Bug 16083: Update comment in start-tor-browser
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https
* Bug 15672: Provide desktop app registration+unregistration for Linux
* Windows
* Bug 15539: Make installer exe signatures reproducibly removable
* Bug 10761: Fix instances of shutdown crashes
Georg
signature.asc
Description: OpenPGP di
pair of crash bugs related to hidden
services (this was already part of 4.0.7).
Here's the changelog since 4.0.6 (covering 4.0.7 and 4.0.8):
* All Platforms
* Bug 15637: Fix update loop due to improper versioning
* Update Tor to 0.2.5.12
* Update NoScript to 2.6.9.21
Georg
signatur
r Browser's specific needs?
https://bugs.torproject.org/10419 is the one discussing how to defend
against the fingerprinting vector. We decided that ABE is not necessary
(avoiding its complexity) back then.
Georg
> -- G
>
> On 08/04/2015 14:51, tails-b...@boum.org wrote:
>
&g
Georg Koppen:
> Hi,
>
> Tor Browser 4.0.6 is up for testing. Bundles can be found at:
>
> https://people.torproject.org/~mikeperry/builds/4.0.6/
>
> This release is based on ESR 31.6.0 and contains an update of
meek
> additionally. Please give it some testing.
>
&
* Update Firefox to 31.6.0esr
* Update meek to 0.16
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty
Browser release with 31.5.3. I hope I have everything
ready to get the build going today.
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe
es that seem reasonable? I'm
> actually genuinely interested in an answer to this specific question,
> since I'm writing the Tails 1.2.1 release schedule as we speak and may
> have to adjust it if this turns out difficult for you to "promise".
We can
ing (in case there was
some last minute extension update that popped up during the build
process) and doing the release itself (rsyncing the bundles, writing the
release notes, preparing the signatures...)
Georg
> Cheers!
>
> [1] https://labs.ri
(which makes sense). Am I missing something? What should be in build,
> or what is the Makefile trying to make?
Try to install the kernel headers before compiling.
Cheers,
Georg
signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing
76 matches
Mail list logo
