** Summary changed:

- [SRU] Backport patch to update Tor Browser Developers public key into Ubuntu 
20.04
+ [SRU] Multiple issues with Tor Browser

** Summary changed:

- [SRU] Multiple issues with Tor Browser
+ [SRU] Multiple issues with Tor Browser Launcher

** Description changed:

- [Impact]
- The torbrowser-launcher package in Ubuntu 20.04 does not work *at all* on new 
installations (see bug #1856895), because of a Tor Browser Developers public 
key change (old key is not valid anymore) that causes Tor Browser archive 
downloaded by torbrowser-launcher when being launched for a first time to fail 
verification. The included debdiff contains patch with a new key from latest 
package version (that is in Debian Testing and Ubuntu Groovy) and makes the 
torbrowser-launcher work again.
+ This bug is (now) a master bug for the SRU that also encompasses these
+ issues:
  
- [Test Case]
- 1. Use a clean, fully updated Ubuntu 20.04 system where torbrowser-launcher 
was not previously installed/configured.
- 2. Install the "torbrowser-launcher" package.
- 3. Run "Tor Browser" from a desktop menu (or "torbrowser-launcher" from 
terminal).
- 4. Wait for the Tor Browser archive to finish downloading, verifying and 
unpacking.
+ Tor does not download and install; repeated signature verification failed:
+ https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1856895
  
- [Regression Potential]
- This debdiff adds just the one patch mentioned above. As mentioned, the 
developer key is used only when torbrowser-launcher is launched for a first 
time - to verify Tor Browser archive that is downloaded and unpacked (into 
user's home) by torbrowser-launcher. torbrowser updates are then handled by 
torbrowser itself, not by torbrowser-launcher. Subsequent Tor Browser updates 
are handled by Tor Browser itself, not by torbrowser-launcher and work fine 
even if the developer key shipped with torbrowser-launcher is incorrect. I am 
not aware of any regression this change could cause.
+ 
+ Version checking error in torbrowser-launcher since Tor Browser 10.0 was 
released:
+ https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1896752
+ 
+ Apparmor profile prevents Tor Browser from loading libstdc++.so.6 since Tor 
Browser 10.0 was released:
+ https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897302
+ 
+ torbrowser-launcher has missing gnupg dependency:
+ https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897306

** Description changed:

- This bug is (now) a master bug for the SRU that also encompasses these
+ This bug is (now) a master bug for the SRU that encompasses these
  issues:
  
  Tor does not download and install; repeated signature verification failed:
  https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1856895
- 
  
  Version checking error in torbrowser-launcher since Tor Browser 10.0 was 
released:
  https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1896752
  
  Apparmor profile prevents Tor Browser from loading libstdc++.so.6 since Tor 
Browser 10.0 was released:
  https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897302
  
  torbrowser-launcher has missing gnupg dependency:
  https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897306
+ 
+ 
+ All f the above issues are fixed in Groovy with the latest sync from Unstable.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1896085

Title:
  [SRU] Multiple issues with Tor Browser Launcher

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1896085/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to