| 2020-09-17 15:50:48 |
AsciiWolf |
bug |
|
|
added bug |
| 2020-09-17 15:50:48 |
AsciiWolf |
attachment added |
|
torbrowser-launcher_0.3.2-9ubuntu1.debdiff https://bugs.launchpad.net/bugs/1896085/+attachment/5411694/+files/torbrowser-launcher_0.3.2-9ubuntu1.debdiff |
|
| 2020-09-17 15:50:57 |
AsciiWolf |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
| 2020-09-17 16:38:46 |
AsciiWolf |
description |
[Impact]
The torbrowser-launcher package in Ubuntu 20.04 does not work *at all* on new installations (see bug #1856895), because of a Tor Browser Developers public key change (old key is not valid anymore) that causes Tor Browser archive downloaded by torbrowser-launcher when being launched for a first time to fail verification. The included debdiff contains patch with a new key from latest package version (that is in Debian Testing and Ubuntu Groovy) and makes the torbrowser-launcher work again.
[Test Case]
1. Use a clean, fully updated Ubuntu 20.04 system where torbrowser-launcher was not previously installed/configured.
2. Install the "torbrowser-launcher" package.
3. Run "Tor Browser" from a desktop menu (or "torbrowser-launcher" from terminal).
4. Wait for the Tor Browser archive to finish downloading, verifying and unpacking.
[Regression Potential]
None. This debdiff adds just the one patch mentioned above. |
[Impact]
The torbrowser-launcher package in Ubuntu 20.04 does not work *at all* on new installations (see bug #1856895), because of a Tor Browser Developers public key change (old key is not valid anymore) that causes Tor Browser archive downloaded by torbrowser-launcher when being launched for a first time to fail verification. The included debdiff contains patch with a new key from latest package version (that is in Debian Testing and Ubuntu Groovy) and makes the torbrowser-launcher work again.
[Test Case]
1. Use a clean, fully updated Ubuntu 20.04 system where torbrowser-launcher was not previously installed/configured.
2. Install the "torbrowser-launcher" package.
3. Run "Tor Browser" from a desktop menu (or "torbrowser-launcher" from terminal).
4. Wait for the Tor Browser archive to finish downloading, verifying and unpacking.
[Regression Potential]
There should be none. This debdiff adds just the one patch mentioned above. As mentioned, the developer key is used only when torbrowser-launcher is launched for a first time - to verify Tor Browser archive that is downloaded and unpacked (into user's home) by torbrowser-launcher. torbrowser updates are then handled by torbrowser itself, not by torbrowser-launcher. Subsequent Tor Browser updates are handled by Tor Browser itself, not by torbrowser-launcher and work fine even if the developer key shipped with torbrowser-launcher is incorrect. |
|
| 2020-09-24 12:06:36 |
AsciiWolf |
description |
[Impact]
The torbrowser-launcher package in Ubuntu 20.04 does not work *at all* on new installations (see bug #1856895), because of a Tor Browser Developers public key change (old key is not valid anymore) that causes Tor Browser archive downloaded by torbrowser-launcher when being launched for a first time to fail verification. The included debdiff contains patch with a new key from latest package version (that is in Debian Testing and Ubuntu Groovy) and makes the torbrowser-launcher work again.
[Test Case]
1. Use a clean, fully updated Ubuntu 20.04 system where torbrowser-launcher was not previously installed/configured.
2. Install the "torbrowser-launcher" package.
3. Run "Tor Browser" from a desktop menu (or "torbrowser-launcher" from terminal).
4. Wait for the Tor Browser archive to finish downloading, verifying and unpacking.
[Regression Potential]
There should be none. This debdiff adds just the one patch mentioned above. As mentioned, the developer key is used only when torbrowser-launcher is launched for a first time - to verify Tor Browser archive that is downloaded and unpacked (into user's home) by torbrowser-launcher. torbrowser updates are then handled by torbrowser itself, not by torbrowser-launcher. Subsequent Tor Browser updates are handled by Tor Browser itself, not by torbrowser-launcher and work fine even if the developer key shipped with torbrowser-launcher is incorrect. |
[Impact]
The torbrowser-launcher package in Ubuntu 20.04 does not work *at all* on new installations (see bug #1856895), because of a Tor Browser Developers public key change (old key is not valid anymore) that causes Tor Browser archive downloaded by torbrowser-launcher when being launched for a first time to fail verification. The included debdiff contains patch with a new key from latest package version (that is in Debian Testing and Ubuntu Groovy) and makes the torbrowser-launcher work again.
[Test Case]
1. Use a clean, fully updated Ubuntu 20.04 system where torbrowser-launcher was not previously installed/configured.
2. Install the "torbrowser-launcher" package.
3. Run "Tor Browser" from a desktop menu (or "torbrowser-launcher" from terminal).
4. Wait for the Tor Browser archive to finish downloading, verifying and unpacking.
[Regression Potential]
This debdiff adds just the one patch mentioned above. As mentioned, the developer key is used only when torbrowser-launcher is launched for a first time - to verify Tor Browser archive that is downloaded and unpacked (into user's home) by torbrowser-launcher. torbrowser updates are then handled by torbrowser itself, not by torbrowser-launcher. Subsequent Tor Browser updates are handled by Tor Browser itself, not by torbrowser-launcher and work fine even if the developer key shipped with torbrowser-launcher is incorrect. I am not aware of any regression this change could cause. |
|
| 2020-09-24 12:11:27 |
Thomas Ward |
bug |
|
|
added subscriber Thomas Ward |
| 2020-09-24 18:01:24 |
Thomas Ward |
nominated for series |
|
Ubuntu Focal |
|
| 2020-09-24 18:01:24 |
Thomas Ward |
bug task added |
|
torbrowser-launcher (Ubuntu Focal) |
|
| 2020-09-24 18:01:24 |
Thomas Ward |
nominated for series |
|
Ubuntu Groovy |
|
| 2020-09-24 18:01:24 |
Thomas Ward |
bug task added |
|
torbrowser-launcher (Ubuntu Groovy) |
|
| 2020-09-24 18:01:56 |
Thomas Ward |
torbrowser-launcher (Ubuntu Focal): assignee |
|
Thomas Ward (teward) |
|
| 2020-09-24 18:01:58 |
Thomas Ward |
torbrowser-launcher (Ubuntu Groovy): assignee |
|
Thomas Ward (teward) |
|
| 2020-09-24 18:02:01 |
Thomas Ward |
torbrowser-launcher (Ubuntu Focal): status |
New |
In Progress |
|
| 2020-09-24 18:02:03 |
Thomas Ward |
torbrowser-launcher (Ubuntu Groovy): status |
New |
In Progress |
|
| 2020-09-25 02:31:34 |
Thomas Ward |
torbrowser-launcher (Ubuntu Groovy): status |
In Progress |
Fix Released |
|
| 2020-09-25 02:31:36 |
Thomas Ward |
torbrowser-launcher (Ubuntu Groovy): assignee |
Thomas Ward (teward) |
|
|
| 2020-09-27 21:34:03 |
Thomas Ward |
summary |
[SRU] Backport patch to update Tor Browser Developers public key into Ubuntu 20.04 |
[SRU] Multiple issues with Tor Browser |
|
| 2020-09-27 21:34:11 |
Thomas Ward |
summary |
[SRU] Multiple issues with Tor Browser |
[SRU] Multiple issues with Tor Browser Launcher |
|
| 2020-09-27 21:36:19 |
Thomas Ward |
description |
[Impact]
The torbrowser-launcher package in Ubuntu 20.04 does not work *at all* on new installations (see bug #1856895), because of a Tor Browser Developers public key change (old key is not valid anymore) that causes Tor Browser archive downloaded by torbrowser-launcher when being launched for a first time to fail verification. The included debdiff contains patch with a new key from latest package version (that is in Debian Testing and Ubuntu Groovy) and makes the torbrowser-launcher work again.
[Test Case]
1. Use a clean, fully updated Ubuntu 20.04 system where torbrowser-launcher was not previously installed/configured.
2. Install the "torbrowser-launcher" package.
3. Run "Tor Browser" from a desktop menu (or "torbrowser-launcher" from terminal).
4. Wait for the Tor Browser archive to finish downloading, verifying and unpacking.
[Regression Potential]
This debdiff adds just the one patch mentioned above. As mentioned, the developer key is used only when torbrowser-launcher is launched for a first time - to verify Tor Browser archive that is downloaded and unpacked (into user's home) by torbrowser-launcher. torbrowser updates are then handled by torbrowser itself, not by torbrowser-launcher. Subsequent Tor Browser updates are handled by Tor Browser itself, not by torbrowser-launcher and work fine even if the developer key shipped with torbrowser-launcher is incorrect. I am not aware of any regression this change could cause. |
This bug is (now) a master bug for the SRU that also encompasses these issues:
Tor does not download and install; repeated signature verification failed:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1856895
Version checking error in torbrowser-launcher since Tor Browser 10.0 was released:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1896752
Apparmor profile prevents Tor Browser from loading libstdc++.so.6 since Tor Browser 10.0 was released:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897302
torbrowser-launcher has missing gnupg dependency:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897306 |
|
| 2020-09-27 21:38:59 |
Thomas Ward |
description |
This bug is (now) a master bug for the SRU that also encompasses these issues:
Tor does not download and install; repeated signature verification failed:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1856895
Version checking error in torbrowser-launcher since Tor Browser 10.0 was released:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1896752
Apparmor profile prevents Tor Browser from loading libstdc++.so.6 since Tor Browser 10.0 was released:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897302
torbrowser-launcher has missing gnupg dependency:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897306 |
This bug is (now) a master bug for the SRU that encompasses these issues:
Tor does not download and install; repeated signature verification failed:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1856895
Version checking error in torbrowser-launcher since Tor Browser 10.0 was released:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1896752
Apparmor profile prevents Tor Browser from loading libstdc++.so.6 since Tor Browser 10.0 was released:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897302
torbrowser-launcher has missing gnupg dependency:
https://bugs.launchpad.net/ubuntu/+source/torbrowser-launcher/+bug/1897306
All f the above issues are fixed in Groovy with the latest sync from Unstable. |
|
| 2020-09-28 13:39:49 |
Thomas Ward |
torbrowser-launcher (Ubuntu Focal): status |
In Progress |
Invalid |
|
| 2020-09-28 13:39:52 |
Thomas Ward |
removed subscriber Ubuntu Sponsors Team |
|
|
|
