zerotracepen (6.3)

  • Thunderbird: temporarily disable pdf.js in Zero Trace Pen 6.3 to fix CVE-2024-4367
    (zerotracepen/zerotracepen!1528)

    Closes issues:

    • Fix CVE-2024-4367 for Thunderbird in Zero Trace Pen 6.3 (zerotracepen/zerotracepen#20384)

    Commits:

    • Thunderbird: temporarily disable pdf.js in Zero Trace Pen 6.3 to fix CVE-2024-4367
    • Resolve "Upgrade to Tor Browser 13.0.15 based on 115.11" (zerotracepen/zerotracepen!1525)

      Closes issues:

      • Upgrade to Tor Browser 13.0.15 based on 115.11 (zerotracepen/zerotracepen#20375)

      Commits:

      • Fetch Tor Browser from our own archive
      • Upgrade Tor Browser to 13.0.15 (refs: zerotracepen#20375)
    • Upgrade to Linux 6.1.90-1 (zerotracepen/zerotracepen!1521)

      Closes issues:

      • stable branch FTBFS: Unable to locate package linux-headers-6.1.0-20-amd64
        (zerotracepen/zerotracepen#20382)
      • Upgrade Linux to 6.1.90-1 (DSA 5680-1) (zerotracepen/zerotracepen#20378)

      Commits:

      • fixing linenumbers of ublock autoupdate patch
      • Upgrade to Linux 6.1.0-21 (currently at version 6.1.90-1)
      • Bump snapshot of the "debian" APT archive to 2024050801
    • Revert "Install systemd-oomd" (zerotracepen/zerotracepen!1517)

      Commits:

      • Revert "Install systemd-oomd"
    • GitLab CI: Fix Ruff also checking files changed on stable (zerotracepen/zerotracepen!1514)

      Commits:

      • bin/test-utils/ruff: Also check uncommitted files
      • GitLab CI: Fix Ruff also checking files changed on stable
      • GitLab CI: Run Ruff Formatter
    • Update URLs: gitweb.torproject.org is deprecated (zerotracepen/zerotracepen!1509)

      Commits:

      • Update URLs: gitweb.torproject.org is deprecated
    • Stop listing deleted pages (zerotracepen/zerotracepen!1508)

      Commits:

      • Stop translating deleted pages
    • Upgrader: make "Restart later" the default option, instead of "Restart now"
      (zerotracepen/zerotracepen!1507)

      Closes issues:

      • Make "Restart later" the default option when the Upgrader currently defaults to
        "Restart now" (zerotracepen/zerotracepen#20346)

      Commits:

      • Make indentation consistent
      • Make comment markers reflect current reality
      • Update alignment
      • Upgrader: make "Restart later" the default option, instead of "Restart now"
    • Fix zerotracepen-spoof-mac blocking udev (zerotracepen/zerotracepen!1503)

      Closes issues:

      • Long delay during login when MAC spoofing has failed (zerotracepen/zerotracepen#17813)
      • Scenario "MAC address spoofing fails and the module is not removed" is fragile
        (zerotracepen/zerotracepen#20349)

      Commits:

      • Fix race between zerotracepen-spoof-mac and zerotracepen-unblock-network
      • Ensure positional arguments to notify-send are not interpreted as options
      • Improve MAC spoofing failed error message
      • Test suite: Add step "this test fails" for debugging purposes
      • Fix zerotracepen-spoof-mac blocking udev
    • Test suite: Fix set_browser_url (zerotracepen/zerotracepen!1502)

      Closes issues:

      • Scenario "Zero Trace Pen is localized for every tier-1 language" is fragile
        (zerotracepen/zerotracepen#20357)

      Commits:

      • Test suite: Fix set_browser_url
    • Test suite: Add debug output for #20356 (zerotracepen/zerotracepen!1501)

      Commits:

      • Test suite: Add debug output for #20356
    • Test suite: Add bookmark via Dogtail (zerotracepen/zerotracepen!1500)

      Closes issues:

      • Scenario "Persistent browser bookmarks" is fragile (zerotracepen/zerotracepen#20353)

      Commits:

      • Test suite: Add bookmark via Dogtail
    • Adapt kernel module matching for Linux 6.6+ (zerotracepen/zerotracepen!1499)

      Closes issues:

      • Linux v6.6 breaking change: module compression (zerotracepen/zerotracepen#20347)

      Commits:

      • Adapt kernel module matching for Linux 6.6+
    • locale-description always includes languages from TBB tarball
      (zerotracepen/zerotracepen!1498)

      Commits:

      • ruff: reformat
      • create tmpdir if it doesnt exist
      • only run doctests when running doctests
      • more ruff linting
      • fix ruff most severe complaints
      • clarify which functions are imported
      • handle ms just like other languages
      • integrate with TBB's contents
      • make ruff happy
      • add functions to get locales from TBB tarball
    • tps-frontend: Add ErrorDezerotracepen class (zerotracepen/zerotracepen!1497)

      Commits:

      • tps-frontend: Add ErrorDezerotracepen class
    • Rotate Whisperback onion address (zerotracepen/zerotracepen!1496)

      Commits:

      • Rotate Whisperback onion address
    • workaround printers configured in Zero Trace Pen 5 (zerotracepen/zerotracepen!1484)

      Closes issues:

      • Cannot add printer on 6.0 if CUPS configuration persisted from 5.x
        (zerotracepen/zerotracepen#20271)

      Commits:

      • Fix log call
      • fix permissions
      • only update configuration when really needed
      • workaround printers configured in Zero Trace Pen 5
    • Install systemd-oomd (zerotracepen/zerotracepen!1479)

      Closes issues:

      • Consider using systemd-oomd (zerotracepen/zerotracepen#19454)

      Commits:

      • Start root terminal in its own systemd scope
      • Start root terminal as part of app-org.gnome.Terminal.slice
      • Install systemd-oomd
    • GitLab CI: Don't run Black and Bandit in addition to Ruff (zerotracepen/zerotracepen!1448)

      Commits:

      • ruff: reformat
      • handles directories correctly
      • ruff: specify executable path
      • ruff format creates no junit report
      • GitLab CI: Don't run Black and Bandit in addition to Ruff
      • GitLab CI: Run Ruff Formatter