Opened 6 years ago

Closed 2 years ago

Last modified 2 years ago

#10096 closed enhancement (fixed)

Verify language packs after downloading them when building with Gitian

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-3.0, gitian, tbb-gitian
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

We should verify that we actually get the language packs we really want to get when running the fetch-inputs script. That serves two purposes: 1) it is a defense in depth against attackers that may be able to modify the contents of the language pack but don't own Mozilla's signing key 2) We may avoid problems with old language packs that somehow slipped in just before starting a new TBB build.

Child Tickets

Change History (3)

comment:1 Changed 5 years ago by erinn

Component: Tor bundles/installationTor Browser
Keywords: tbb-gitian added
Owner: changed from erinn to tbb-team

comment:2 Changed 2 years ago by gk

Resolution: fixed
Severity: Blocker
Status: newclosed

This is fixed in tor-browser-build.

comment:3 Changed 2 years ago by gk

Severity: BlockerNormal
Note: See TracTickets for help on using tickets.