ooni / probe-cli
71%

DEFAULT BRANCH: master
Repo Added
Files 699
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH master
branch: master
CHANGE BRANCH
x

coverage: 71.463%. Remained the same
41580808582

push

github

web-flow 
Brotli and utls dependency updates for probe-cli (#1862)

## Checklist

- [X] I have read the [contribution
guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md)
- [ ] reference issue for this pull request: <!-- add URL here -->
- [ ] if you changed anything related to how experiments work and you
need to reflect these changes in the ooni/spec repository, please link
to the related ooni/spec pull request: <!-- add URL here -->
- [ ] if you changed code inside an experiment, make sure you bump its
version number

<!-- Reminder: Location of the issue tracker:
https://github.com/ooni/probe -->

## Description

After privately reporting on Friday some security-relevant dependency
updates for ooni/probe-cli, I've determined them to be low severity on
the Go language.

1. Dependency yawning/utls was last updated by the author on May 11,
2021.

aagbsn did a quality job on that aspect, so I decided to use it as a
basis for my changes.

chore(netxlite): use refraction-networking/utls instead of yawning/utls:
https://github.com/ooni/probe-cli/commit/<a class=hub.com/ooni/probe-cli/commit/c4fd3068dc955ff772e8b9a9b2ce2fa8576cb426">c4fd3068d

Old versions of utls have security advisories:
https://github.com/refraction-networking/utls/security

2. I've prepared a commit (based on
c4fd3068dc955ff772e8b9a9b2ce2fa8576cb426) that updates:
- [github.com/andybalholm/brotli](http://github.com/andybalholm/brotli)
v1.1.1 to v1.2.7
- [github.com/klauspost/compress](http://github.com/klauspost/compress)
v1.19.1 to v1.20.3

The Brotli update includes an important upstream security fix:

https://github.com/andybalholm/brotli/commit/33c2a9884

This corresponds to the fix integrated into wider work-in-progress
ooni/probe-cli at:
https://github.com/ooni/probe-cli/commit/cefd4d70c


https://www.sweet.security/blog/http2shell-sweet-security-confirms-brotli-vulnerability-also-affects-native-go-implementations

My two cents. Thank you.

---------

Co-a... (continued)

1 of 1 new or added line in 1 file covered. (100.0%)

2 existing lines in 1 file now uncovered.

23765 of 33255 relevant lines covered (71.46%)

38.69 hits per line

Relevant lines Covered
33255 RELEVANT LINES 23765 COVERED LINES
38.69 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
41580808582 master Brotli and utls dependency updates for probe-cli (#1862) ## Checklist - [X] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [ ] reference issue for this pull request: <!-- add URL here -... push web-flow github
71.46
41465967460 master chore: update user agent string to recent chrome version (#1861) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [x] reference issue for this pull request: OOPRIV-192 ... push web-flow github
71.46
40502795724 master feat: expose version and engine in oonimkall for callers (#1860) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [x] reference issue for this pull request: https://git... push web-flow github
71.46
39786002423 master chore: update version to v3.32.0-alpha (#1858) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [x] reference issue for this pull request: https://github.com/ooni/probe... push web-flow github
71.46
39779255498 master fix: do not submit psiphon measurements when psiphon is disabled (#1857) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [x] reference issue for this pull request: #18... push web-flow github
71.46
39751615980 master adding scrubber for errors in tlsmiddlebox (#1855) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [ ] reference issue for this pull request: <!-- add URL here --> - [... push web-flow github
71.45
39608757800 master Accomodate CVE-2026-111943 in release 3.31.0 (#1854) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [x] reference issue for this pull request: #1833 - [ ] if you cha... push web-flow github
71.45
39599361403 master Update generated CA bundle to remove eMudhra after intermediate CA compromise (#1853) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [ ] reference issue for this pull... push web-flow github
71.45
39587137785 master fix: upgrade maven plugin version for uploads to 0.12.0 (#1852) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [x] reference issue for this pull request: https://gith... push web-flow github
71.45
39577751049 master Feature/tlsmiddleboxdomain (#1847) ## Checklist - [x] I have read the [contribution guidelines](https://github.com/ooni/probe-cli/blob/master/CONTRIBUTING.md) - [ ] reference issue for this pull request: <!-- add URL here --> - [ ] if you change... push web-flow github
71.44
See All Builds (5196)