[tbb-commits] [tor-browser-bundle/hardened-builds] Release preparations for 6.5a2-hardened
gk at torproject.org
gk at torproject.org
Mon Aug 1 09:44:58 UTC 2016
commit 4daeed06ac415ba19617cebfb41b5fe7d26c1fcd
Author: Georg Koppen <gk at torproject.org>
Date: Mon Aug 1 09:44:41 2016 +0000
Release preparations for 6.5a2-hardened
Changelog update, versions bumps, config.yml update
---
Bundle-Data/Docs/ChangeLog.txt | 33 +++++++++++++++++++++++++++++++++
gitian/versions.alpha | 14 +++++++-------
tools/update-responses/config.yml | 12 ++++++------
3 files changed, 46 insertions(+), 13 deletions(-)
diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index 40a36c9..2cdc4b7 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,36 @@
+Tor Browser 6.5a2-hardened -- August 3
+ * All Platforms
+ * Update Firefox to 45.3.0esr
+ * Update Tor to tor-0.2.8.5-rc
+ * Update Torbutton to 1.9.6.1
+ * Bug 19689: Use proper parent window for plugin prompt
+ * Bug 19206: Avoid SOCKS auth and NEWNYM collisions when sharing a tor client
+ * Bug 19417: Disable asm.js (but add code to clear on New Identity if enabled)
+ * Bug 19273: Improve external app launch handling and associated warnings
+ * Bug 8725: Block addon resource and url fingerprinting with nsIContentPolicy
+ * Update HTTPS-Everywhere to 5.2.1
+ * Update NoScript to 2.9.0.12
+ * Bug 17406: Include Selfrando into our hardened builds
+ * Bug 19417: Disable asmjs for now
+ * Bug 19715: Disable the meek-google pluggable transport option
+ * Bug 19714: Remove mercurius4 obfs4 bridge
+ * Bug 19585: Fix regression test for keyboard layout fingerprinting
+ * Bug 19515: Tor Browser is crashing in graphics code
+ * Bug 18513: Favicon requests can bypass New Identity
+ * Bug 19273: Write C++ patch for external app launch handling
+ * Bug 16998: Isolate preconnect requests to URL bar domain
+ * Bug 18923: Add script to run all Tor Browser regression tests
+ * Bug 19478: Prevent millisecond resolution leaks in File API
+ * Bug 19401: Fix broken PDF download button
+ * Bug 19411: Don't show update icon if a partial update failed
+ * Bug 19400: Back out GCC bug workaround to avoid asmjs crash
+ * Bug 19735: Switch default search engine to DuckDuckGo
+ * Bug 19276: Disable Xrender due to possible performance regressions
+ * Bug 19725: Remove old updater files left on disk after upgrade to 6.x
+ * Build System
+ * All Platforms
+ * Bug 19703: Upgrade Go to 1.6.3
+
Tor Browser 6.5a1-hardened -- June 8
* All Platforms
* Update Firefox to 45.2.0esr
diff --git a/gitian/versions.alpha b/gitian/versions.alpha
index 29595cc..dba74e7 100755
--- a/gitian/versions.alpha
+++ b/gitian/versions.alpha
@@ -14,15 +14,15 @@ DATA_OUTSIDE_APP_DIR=1
VERIFY_TAGS=1
-FIREFOX_VERSION=45.2.0esr
+FIREFOX_VERSION=45.3.0esr
TORBROWSER_UPDATE_CHANNEL=hardened
TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1
-TOR_TAG=tor-0.2.8.3-alpha
+TOR_TAG=tor-0.2.8.5-rc
TORLAUNCHER_TAG=0.2.8.5
-TORBUTTON_TAG=1.9.6
-HTTPSE_TAG=5.1.9
+TORBUTTON_TAG=1.9.6.1
+HTTPSE_TAG=5.2.1
NSIS_TAG=v0.3.1
ZLIB_TAG=v1.2.8
LIBEVENT_TAG=release-2.0.22-stable
@@ -51,7 +51,7 @@ GITIAN_TAG=tor-browser-builder-4-1
OPENSSL_VER=1.0.1t
GMP_VER=5.1.3
FIREFOX_LANG_VER=$FIREFOX_VERSION
-FIREFOX_LANG_BUILD=build2
+FIREFOX_LANG_BUILD=build1
BINUTILS_VER=2.24
GCC_VER=5.2.0
CLANG_VER=r247539
@@ -72,7 +72,7 @@ NSIS_VER=2.51
## File names for the source packages
OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz
GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2
-NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.11-fn+sm+fx.xpi
+NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.12-fx+fn+sm.xpi
TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz
CCTOOLS_PACKAGE=cctools.tar.gz
OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz
@@ -106,7 +106,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf
OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc
TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9
-NOSCRIPT_HASH=fdd965a69188ac651b08a7d3ada54821a89db10a4685aa73ba59edc0b8243390
+NOSCRIPT_HASH=3fa641dcb60455c950cef0c15effa8ca060b3b05405f46f55cbdb922929027e7
CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4
MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c
diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml
index 179f882..8eaeae6 100644
--- a/tools/update-responses/config.yml
+++ b/tools/update-responses/config.yml
@@ -12,7 +12,7 @@ build_targets:
osx32: Darwin_x86-gcc3
osx64: Darwin_x86_64-gcc3
channels:
- hardened: 6.5a1-hardened
+ hardened: 6.5a2-hardened
release: 6.0.1
versions:
6.0.1:
@@ -26,12 +26,12 @@ versions:
osx32:
minSupportedOSVersion: 10.8
detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#updating
- 6.5a1-hardened:
- platformVersion: 45.2.0
- detailsURL: https://blog.torproject.org/blog/tor-browser-65a1-hardened-released
- download_url: https://cdn.torproject.org/aus1/torbrowser/6.5a1-hardened
+ 6.5a2-hardened:
+ platformVersion: 45.3.0
+ detailsURL: https://blog.torproject.org/blog/tor-browser-65a2-hardened-released
+ download_url: https://cdn.torproject.org/aus1/torbrowser/6.5a2-hardened
incremental_from:
- - 6.0a5-hardened
+ - 6.5a1-hardened
migrate_archs:
osx32: osx64
osx32:
More information about the tbb-commits
mailing list