[tbb-commits] [tor-browser-bundle/hardened-builds] Release preparations for 6.5a3-hardened

[gk at torproject.org]

commit 8c2784c6b486bbe6f4abf81278dee9e892dcb382
Author: Georg Koppen <gk at torproject.org>
Date:   Mon Sep 19 07:19:58 2016 +0000

    Release preparations for 6.5a3-hardened
---
 Bundle-Data/Docs/ChangeLog.txt    | 36 ++++++++++++++++++++++++++++++++++++
 gitian/versions.alpha             | 16 ++++++++--------
 tools/update-responses/config.yml | 10 +++++-----
 3 files changed, 49 insertions(+), 13 deletions(-)

diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index 2cdc4b7..20f120b 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,39 @@
+Tor Browser 6.5a3 -- September 20 2016
+ * All Platforms
+   * Update Firefox to 45.4.0esr
+   * Update Tor to 0.2.9.2-alpha
+   * Update OpenSSL to 1.0.2h (bug 20095)
+   * Update Torbutton to 1.9.6.4
+     * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git
+     * Bug 17767: Make "JavaScript disabled" more visible in Security Slider
+     * Bug 18589: Clear site security settings during New Identity
+     * Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times
+     * Bug 19837: Whitelist internal URLs that Firefox requires for media
+     * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic
+     * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6
+     * Bug 14271: Make Torbutton work with Unix Domain Socket option
+     * Translation updates
+   * Update Tor Launcher to 0.2.11
+     * Bug 14272: Make Tor Launcher work with Unix Domain Socket option
+     * Bug 19568: Set CurProcD for Thunderbird/Instantbird
+     * Bug 19432: Remove special handling for Instantbird/Thunderbird
+     * Translation updates
+   * Update HTTPS-Everywhere to 5.2.4
+   * Update NoScript to 2.9.0.14
+   * Bug 19851: Fix ASan error by upgrading GCC to 5.4.0
+   * Bug 17858: Fix creation of incremental MARs for hardened builds
+   * Bug 14273: Backport patches for Unix Domain Socket support
+   * Bug 19890: Disable installation of system addons
+   * Bug 17334: Spoof referrer when leaving a .onion domain
+   * Bug 20092: Rotate ports for default obfs4 bridges
+   * Bug 20040: Add update support for unpacked HTTPS Everywhere
+   * Bug 20118: Don't unpack HTTPS Everywhere anymore
+   * Bug 19336+19835: Enhance about:tbupdate page
+ * Build system
+   * All platforms
+     * Bug 20133: Don't apply OpenSSL patch anymore
+     * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version
+
 Tor Browser 6.5a2-hardened -- August 3
  * All Platforms
    * Update Firefox to 45.3.0esr
diff --git a/gitian/versions.alpha b/gitian/versions.alpha
index 538ad0e..fbb6a29 100755
--- a/gitian/versions.alpha
+++ b/gitian/versions.alpha
@@ -14,15 +14,15 @@ DATA_OUTSIDE_APP_DIR=1
 
 VERIFY_TAGS=1
 
-FIREFOX_VERSION=45.3.0esr
+FIREFOX_VERSION=45.4.0esr
 
 TORBROWSER_UPDATE_CHANNEL=hardened
 
-TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1
-TOR_TAG=tor-0.2.8.5-rc
-TORLAUNCHER_TAG=0.2.8.5
-TORBUTTON_TAG=1.9.6.1
-HTTPSE_TAG=5.2.1
+TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2
+TOR_TAG=tor-0.2.9.2-alpha
+TORLAUNCHER_TAG=0.2.11
+TORBUTTON_TAG=1.9.6.4
+HTTPSE_TAG=5.2.4
 NSIS_TAG=v0.3.1
 ZLIB_TAG=v1.2.8
 LIBEVENT_TAG=release-2.0.22-stable
@@ -74,7 +74,7 @@ ELFUTILS_VER=0.160
 ## File names for the source packages
 OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz
 GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2
-NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.12-fx+fn+sm.xpi
+NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.14-fx+fn+sm.xpi
 TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz
 CCTOOLS_PACKAGE=cctools.tar.gz
 OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz
@@ -109,7 +109,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf
 OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc
 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9
-NOSCRIPT_HASH=3fa641dcb60455c950cef0c15effa8ca060b3b05405f46f55cbdb922929027e7
+NOSCRIPT_HASH=39bc71be20c318578239ea791c0341dbfcd13b33559af080cea386eeec08b337
 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4
 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c
diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml
index 77c8b46..f7edb24 100644
--- a/tools/update-responses/config.yml
+++ b/tools/update-responses/config.yml
@@ -15,7 +15,7 @@ build_targets:
     osx32: Darwin_x86-gcc3
     osx64: Darwin_x86_64-gcc3
 channels:
-    hardened: 6.5a2-hardened
+    hardened: 6.5a3-hardened
     release: 6.0.1
 versions:
     6.0.1:
@@ -28,11 +28,11 @@ versions:
         osx32:
             minSupportedOSVersion: 10.8
             detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#updating
-    6.5a2-hardened:
-        platformVersion: 45.3.0
-        detailsURL: https://blog.torproject.org/blog/tor-browser-65a2-hardened-released
+    6.5a3-hardened:
+        platformVersion: 45.4.0
+        detailsURL: https://blog.torproject.org/blog/tor-browser-65a3-hardened-released
         incremental_from:
-          - 6.5a1-hardened
+          - 6.5a2-hardened
         migrate_archs:
           osx32: osx64
         osx32: