[tor-announce] Tor Browser 8.0.2 is released

[Nicolas Vigier]

Tor Browser 8.0.2 is now available from the Tor Browser Project page [1]
and also from our distribution directory [2].

    1: https://www.torproject.org/download/download-easy.html
    2: https://www.torproject.org/dist/torbrowser/8.0.2/

This release features important security updates [3] to Firefox. We
picked up the necessary patches, but because we needed to start building
before Mozilla was ready with a first candidate build, we did not bump
the Firefox version to 60.2.2esr. Thus, users are fine with Tor Browser
8.0.2 even though the Firefox version is 60.2.1esr.

    3: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/


_Known Issues_

We already collected a number of unresolved bugs since Tor Browser 7.5.6
and tagged them with our tbb-8.0-issues [4] keyword to keep them on our
radar. The most important current issues are:

    4: https://trac.torproject.org/projects/tor/query?status=!closed&keywords=~tbb-8.0-issues

  * WebGL is broken [5] right now.

    5: https://trac.torproject.org/projects/tor/ticket/27290

  * Accessibility support is broken [6] on Windows. We are considering
    options to address this issue right now.

    6: https://trac.torproject.org/projects/tor/ticket/27503

  * Tor Browser 8 is not starting anymore on some older Ubuntu/Mint Linux
    systems [7]. We still have issues to reproduce this bug but hope we
    can fix it in the next release.

    7: https://trac.torproject.org/projects/tor/ticket/27508

  * Tor Browser 8 is not starting anymore on CentOS 6 [8]. We have a
    fix in our 8.5a2 release to give it a bit of testing. Users affected
    by this bug may resort to that alpha version for now. We plan to
    backport the patch in the next stable release.

    8: https://trac.torproject.org/projects/tor/ticket/27552

  * NoScript is not saving per-site permissions anymore [9]. We have a
    potential patch for this bug in our 8.5a2 release as well and plan
    to backport it, too, in the next stable release in case no issues
    with it are found.

    9: https://trac.torproject.org/projects/tor/ticket/27175

  * While preparing the 8.0.2 release we encountered intermittent
    reproducibility failures [10] for Linux (64bit) bundles.

    10: https://trac.torproject.org/projects/tor/ticket/27937


The full changelog since Tor Browser 8.0.1 is:

 * All platforms
   * Update Firefox to 60.2.1esr
   * Backport fix for Mozilla bug 1493900 and 1493903
 * OS X
   * Backport fix for Mozilla bug 1489785 for macOS 10.14 compatibility
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-announce/attachments/20181005/1fdd3faa/attachment.sig>