[tor-commits] [tor-browser-bundle/hardened-builds] Release preparations for 6.0a3-hardened

[gk at torproject.org]

commit b6e860d97f33234e0234d1e60588375dd256a090
Author: Georg Koppen <gk at torproject.org>
Date:   Mon Mar 7 08:04:22 2016 +0000

    Release preparations for 6.0a3-hardened
---
 Bundle-Data/Docs/ChangeLog.txt    | 20 ++++++++++++++++++++
 gitian/versions.alpha             | 16 ++++++++--------
 tools/update-responses/config.yml | 12 ++++++------
 3 files changed, 34 insertions(+), 14 deletions(-)

diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index d115483..2278042 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,23 @@
+Tor Browser 6.0a3-hardened -- March 8
+ * All Platforms
+   * Update Firefox to 38.7.0esr
+   * Update Tor to 0.2.8.1-alpha
+   * Update OpenSSL to 1.0.1s
+   * Update NoScript to 2.9.0.4
+   * Update HTTPS Everywhere to 5.1.4
+   * Update Torbutton to 1.9.5.1
+     * Bug 16990: Don't mishandle multiline commands
+     * Bug 18144: about:tor update arrow position is wrong
+     * Bug 16725: Allow resizing with non-default homepage
+     * Bug 16917: Allow users to more easily set a non-tor SSH proxy
+     * Translation updates
+   * Bug 18030: Isolate favicon requests on Page Info dialog
+   * Bug 18297: Use separate Noto JP,KR,SC,TC fonts
+   * Bug 18170: Make sure the homepage is shown after an update as well
+   * Bug 16728: Add test cases for favicon isolation
+ * Windows
+   * Bug 18292: Disable staged updates on Windows
+
 Tor Browser 6.0a2-hardened -- February 15 2016
  * All Platforms
    * Update Firefox to 38.6.1esr
diff --git a/gitian/versions.alpha b/gitian/versions.alpha
index 0ddaa65..b46c736 100755
--- a/gitian/versions.alpha
+++ b/gitian/versions.alpha
@@ -11,15 +11,15 @@ MULTI_LINGUAL=1
 
 VERIFY_TAGS=1
 
-FIREFOX_VERSION=38.6.1esr
+FIREFOX_VERSION=38.7.0esr
 
 TORBROWSER_UPDATE_CHANNEL=hardened
 
 TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.0-1-build1
-TOR_TAG=tor-0.2.7.6
+TOR_TAG=tor-0.2.8.1-alpha
 TORLAUNCHER_TAG=0.2.8.3
-TORBUTTON_TAG=1.9.5
-HTTPSE_TAG=5.1.2
+TORBUTTON_TAG=1.9.5.1
+HTTPSE_TAG=5.1.4
 NSIS_TAG=v0.3.1
 ZLIB_TAG=v1.2.8
 LIBEVENT_TAG=release-2.0.22-stable
@@ -42,7 +42,7 @@ NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2
 
 GITIAN_TAG=tor-browser-builder-3.x-9
 
-OPENSSL_VER=1.0.1q
+OPENSSL_VER=1.0.1s
 GMP_VER=5.1.3
 FIREFOX_LANG_VER=$FIREFOX_VERSION
 FIREFOX_LANG_BUILD=build1
@@ -62,7 +62,7 @@ GO_VER=1.4.2
 ## File names for the source packages
 OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz
 GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2
-NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.3-fx+fn+sm.xpi
+NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.4-fx+fn+sm.xpi
 TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz
 TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz
 OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz
@@ -88,13 +88,13 @@ NOTOSCFONT_PACKAGE=NotoSansSC-Regular.otf
 NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf
 
 # Hashes for packages with weak sigs or no sigs
-OPENSSL_HASH=b3658b84e9ea606a5ded3c972a5517cd785282e7ea86b20c78aa4b773a047fb7
+OPENSSL_HASH=e7e81d82f3cd538ab0cdba494006d44aab9dd96b7f6233ce9971fb7c7916d511
 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf
 OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc
 TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645
 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9
-NOSCRIPT_HASH=097298d5004c1f384f3af508cb1915921145f0f962e78c977a62f405bd7eb2d9
+NOSCRIPT_HASH=94d036ff45116023bde97e6dee6c79daf2d28804764bfa8937f5d4d3463173f5
 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c
 ARGPARSE_HASH=ddaf4b0a618335a32b6664d4ae038a1de8fbada3b25033f9021510ed2b3941a4
diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml
index 7b59296..2c9e0a8 100644
--- a/tools/update-responses/config.yml
+++ b/tools/update-responses/config.yml
@@ -9,7 +9,7 @@ build_targets:
     osx32: Darwin_x86-gcc3
     osx64: Darwin_x86_64-gcc3
 channels:
-    hardened: 6.0a2-hardened
+    hardened: 6.0a3-hardened
     release: 5.0
 versions:
     5.0:
@@ -23,12 +23,12 @@ versions:
         osx32:
             minSupportedOSVersion: 10.8
             detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#updating
-    6.0a2-hardened:
-        platformVersion: 38.6.1
-        detailsURL: https://blog.torproject.org/blog/tor-browser-60a2-hardened-released
-        download_url: https://www.torproject.org/dist/torbrowser/6.0a2-hardened
+    6.0a3-hardened:
+        platformVersion: 38.7.0
+        detailsURL: https://blog.torproject.org/blog/tor-browser-60a3-hardened-released
+        download_url: https://www.torproject.org/dist/torbrowser/6.0a3-hardened
         incremental_from:
-          - 6.0a1-hardened
+          - 6.0a2-hardened
         migrate_archs:
           osx32: osx64
         osx32: