<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Apr 24, 2016 at 10:45 PM, Georg Koppen <span dir="ltr"><<a href="mailto:gk@torproject.org" target="_blank">gk@torproject.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
we are pleased to accounce that Tor Browser 6.0a5 is ready for testing<br>
and bundles can be found on:<br>
<br>
<a href="https://people.torproject.org/~gk/builds/6.0a5-build3/" rel="noreferrer" target="_blank">https://people.torproject.org/~gk/builds/6.0a5-build3/</a><br>
<br>
This will probably be our last alpha release before the stable 6.0 and<br>
it contains a bunch of noteworthy changes.<br>
<br>
First, we switched the browser to Firefox ESR 45 and rebased our old<br>
patches/wrote new ones were necessary.<br>
<br>
Second, we ship a new Tor alpha version, 0.2.8.2, which makes meek<br>
usable again and contains a number of other improvements/stability fixes.<br>
<br>
Third, this alpha release will introduce code signing for OS X in order<br>
to cope with Gatekeeper. There were bundle layout changes necessary to<br>
adhere to code signing requirements. Please test that everything is<br>
still working as expected if you happen to have an OS X machine.<br>
<br>
The fourth highlight is the fix for an installer related DLL hijacking<br>
vulnerability. This vulnerability made it necessary to deploy a newer<br>
NSIS version to create our .exe files. Please test that the installer is<br>
still working as expected if you happen to have a Windows machine.<br>
<br>
Here is the full changelog since 6.0a4:<br>
<br>
Tor Browser 6.0a5 -- April 27 2016<br>
* All Platforms<br>
* Update Firefox to 45.1.0esr<br>
* Update Tor to 0.2.8.2-alpha<br>
* Update Torbutton to 1.9.5.3<br>
* Bug 18466: Make Torbutton compatible with Firefox ESR 45<br>
* Translation updates<br>
* Update Tor Launcher to 0.2.9.1<br>
* Bug 13252: Do not store data in the application bundle<br>
* Bug 10534: Don't advertise the help desk directly anymore<br>
* Translation updates<br>
* Update HTTPS-Everywhere to 5.1.6<br>
* Update NoScript to 2.9.0.11<br>
* Update meek to 0.22 (tag 0.22-18371-2)<br>
* Bug 18371: Symlinks are incompatible with Gatekeeper signing<br>
* Bug 15197 and child tickets: Rebase Tor Browser patches to ESR 45<br>
* Bug 18042: Disable SHA1 certificate support<br>
* Bug 18821: Disable libmdns support for desktop and mobile<br>
* Bug 18848: Disable additional welcome URL shown on first start<br>
* Bug 14970: Exempt our extensions from signing requirement<br>
* Bug 16328: Disable MediaDevices.enumerateDevices<br>
* Bug 16673: Disable HTTP Alternative-Services<br>
* Bug 17167: Disable Mozilla's tracking protection<br>
* Bug 18603: Disable performance-based WebGL fingerprinting option<br>
* Bug 18738: Disable Selfsupport and Unified Telemetry<br>
* Bug 18799: Disable Network Tickler<br>
* Bug 18800: Remove DNS lookup in lockfile code<br>
* Bug 18801: Disable dom.push preferences<br>
* Bug 18802: Remove the JS-based Flash VM (Shumway)<br>
* Bug 18863: Disable MozTCPSocket explicitly<br>
* Bug 15640: Place Canvas MediaStream behind site permission<br>
* Bug 16326: Verify cache isolation for Request and Fetch APIs<br>
* Bug 18741: Fix OCSP and favicon isolation for ESR 45<br>
* Bug 16998: Disable <link rel="preconnect"> for now<br>
* Bug 18726: Add new default obfs4 bridge (GreenBelt)<br>
* Windows<br>
* Bug 13419: Support ICU in Windows builds<br>
* Bug 16874: Fix broken <a href="https://sports.yahoo.com/dailyfantasy" rel="noreferrer" target="_blank">https://sports.yahoo.com/dailyfantasy</a> page<br>
* Bug 18767: Context menu is broken on Windows in ESR 45 based Tor<br>
Browser<br>
* OS X<br>
* Bug 6540: Support OS X Gatekeeper<br>
* Bug 13252: Tor Browser should not store data in the application bundle<br>
* Build System<br>
* All Platforms<br>
* Bug 18127: Add LXC support for building with Debian guest VMs<br>
* Bug 16224: Don't use BUILD_HOSTNAME anymore in Firefox builds<br>
* Windows<br>
* Bug 17895: Use NSIS 2.51 for installer to avoid DLL hijacking<br>
* Bug 18290: Bump mingw-w64 commit we use<br>
* OS X<br>
* Bug 18331: Update toolchain for Firefox 45 ESR<br>
* Bug 18690: Switch to Debian Wheezy guest VMs<br>
* Linux<br>
* Bug 18699: Stripping fails due to obsolete Browser/components<br>
directory<br>
* Bug 18698: Include libgconf2-dev for our Linux builds<br>
<span class="HOEnZb"><font color="#888888"><br>
Georg<br>
<br>
</font></span><br>_______________________________________________<br>
tor-qa mailing list<br>
<a href="mailto:tor-qa@lists.torproject.org">tor-qa@lists.torproject.org</a><br>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa" rel="noreferrer" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa</a><br>
<br></blockquote></div><br>Testing on OSX 10.11.3. I still get a gate keeper warning that the developer is unidentified. (See attached.)<br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><span style="font-family:arial;font-size:small">Sherief Alaa</span><br><div dir="ltr" style="font-family:arial;font-size:small"><div>pgp 0x8623B882</div></div></div></div>
</div></div>