August 2015 - tbb-commits - lists.torproject.org

[tor-browser-bundle/master] Bump stable versions
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit 8bc8d7bca0eaa3f6eac4133d7984e49caa1c9796 Author: Georg Koppen <gk(a)torproject.org> Date: Sat Aug 8 10:18:39 2015 +0000 Bump stable versions --- gitian/versions | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/gitian/versions b/gitian/versions index cea6029..ebed0e0 100755 --- a/gitian/versions +++ b/gitian/versions @@ -4,15 +4,15 @@ BUILD_PT_BUNDLES=1 VERIFY_TAGS=1 -FIREFOX_VERSION=31.7.0esr +FIREFOX_VERSION=38.2.0esr TORBROWSER_UPDATE_CHANNEL=release -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-2-build1 -TOR_TAG=tor-0.2.6.9 -TORLAUNCHER_TAG=0.2.7.5 -TORBUTTON_TAG=1.9.2.6 -HTTPSE_TAG=5.0.5 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.0-1-build1 +TOR_TAG=tor-0.2.6.10 +TORLAUNCHER_TAG=0.2.7.7 +TORBUTTON_TAG=1.9.3.2 +HTTPSE_TAG=5.0.7 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.21-stable @@ -25,7 +25,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 GOPTLIB_TAG=0.2 -MEEK_TAG=0.18 +MEEK_TAG=0.20 FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6 GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de GOSIPHASH_TAG=42ba037e748c9062a75e0924705c43b893edefcd @@ -36,7 +36,7 @@ NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2 GITIAN_TAG=tor-browser-builder-3.x-8 -OPENSSL_VER=1.0.1o +OPENSSL_VER=1.0.1p GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build2 @@ -59,7 +59,7 @@ NOTOCJKFONT_VER=1.004 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.26-sm+fn+fx.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.34-sm+fn+fx.xpi TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -83,13 +83,13 @@ GO_PACKAGE=go${GO_VER}.src.tar.gz NOTOCJKFONT_PACKAGE=NotoSansCJKsc-Regular.otf # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=16e678c6a05f2502811e075f2c4059ac01c878d091c9c585afc49ebc541f7b13 +OPENSSL_HASH=bd5ee6803165c0fb60bbecbacacf244f1f90d2aa0d71353af610c29121e9b2f1 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=06d9fa6093378682a7fabfc0b2d156dfafcfda749ddd802970ce14d1860e6a3e +NOSCRIPT_HASH=d17e3eeb8cc6ddc6c6cabd002184eced5c8cf061c9d337bac2085e7d2daceacd MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c ARGPARSE_HASH=ddaf4b0a618335a32b6664d4ae038a1de8fbada3b25033f9021510ed2b3941a4

1 0

[tor-browser-bundle/master] Update changelog; version bump for alpha
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit c490ddd39f0ed564caab3819a1e033bb91ff60f2 Author: Georg Koppen <gk(a)torproject.org> Date: Sat Aug 8 10:09:17 2015 +0000 Update changelog; version bump for alpha --- Bundle-Data/Docs/ChangeLog.txt | 1 + gitian/versions.alpha | 14 +++++++------- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 1270095..10fc5a1 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -15,6 +15,7 @@ Tor Browser 5.5a1 -- August 11 2015 * Bug 16715: Use ThreadsafeIsCallerChrome() instead of IsCallerChrome() * Bug 16572: Verify cache isolation for XMLHttpRequests in Web Workers * Bug 16311: Fix navigation timing in ESR 38 + * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent (fixup) Tor Browser 5.0 -- August 11 2015 * All Platforms diff --git a/gitian/versions.alpha b/gitian/versions.alpha index d4dece0..840e8b9 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -4,14 +4,14 @@ BUILD_PT_BUNDLES=1 VERIFY_TAGS=1 -FIREFOX_VERSION=38.1.0esr +FIREFOX_VERSION=38.2.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.0-1-build3 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.5-1-build1 TOR_TAG=tor-0.2.7.2-alpha -TORLAUNCHER_TAG=0.2.7.6 -TORBUTTON_TAG=1.9.3.1 +TORLAUNCHER_TAG=0.2.7.7 +TORBUTTON_TAG=1.9.3.3 HTTPSE_TAG=5.0.7 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 @@ -39,7 +39,7 @@ GITIAN_TAG=tor-browser-builder-3.x-8 OPENSSL_VER=1.0.1p GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION -FIREFOX_LANG_BUILD=build1 +FIREFOX_LANG_BUILD=build2 BINUTILS_VER=2.24 GCC_VER=5.1.0 PYTHON_VER=2.7.5 @@ -59,7 +59,7 @@ NOTOCJKFONT_VER=1.004 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.31-sm+fn+fx.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.34-sm+fn+fx.xpi TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -89,7 +89,7 @@ OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=151339f3ba663a527b2bf7ce88a4ea1379833b7ac3b6277cdf67f6ab5a33af1b +NOSCRIPT_HASH=d17e3eeb8cc6ddc6c6cabd002184eced5c8cf061c9d337bac2085e7d2daceacd MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c ARGPARSE_HASH=ddaf4b0a618335a32b6664d4ae038a1de8fbada3b25033f9021510ed2b3941a4

1 0

[tor-browser-bundle/master] Update config.yml
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit b54ac370d3e647fa533bfc9af2d2fc539887bcaa Author: Georg Koppen <gk(a)torproject.org> Date: Sat Aug 8 09:12:42 2015 +0000 Update config.yml --- tools/update-responses/config.yml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 5a4d965..4d2e7cb 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -9,26 +9,26 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - alpha: 5.0a4 - release: 4.5.2 + alpha: 5.5a1 + release: 5.0 versions: - 4.5.2: - platformVersion: 31.7.0 + 5.0: + platformVersion: 38.2.0 detailsURL: https://www.torproject.org/projects/torbrowser.html.en - download_url: https://www.torproject.org/dist/torbrowser/4.5.2 + download_url: https://www.torproject.org/dist/torbrowser/5.0 incremental_from: - - 4.5.1 + - 4.5.3 migrate_archs: osx32: osx64 osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 5.0a4: - platformVersion: 38.1.0 + 5.5a1: + platformVersion: 38.2.0 detailsURL: https://www.torproject.org/projects/torbrowser.html.en - download_url: https://www.torproject.org/dist/torbrowser/5.0a4 + download_url: https://www.torproject.org/dist/torbrowser/5.5a1 incremental_from: - - 5.0a3 + - 5.0a4 migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit 9467a9d330a20b6850f7393185aec5d08e903df1 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Fri Aug 7 18:18:04 2015 -0700 fixup! Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent --- dom/events/KeyCodeConsensus.h | 37 +++++++++++++++++++------------------ dom/events/KeyboardEvent.cpp | 5 +++-- 2 files changed, 22 insertions(+), 20 deletions(-) diff --git a/dom/events/KeyCodeConsensus.h b/dom/events/KeyCodeConsensus.h index 53ec7f6..47d8341 100644 --- a/dom/events/KeyCodeConsensus.h +++ b/dom/events/KeyCodeConsensus.h @@ -9,9 +9,9 @@ // KEY_INTERNAL is called by KEY or SHIFT. #define KEY_INTERNAL(key, code, keyCode, shift) \ - gCodes->Put(NS_LITERAL_STRING(key), NS_LITERAL_STRING(#code)); \ - gKeyCodes->Put(NS_LITERAL_STRING(key), keyCode); \ - gShiftStates->Put(NS_LITERAL_STRING(key), shift); + gCodes->Put(NS_LITERAL_STRING(key), NS_LITERAL_STRING(#code)); \ + gKeyCodes->Put(NS_LITERAL_STRING(key), keyCode); \ + gShiftStates->Put(NS_LITERAL_STRING(key), shift); // KEY and SHIFT assign a consensus codeName and keyCode for the given keyName. // KEY indicates that shift is off. @@ -29,7 +29,7 @@ static nsDataHashtable<nsStringHashKey, bool>* gShiftStates; static StaticMutex createKeyCodesMutex; -// Populate the global static maps gCodes, gKeCodes, gShiftStates +// Populate the global static maps gCodes, gKeyCodes, gShiftStates // with their constant values. static void createKeyCodes() { @@ -41,32 +41,33 @@ static void createKeyCodes() gKeyCodes = new nsDataHashtable<nsStringHashKey, uint32_t>(); gShiftStates = new nsDataHashtable<nsStringHashKey, bool>(); - KEY("AltLeft", AltLeft, 18) - KEY("AltRight", AltRight, 18) + KEY("Alt", AltLeft, 18) + KEY("ArrowDown", ArrowDown, 40) + KEY("ArrowLeft", ArrowLeft, 37) + KEY("ArrowRight", ArrowRight, 39) + KEY("ArrowUp", ArrowUp, 38) + KEY("Backspace", Backspace, 8) KEY("CapsLock", CapsLock, 20) - KEY("Control", ControlLeft, 17) - KEY("Meta", OSLeft, 91) - KEY("Shift", ShiftLeft, 16) KEY("ContextMenu", ContextMenu, 93) - KEY("Enter", Enter, 13) - KEY(" ", Space, 32) - KEY("Tab", Tab, 9) + KEY("Control", ControlLeft, 17) KEY("Delete", Delete, 46) KEY("End", End, 35) + KEY("Enter", Enter, 13) + KEY("Escape", Escape, 27) KEY("Help", Help, 6) KEY("Home", Home, 36) KEY("Insert", Insert, 45) + KEY("Meta", OSLeft, 91) KEY("PageDown", PageDown, 34) KEY("PageUp", PageUp, 33) - KEY("ArrowDown", ArrowDown, 40) - KEY("ArrowLeft", ArrowLeft, 37) - KEY("ArrowRight", ArrowRight, 39) - KEY("ArrowUp", ArrowUp, 38) - KEY("Escape", Escape, 27) + KEY("Pause", Pause, 19) KEY("PrintScreen", PrintScreen, 44) KEY("ScrollLock", ScrollLock, 145) - KEY("Pause", Pause, 19) + KEY("Shift", ShiftLeft, 16) + KEY("Tab", Tab, 9) + // Leaving "Clear" key unimplemented; it's inconsistent between platforms. + KEY(" ", Space, 32) KEY(",", Comma, 188) SHIFT("<", Comma, 188) KEY(".", Period, 190) diff --git a/dom/events/KeyboardEvent.cpp b/dom/events/KeyboardEvent.cpp index 6a68f96..19d4e73 100644 --- a/dom/events/KeyboardEvent.cpp +++ b/dom/events/KeyboardEvent.cpp @@ -50,8 +50,9 @@ KeyboardEvent::AltKey() if (ResistFingerprinting()) { nsString keyName; GetKey(keyName); - bool exists = gCodes->Get(keyName, nullptr); - return exists ? false : altState; + bool fakeShiftState; + gShiftStates->Get(keyName, &fakeShiftState); + return fakeShiftState ? false : altState; } else { return altState; }

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] Merge remote-tracking branch 'arthur/15646+4' into tor-browser-38.1.0esr-5.0-1
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit f1f66dc5096188a60a96df7ee5e32d9a4b81dbe5 Merge: d3c069a 9467a9d Author: Georg Koppen <gk(a)torproject.org> Date: Sat Aug 8 09:23:16 2015 +0000 Merge remote-tracking branch 'arthur/15646+4' into tor-browser-38.1.0esr-5.0-1 dom/events/KeyCodeConsensus.h | 37 +++++++++++++++++++------------------ dom/events/KeyboardEvent.cpp | 5 +++-- 2 files changed, 22 insertions(+), 20 deletions(-)

1 0

[torbutton/master] Revert "Revert "Revert "Revert "Bug 14429: Enable auto-resizing; disable maximization warning.""""
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit a0a651607a957ac8473cea717c8a440cdcea0144 Author: Georg Koppen <gk(a)torproject.org> Date: Sat Aug 8 09:07:24 2015 +0000 Revert "Revert "Revert "Revert "Bug 14429: Enable auto-resizing; disable maximization warning."""" This reverts commit 495c007916ef9a678113c0b1404a7519d6881f0c. --- src/defaults/preferences/preferences.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/defaults/preferences/preferences.js b/src/defaults/preferences/preferences.js index 83706ef..ce66d0e 100644 --- a/src/defaults/preferences/preferences.js +++ b/src/defaults/preferences/preferences.js @@ -113,7 +113,7 @@ pref("extensions.torbutton.prompted_language",false); // TODO: This is just part of a stopgap until #14429 gets properly implemented. // See #7255 for details. We display the warning three times to make sure the // user did not click on it by accident. -pref("extensions.torbutton.maximize_warnings_remaining", 3); +pref("extensions.torbutton.maximize_warnings_remaining", 0); pref("extensions.torbutton.startup_resize_period", true); // Security prefs: @@ -154,7 +154,7 @@ pref("extensions.torbutton.close_newnym",true); pref("extensions.torbutton.block_js_history",true); pref("extensions.torbutton.resize_on_toggle",true); pref("extensions.torbutton.resize_new_windows",true); -pref("extensions.torbutton.resize_windows",false); +pref("extensions.torbutton.resize_windows",true); pref("extensions.torbutton.banned_ports","9050,9051,9150,9151"); pref("extensions.torbutton.block_tor_file_net",true); pref("extensions.torbutton.block_nontor_file_net",false);

1 0

[torbutton/master] version bump
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit a98a5118ae0c7726b684d7ad7fed2f6e56f93ef8 Author: Georg Koppen <gk(a)torproject.org> Date: Sat Aug 8 09:08:03 2015 +0000 version bump --- src/install.rdf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/install.rdf b/src/install.rdf index 56eefbe..160baa4 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.3.2</em:version> + <em:version>1.9.3.3</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

1 0

[tor-browser-bundle/master] Add bug 16311 to changelog
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit 45a04175191deda9cbf049772d9c27dbef7874f5 Author: Georg Koppen <gk(a)torproject.org> Date: Sat Aug 8 08:53:25 2015 +0000 Add bug 16311 to changelog --- Bundle-Data/Docs/ChangeLog.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index c6c4d71..1270095 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -14,6 +14,7 @@ Tor Browser 5.5a1 -- August 11 2015 * Bug 16730: Prevent NoScript from updating the default whitelist * Bug 16715: Use ThreadsafeIsCallerChrome() instead of IsCallerChrome() * Bug 16572: Verify cache isolation for XMLHttpRequests in Web Workers + * Bug 16311: Fix navigation timing in ESR 38 Tor Browser 5.0 -- August 11 2015 * All Platforms @@ -77,6 +78,7 @@ Tor Browser 5.0 -- August 11 2015 * Bug 14952: Disable HTTP/2 * Bug 1517: Reduce precision of time for Javascript * Bug 13670: Ensure OCSP & favicons respect URL bar domain isolation + * Bug 16311: Fix navigation timing in ESR 38 * Windows * Bug 16014: Staged update fails if meek is enabled * Bug 16269: repeated add-on compatibility check after update (meek enabled)

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] Bug #16311: Fix the responseEnd attribute (navigation timing)
by gk＠torproject.org 08 Aug '15

08 Aug '15

commit d3c069a3cc6bc073e7230d1ef3a8d1f09346364e Author: Nicolas Vigier <boklm(a)torproject.org> Date: Sat Aug 8 01:48:33 2015 +0200 Bug #16311: Fix the responseEnd attribute (navigation timing) This reverts a change introduced by this patch: https://hg.mozilla.org/mozilla-central/rev/9b0c94f564f3#l11.43 --- dom/base/nsPerformance.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dom/base/nsPerformance.cpp b/dom/base/nsPerformance.cpp index 6dfcc25..67a374d 100644 --- a/dom/base/nsPerformance.cpp +++ b/dom/base/nsPerformance.cpp @@ -341,7 +341,7 @@ nsPerformanceTiming::ResponseStart() DOMHighResTimeStamp nsPerformanceTiming::ResponseEndHighRes() { - if (!IsInitialized()) { + if (!nsContentUtils::IsPerformanceTimingEnabled() || !IsInitialized()) { return mZeroTime; } if (mResponseEnd.IsNull() ||

1 0

[tor-browser-bundle/master] Clean up 5.0 changelog a bit.
by mikeperry＠torproject.org 08 Aug '15

08 Aug '15

commit 43b3571cd26f730a7595979589d5686c010134a1 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Fri Aug 7 23:30:21 2015 -0700 Clean up 5.0 changelog a bit. It should only have the delta from 4.5.3, but it should list the full set of tor patch backports. --- Bundle-Data/Docs/ChangeLog.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index f5b0198..c6c4d71 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -22,8 +22,10 @@ Tor Browser 5.0 -- August 11 2015 * Update HTTPS-Everywhere to 5.0.7 * Update NoScript to 2.6.9.34 * Update meek to 0.20 - * Tor patch backport + * Update Tor to 0.2.6.10 with patches: * Bug 16674: Allow FQDNs ending with a single '.' in our SOCKS host name checks. + * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) + * Bug 15482: Don't allow circuits to change while a site is in use * Update Torbutton to 1.9.3.2 * Bug 16731: TBB 5.0 a3/a4 fails to download a file on right click * Bug 16730: Reset NoScript whitelist on upgrade @@ -54,7 +56,6 @@ Tor Browser 5.0 -- August 11 2015 * Bug 16528: Prevent indexedDB Modernizr site breakage on Twitter and elsewhere * Bug 16523: Fix in-browser JavaScript debugger * Bug 16236: Windows updater: avoid writing to the registry - * Bug 16005: Restrict WebGL minimal mode a bit (fixup) * Bug 16625: Fully disable network connection prediction * Bug 16495: Fix SVG crash when security level is set to "High" * Bug 13247: Fix meek profile error after bowser restarts @@ -63,7 +64,7 @@ Tor Browser 5.0 -- August 11 2015 * Bug 16439: Remove Roku screencasting code * Bug 16285: Disabling EME bits * Bug 16206: Enforce certificate pinning - * Bug 15910: Disable GMPs for now + * Bug 15910: Disable Gecko Media Plugins for now * Bug 13670: Isolate OCSP requests by first party domain * Bug 16448: Isolate favicon requests by first party * Bug 7561: Disable FTP request caching @@ -76,7 +77,6 @@ Tor Browser 5.0 -- August 11 2015 * Bug 14952: Disable HTTP/2 * Bug 1517: Reduce precision of time for Javascript * Bug 13670: Ensure OCSP & favicons respect URL bar domain isolation - * Bug 13875: Improve the spoofing of window.devicePixelRatio * Windows * Bug 16014: Staged update fails if meek is enabled * Bug 16269: repeated add-on compatibility check after update (meek enabled)

1 0