[tor-browser-bundle/master] Changelog and versions update for 4.5a5. - tbb-commits

27 Mar 2015

commit 9f4ba9e7398d45797382f9eff95fc210f8d903fa
Author: Mike Perry mikeperry-git@torproject.org
Date:   Thu Mar 26 17:59:03 2015 -0700
Changelog and versions update for 4.5a5.
---
 Bundle-Data/Docs/ChangeLog.txt |   47 +++++++++++++++++++++++++++++++++++++++-
 gitian/versions.alpha          |   14 ++++++------
 2 files changed, 53 insertions(+), 8 deletions(-)

diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index e7464cf..edbd748 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,7 +1,52 @@
-Tor Browser 4.0.6 -- Mar 31 2015
+Tor Browser 4.5a5 -- Mar 31 2015
  * All Platforms
    * Update Firefox to 31.6.0esr
    * Update OpenSSL to 1.0.1m
+   * Update Tor to 0.2.6.6
+   * Update NoScript to 2.6.9.19
+   * Update meek to 0.16
+   * Update Torbutton to 1.9.1.0
+     * Bug 9387: "Security Slider 1.0"
+       * Include descriptions and tooltip hints for security levels
+       * Notify users that the security slider exists
+       * Flip slider so that "low" is on the bottom
+       * Make use of new SVG and MathML prefs
+     * Bug 13766: Set a 10 minute circuit lifespan for non-content requests
+     * Bug 15460: Ensure FTP urls use content-window circuit isolation
+     * Bug 13650: Clip initial window height to 1000px
+     * Bug 14429: Ensure windows can only be resized to 200x100px multiples
+     * Bug 15334: Display Cookie Protections menu if disk records are enabled
+     * Bug 14324: Show HS circuit in Tor circuit display
+     * Bug 15086: Handle RTL text in Tor circuit display
+     * Bug 15085: Fix about:tor RTL text alignment problems
+     * Bug 10216: Add a pref to disable the local tor control port test
+     * Bug 14937: Show meek and flashproxy bridges in tor circuit display
+     * Bugs 13891+15207: Fix exceptions/errors in circuit display with bridges
+     * Bug 13019: Change locale hiding pref to boolean
+     * Bug 7255: Warn users about maximizing windows (off by default)
+   * Pluggable Transport Dependency Updates:
+     * Bug 15448: Use golang 1.4.2 for meek and obs4proxy
+     * Bug 15265: Switch go.net repo to golang.org/x/net
+     * Bug 12535: Use a SOCKS5 listener instead of a SOCKS4a for goptlib
+   * Bug 14937: Hard-code meek and flashproxy node fingerprints
+   * Bug 13019: Prevent Javascript from leaking system locale
+   * Bug 10280: Improved fix to prevent loading plugins into address space
+   * Bug 15406: Only include addons in incremental updates if they actually update
+   * Bug 15029: Don't prompt to include missing plugins
+   * Bug 12827: Create preference to disable SVG images (for security slider)
+   * Bug 13548: Create preference to disable MathML (for security slider)
+   * Bug 14631: Improve startup error messages for filesystem permissions issues
+   * Bug 13766: Keep content window Tor circuits open for 2 hours
+ * Linux
+   * Bug 13375: Create a hybrid GUI/desktop/shell launcher wrapper
+   * Bug 12468: Only print/write log messages if launched with --debug
+ * Windows
+   * Bug 15201: Disable 'runas Administrator' codepaths in updater
+   * Bug 14688: Create shortcuts to desktop and start menu by default (optional)
+
+Tor Browser 4.0.6 -- Mar 31 2015
+ * All Platforms
+   * Update Firefox to 31.6.0esr
    * Update meek to 0.16
Tor Browser 4.0.5 -- Mar 23 2015
diff --git a/gitian/versions.alpha b/gitian/versions.alpha
index 2e6cd80..12c16cc 100755
--- a/gitian/versions.alpha
+++ b/gitian/versions.alpha
@@ -4,14 +4,14 @@ BUILD_PT_BUNDLES=1
VERIFY_TAGS=1
-FIREFOX_VERSION=31.5.0esr
+FIREFOX_VERSION=31.6.0esr
TORBROWSER_UPDATE_CHANNEL=alpha
TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build1
-TOR_TAG=tor-0.2.6.3-alpha
+TOR_TAG=tor-0.2.6.6
 TORLAUNCHER_TAG=0.2.7.2
-TORBUTTON_TAG=1.9.0.0
+TORBUTTON_TAG=1.9.1.0
 HTTPSE_TAG=3.5.3  # XXX: HTTPSE_VER is used instead, pending #11630
 NSIS_TAG=v0.3
 ZLIB_TAG=v1.2.8
@@ -35,7 +35,7 @@ OBFS4_TAG=obfs4proxy-0.0.4
GITIAN_TAG=tor-browser-builder-3.x-7
-OPENSSL_VER=1.0.1l
+OPENSSL_VER=1.0.1m
 GMP_VER=5.1.3
 FIREFOX_LANG_VER=$FIREFOX_VERSION
 FIREFOX_LANG_BUILD=build2
@@ -52,7 +52,7 @@ PY2EXE_VER=0.6.9
 SETUPTOOLS_VER=1.4
 LXML_VER=3.3.5
 PARSLEY_VER=1.2
-HTTPSE_VER=5.0development.2
+HTTPSE_VER=5.0
 GO_VER=1.4.2
## File names for the source packages
@@ -82,13 +82,13 @@ GO_PACKAGE=go${GO_VER}.src.tar.gz
 GONET_PACKAGE=go.net-9c0f9daaa74b.tar.bz2
# Hashes for packages with weak sigs or no sigs
-OPENSSL_HASH=b2cf4d48fe5d49f240c61c9e624193a6f232b5ed0baf010681e725963c40d1d4
+OPENSSL_HASH=095f0b7b09116c0c5526422088058dc7e6e000aa14d22acca6a4e2babcdfef74
 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
 OSXSDK_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc
 TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645
 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9
 NOSCRIPT_HASH=63d866458e0261d20b612193f8f446728c991dd488c59e49d8f927c63e7eb9b4
-HTTPSE_HASH=a42812dbd4b0103600ac5dce0e5f1366e8a7a7267e18743f5cd1e152615964e3
+HTTPSE_HASH=059b6141b200c18f5903550d0ee6bdec1e1b874b7e069d246466e77bf3a436c2
 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c
 ARGPARSE_HASH=ddaf4b0a618335a32b6664d4ae038a1de8fbada3b25033f9021510ed2b3941a4

    