commit 9f4ba9e7398d45797382f9eff95fc210f8d903fa Author: Mike Perry <mikeperry-git@torproject.org> Date: Thu Mar 26 17:59:03 2015 -0700 Changelog and versions update for 4.5a5. --- Bundle-Data/Docs/ChangeLog.txt | 47 +++++++++++++++++++++++++++++++++++++++- gitian/versions.alpha | 14 ++++++------ 2 files changed, 53 insertions(+), 8 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index e7464cf..edbd748 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,7 +1,52 @@ -Tor Browser 4.0.6 -- Mar 31 2015 +Tor Browser 4.5a5 -- Mar 31 2015 * All Platforms * Update Firefox to 31.6.0esr * Update OpenSSL to 1.0.1m + * Update Tor to 0.2.6.6 + * Update NoScript to 2.6.9.19 + * Update meek to 0.16 + * Update Torbutton to 1.9.1.0 + * Bug 9387: "Security Slider 1.0" + * Include descriptions and tooltip hints for security levels + * Notify users that the security slider exists + * Flip slider so that "low" is on the bottom + * Make use of new SVG and MathML prefs + * Bug 13766: Set a 10 minute circuit lifespan for non-content requests + * Bug 15460: Ensure FTP urls use content-window circuit isolation + * Bug 13650: Clip initial window height to 1000px + * Bug 14429: Ensure windows can only be resized to 200x100px multiples + * Bug 15334: Display Cookie Protections menu if disk records are enabled + * Bug 14324: Show HS circuit in Tor circuit display + * Bug 15086: Handle RTL text in Tor circuit display + * Bug 15085: Fix about:tor RTL text alignment problems + * Bug 10216: Add a pref to disable the local tor control port test + * Bug 14937: Show meek and flashproxy bridges in tor circuit display + * Bugs 13891+15207: Fix exceptions/errors in circuit display with bridges + * Bug 13019: Change locale hiding pref to boolean + * Bug 7255: Warn users about maximizing windows (off by default) + * Pluggable Transport Dependency Updates: + * Bug 15448: Use golang 1.4.2 for meek and obs4proxy + * Bug 15265: Switch go.net repo to golang.org/x/net + * Bug 12535: Use a SOCKS5 listener instead of a SOCKS4a for goptlib + * Bug 14937: Hard-code meek and flashproxy node fingerprints + * Bug 13019: Prevent Javascript from leaking system locale + * Bug 10280: Improved fix to prevent loading plugins into address space + * Bug 15406: Only include addons in incremental updates if they actually update + * Bug 15029: Don't prompt to include missing plugins + * Bug 12827: Create preference to disable SVG images (for security slider) + * Bug 13548: Create preference to disable MathML (for security slider) + * Bug 14631: Improve startup error messages for filesystem permissions issues + * Bug 13766: Keep content window Tor circuits open for 2 hours + * Linux + * Bug 13375: Create a hybrid GUI/desktop/shell launcher wrapper + * Bug 12468: Only print/write log messages if launched with --debug + * Windows + * Bug 15201: Disable 'runas Administrator' codepaths in updater + * Bug 14688: Create shortcuts to desktop and start menu by default (optional) + +Tor Browser 4.0.6 -- Mar 31 2015 + * All Platforms + * Update Firefox to 31.6.0esr * Update meek to 0.16 Tor Browser 4.0.5 -- Mar 23 2015 diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 2e6cd80..12c16cc 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -4,14 +4,14 @@ BUILD_PT_BUNDLES=1 VERIFY_TAGS=1 -FIREFOX_VERSION=31.5.0esr +FIREFOX_VERSION=31.6.0esr TORBROWSER_UPDATE_CHANNEL=alpha TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build1 -TOR_TAG=tor-0.2.6.3-alpha +TOR_TAG=tor-0.2.6.6 TORLAUNCHER_TAG=0.2.7.2 -TORBUTTON_TAG=1.9.0.0 +TORBUTTON_TAG=1.9.1.0 HTTPSE_TAG=3.5.3 # XXX: HTTPSE_VER is used instead, pending #11630 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 @@ -35,7 +35,7 @@ OBFS4_TAG=obfs4proxy-0.0.4 GITIAN_TAG=tor-browser-builder-3.x-7 -OPENSSL_VER=1.0.1l +OPENSSL_VER=1.0.1m GMP_VER=5.1.3 FIREFOX_LANG_VER=$FIREFOX_VERSION FIREFOX_LANG_BUILD=build2 @@ -52,7 +52,7 @@ PY2EXE_VER=0.6.9 SETUPTOOLS_VER=1.4 LXML_VER=3.3.5 PARSLEY_VER=1.2 -HTTPSE_VER=5.0development.2 +HTTPSE_VER=5.0 GO_VER=1.4.2 ## File names for the source packages @@ -82,13 +82,13 @@ GO_PACKAGE=go${GO_VER}.src.tar.gz GONET_PACKAGE=go.net-9c0f9daaa74b.tar.bz2 # Hashes for packages with weak sigs or no sigs -OPENSSL_HASH=b2cf4d48fe5d49f240c61c9e624193a6f232b5ed0baf010681e725963c40d1d4 +OPENSSL_HASH=095f0b7b09116c0c5526422088058dc7e6e000aa14d22acca6a4e2babcdfef74 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 NOSCRIPT_HASH=63d866458e0261d20b612193f8f446728c991dd488c59e49d8f927c63e7eb9b4 -HTTPSE_HASH=a42812dbd4b0103600ac5dce0e5f1366e8a7a7267e18743f5cd1e152615964e3 +HTTPSE_HASH=059b6141b200c18f5903550d0ee6bdec1e1b874b7e069d246466e77bf3a436c2 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c ARGPARSE_HASH=ddaf4b0a618335a32b6664d4ae038a1de8fbada3b25033f9021510ed2b3941a4