commit 1470eeb9c650229df3129596ae3364e86bbc7dee
Author: Georg Koppen <gk(a)torproject.org>
Date: Sun Jun 5 21:07:03 2016 +0000
Release preparations for 6.5a1-hardened
---
Bundle-Data/Docs/ChangeLog.txt | 54 ++++++++++++++++++++++++++++++++++++++++++
gitian/versions.alpha | 16 ++++++-------
gitian/versions.nightly | 8 +++----
3 files changed, 66 insertions(+), 12 deletions(-)
diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index 35d0e9d..40a36c9 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,57 @@
+Tor Browser 6.5a1-hardened -- June 8
+ * All Platforms
+ * Update Firefox to 45.2.0esr
+ * Update Tor to 0.2.8.3-alpha
+ * Update Torbutton to 1.9.6
+ * Bug 18743: Pref to hide 'Sign in to Sync' button in hamburger menu
+ * Bug 18905: Hide unusable items from help menu
+ * Bug 17599: Provide shortcuts for New Identity and New Circuit
+ * Bug 18980: Remove obsolete toolbar button code
+ * Bug 18238: Remove unused Torbutton code and strings
+ * Translation updates
+ * Code clean-up
+ * Update Tor Launcher to 0.2.8.5
+ * Bug 18947: Tor Browser is not starting on OS X if put into /Applications
+ * Update HTTPS-Everywhere to 5.1.9
+ * Update meek to 0.22 (tag 0.22-18371-3)
+ * Bug 19121: The update.xml hash should get checked during update
+ * Bug 12523: Mark JIT pages as non-writable
+ * Bug 19193: Reduce timing precision for AudioContext, HTMLMediaElement, and MediaStream
+ * Bug 19164: Remove support for SHA-1 HPKP pins
+ * Bug 19186: KeyboardEvents are only rounding to 100ms
+ * Bug 18884: Don't build the loop extension
+ * Bug 19187: Backport fix for crash related to popup menus
+ * Bug 19212: Fix crash related to network panel in developer tools
+ * Bug 18703: Fix circuit isolation issues on Page Info dialog
+ * bug 19115: Tor Browser should not fall back to Bing as its search engine
+ * Bug 18915+19065: Use our search plugins in localized builds
+ * Bug 19176: Zip our language packs deterministically
+ * Bug 18811: Fix first-party isolation for blobs URLs in Workers
+ * Bug 18950: Disable or audit Reader View
+ * Bug 18886: Remove Pocket
+ * Bug 18619: Tor Browser reports "InvalidStateError" in browser console
+ * Bug 18945: Disable monitoring the connected state of Tor Browser users
+ * Bug 18855: Don't show error after add-on directory clean-up
+ * Bug 18885: Disable the option of logging TLS/SSL key material
+ * Bug 18770: SVGs should not show up on Page Info dialog when disabled
+ * Bug 18958: Spoof screen.orientation values
+ * Bug 19047: Disable Heartbeat prompts
+ * Bug 18914: Use English-only label in <isindex/> tags
+ * Bug 18996: Investigate server logging in esr45-based Tor Browser
+ * Bug 17790: Add unit tests for keyboard fingerprinting defenses
+ * Bug 18995: Regression test to ensure CacheStorage is disabled
+ * Bug 18912: Add automated tests for updater cert pinning
+ * Bug 16728: Add test cases for favicon isolation
+ * Bug 18976: Remove some FTE bridges
+ * Linux
+ * Bug 19189: Backport for working around a linker (gold) bug
+ * Build System
+ * All PLatforms
+ * Bug 18333: Upgrade Go to 1.6.2
+ * Bug 18919: Remove unused keys and unused dependencies
+ * Bug 18291: Remove some uses of libfaketime
+ * Bug 18845: Make zip and tar helpers generate reproducible archives
+
Tor Browser 6.0a5-hardened -- April 28 2016
* All Platforms
* Update Firefox to 45.1.0esr
diff --git a/gitian/versions.alpha b/gitian/versions.alpha
index c6b1862..1d671ff 100755
--- a/gitian/versions.alpha
+++ b/gitian/versions.alpha
@@ -14,15 +14,15 @@ DATA_OUTSIDE_APP_DIR=1
VERIFY_TAGS=1
-FIREFOX_VERSION=45.1.0esr
+FIREFOX_VERSION=45.2.0esr
TORBROWSER_UPDATE_CHANNEL=hardened
-TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.0-1-build3
-TOR_TAG=tor-0.2.8.2-alpha
-TORLAUNCHER_TAG=0.2.8.4
-TORBUTTON_TAG=1.9.5.3
-HTTPSE_TAG=5.1.6
+TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1
+TOR_TAG=tor-0.2.8.3-alpha
+TORLAUNCHER_TAG=0.2.8.5
+TORBUTTON_TAG=1.9.6
+HTTPSE_TAG=5.1.9
NSIS_TAG=v0.3.1
ZLIB_TAG=v1.2.8
LIBEVENT_TAG=release-2.0.22-stable
@@ -37,7 +37,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19
LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014
TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2
GOPTLIB_TAG=0.5
-MEEK_TAG=0.22-18371-2
+MEEK_TAG=0.22-18371-3
FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6
GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de
GOSIPHASH_TAG=42ba037e748c9062a75e0924705c43b893edefcd
@@ -51,7 +51,7 @@ GITIAN_TAG=tor-browser-builder-4-1
OPENSSL_VER=1.0.1t
GMP_VER=5.1.3
FIREFOX_LANG_VER=$FIREFOX_VERSION
-FIREFOX_LANG_BUILD=build1
+FIREFOX_LANG_BUILD=build2
BINUTILS_VER=2.24
GCC_VER=5.2.0
CLANG_VER=r247539
diff --git a/gitian/versions.nightly b/gitian/versions.nightly
index 577c40c..60d5f34 100755
--- a/gitian/versions.nightly
+++ b/gitian/versions.nightly
@@ -17,11 +17,11 @@ MULTI_LINGUAL=1
VERIFY_TAGS=0
-FIREFOX_VERSION=45.1.0esr
+FIREFOX_VERSION=45.2.0esr
TORBROWSER_UPDATE_CHANNEL=default
-TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.0-1
+TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1
TOR_TAG=master
TORLAUNCHER_TAG=master
TORBUTTON_TAG=master
@@ -40,7 +40,7 @@ FTEPROXY_TAG=master
LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014
TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2
GOPTLIB_TAG=master
-MEEK_TAG=0.22-18371-2 #master
+MEEK_TAG=0.22-18371-3 #master
FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6
GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de
GOSIPHASH_TAG=42ba037e748c9062a75e0924705c43b893edefcd
@@ -55,7 +55,7 @@ GITIAN_TAG=tor-browser-builder-4
OPENSSL_VER=1.0.1t
GMP_VER=5.1.3
FIREFOX_LANG_VER=$FIREFOX_VERSION
-FIREFOX_LANG_BUILD=build1
+FIREFOX_LANG_BUILD=build2
BINUTILS_VER=2.24
GCC_VER=5.2.0
CLANG_VER=r247539