[tor-browser-bundle/master] Release preparations for 7.5a4 - tor-commits

4 Aug 2017

commit 0d192217fc71cccf16bce16e3904460b0991b43d
Author: Georg Koppen gk@torproject.org
Date:   Fri Aug 4 07:02:07 2017 +0000
Release preparations for 7.5a4
Changelog update, version bumps, and config.yml update
---
 Bundle-Data/Docs/ChangeLog.txt    | 47 +++++++++++++++++++++++++++++++++++++++
 gitian/versions.alpha             | 22 +++++++++---------
 tools/update-responses/config.yml | 11 ++++-----
 3 files changed, 64 insertions(+), 16 deletions(-)

diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index 224ccaa..8558526 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,50 @@
+Tor Browser 7.5a4 -- August 9 2017
+ * All Platforms
+   * Update Firefox to 52.3.0esr
+   * Update Tor to 0.3.1.5-alpha
+   * Update OpenSSL to 1.0.2l
+   * Update Torbutton to 1.9.8
+     * Bug 22610: Avoid crashes when canceling external helper app related downloads
+     * Bug 22472: Fix FTP downloads when external helper app dialog is shown
+     * Bug 22471: Downloading pdf files via the PDF viewer download button is broken
+     * Bug 22618: Downloading pdf file via file:/// is stalling
+     * Bug 22542: Resize slider window to work without scrollbars
+     * Bug 21999: Fix display of language prompt in non-en-US locales
+     * Bug 18193: Don't let about:tor have chrome privileges
+     * Bug 22535: Search on about:tor discards search query
+     * Bug 21948: Going back to about:tor page gives "Address isn't valid" error
+     * Code clean-up
+     * Translations update
+   * Update Tor Launcher to 0.2.12.3
+     * Bug 22592: Default bridge settings are not removed
+     * Translations update
+   * Update HTTPS-Everywhere to 5.2.21
+   * Update NoScript to 5.0.8.1
+     * Bug 22362: Remove workaround for XSS related browser freezing
+     * Bug 22067: NoScript Click-to-Play bypass with embedded videos and audio
+   * Bug 22610: Avoid crashes when canceling external helper app related downloads
+   * Bug 22472: Fix FTP downloads when external helper app dialog is shown
+   * Bug 22471: Downloading pdf files via the PDF viewer download button is broken
+   * Bug 22618: Downloading pdf file via file:/// is stalling
+   * Bug 21321: Exempt .onions from HTTP related security warnings
+   * Bug 21830: Copying large text from web console leaks to /tmp
+   * Bug 22073: Disable GetAddons option on addons page
+   * Bug 22884: Fix broken about:tor page on higher security levels
+   * Bug 22829: Remove default obfs4 bridge riemann.
+ * Windows
+   * Bug 21617: Fix single RWX page on Windows (included in 52.3.0esr)
+ * OS X
+   * Bug 22831: Enable Snowflake for mac
+ * Linux
+   * Bug 22832: Don't include monthly timestamp in libwebrtc build output
+   * Bug 20848: Deploy Selfrando in 32bit Linux builds
+ * Build system
+   * Windows
+     * Bug 22563: Update mingw-w64 to fix W^X violations
+     * Bug 20929: Bump GCC version to 5.4.0
+   * Linux
+     * Bug 20929: Bump GCC version to 5.4.0
+
 Tor Browser 7.5a3 -- July 28 2017
  * Linux
    * Bug 23044: Don't allow GIO supported protocols by default
diff --git a/gitian/versions.alpha b/gitian/versions.alpha
index c35c51b..1e20aa4 100755
--- a/gitian/versions.alpha
+++ b/gitian/versions.alpha
@@ -10,15 +10,15 @@ DATA_OUTSIDE_APP_DIR=1
VERIFY_TAGS=1
-FIREFOX_VERSION=52.2.0esr
+FIREFOX_VERSION=52.3.0esr
TORBROWSER_UPDATE_CHANNEL=alpha
-TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.5-1-build2
-TOR_TAG=tor-0.3.1.4-alpha
-TORLAUNCHER_TAG=0.2.12.2
-TORBUTTON_TAG=1.9.7.4
-HTTPSE_TAG=5.2.19
+TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.5-2-build1
+TOR_TAG=tor-0.3.1.5-alpha
+TORLAUNCHER_TAG=0.2.12.3
+TORBUTTON_TAG=1.9.8
+HTTPSE_TAG=5.2.21
 NSIS_TAG=v0.3.1
 ZLIB_TAG=v1.2.8
 LIBEVENT_TAG=release-2.0.22-stable
@@ -49,12 +49,12 @@ SNOWFLAKE_TAG=9f2e9a6ecb696149708716ca06ce842df03cf492
 UNIURI_TAG=8902c56451e9b58ff940bbe5fec35d5f9c04584a
 SELFRANDO_TAG=tb-v0.3.2
-GITIAN_TAG=tor-browser-builder-4-4
+GITIAN_TAG=tor-browser-builder-4-5
-OPENSSL_VER=1.0.2k
+OPENSSL_VER=1.0.2l
 GMP_VER=5.1.3
 FIREFOX_LANG_VER=$FIREFOX_VERSION
-FIREFOX_LANG_BUILD=build1
+FIREFOX_LANG_BUILD=build2
 BINUTILS_VER=2.24
 GCC_VER=5.4.0
 CLANG_VER=3.8.0
@@ -77,7 +77,7 @@ ELFUTILS_VER=0.166
 ## File names for the source packages
 OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz
 GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2
-NOSCRIPT_PACKAGE=noscript_security_suite-5.0.7.1-fx+sm.xpi
+NOSCRIPT_PACKAGE=noscript_security_suite-5.0.8.1-fx+sm.xpi
 CCTOOLS_PACKAGE=cctools.tar.gz
 OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz
 MSVCR100_PACKAGE=msvcr100.dll
@@ -113,7 +113,7 @@ ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2
 OPENSSL_HASH=6b3977c61f2aedf0f96367dcfb5c6e578cf37e7b8d913b4ecb6643c3cb88d8c0
 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf
-NOSCRIPT_HASH=fe85a4c72b5a763462f3b264f54a0ef1c6f6879eb95d903f2dfee337f768a50b
+NOSCRIPT_HASH=ef648454965242a57583d2541290bcf9526747b18335aeccdd55f39a23873bc3
 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4
 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c
diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml
index a4f1f91..e6dcf27 100644
--- a/tools/update-responses/config.yml
+++ b/tools/update-responses/config.yml
@@ -19,14 +19,15 @@ build_targets:
     osx32: Darwin_x86-gcc3
     osx64: Darwin_x86_64-gcc3
 channels:
-    alpha: 7.5a2
+    alpha: 7.5a4
     release: 6.0.1
 versions:
-    7.5a2:
-        platformVersion: 52.2.0
-        detailsURL: https://blog.torproject.org/blog/tor-browser-75a2-released
+    7.5a4:
+        platformVersion: 52.3.0
+        detailsURL: https://blog.torproject.org/blog/tor-browser-75a4-released
         incremental_from:
-          - 7.5a1
+          - 7.5a2
+          - 7.5a3
         migrate_archs:
           osx32: osx64
         migrate_langs:

    