Hi all!
Tor Browser 7.5a5 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/7.5a5-build4/
Besides the usual Firefox security nd extensions updates this alpha contains a bunch of long-awaited features:
1) We ship Tor 0.3.2.1-alpha, the first alpha release in the 0.3.2 series, with support for next generations onion services and a new circuit scheduler, KIST.[1]
2) Thanks to the work of Jed Davis we are able to ship a content sandbox for Linux users. While the content sandbox is disabled in Firefox 52 ESR versions, which Tor Browser is based on, backported patches allow us to protect our Linux users with the same mechanisms that are provided to regular Firefox users.
3) The content sandbox is enabled for Windows users as well. While we still need to clean up our workarounds to get the sandboxing code to work with our mingw-w64 compiler, we think the enabled sandbox is ready for a wider testing in our alpha series. Please give it a try if you can.
The full changelog since Tor Browser 7.5a4 is:
Tor Browser 7.5a5 -- September 27 2017 * All Platforms * Update Firefox to 52.4.0esr * Update Tor to 0.3.2.1-alpha * Update Torbutton to 1.9.8.1 * Bug 20375: Warn users after entering fullscreen mode * Bug 22989: Fix dimensions of new windows on macOS * Bug 23526: Add 2017 Donation banner text * Bug 23483: Donation banner on about:tor for 2017 (testing mode) * Translations update * Update Tor Launcher to 0.2.13 * Bug 23240: Retrieve current bootstrap progress before showing progress bar * Bug 22232: Add README on use of bootstrap status messages * Translations update * Update HTTPS-Everywhere to 2017.9.12 * Update NoScript to 5.0.10 * Update sandboxed-tor-browser to 0.0.13 * Bug 23393: Don't crash all tabs when closing one tab * Bug 23166: Add new obfs4 bridge to the built-in ones * Bug 23258: Fix broken HTTPS-Everywhere on higher security levels * Bug 21270: NoScript settings break WebExtensions add-ons * Bug 23104: CSS line-height reveals the platform Tor Browser is running on * Windows * Bug 16010: Enable content sandboxing on Windows * Bug 23582: Enable the Windows DLL blocklist for mingw-w64 builds * Bug 23396: Update the msvcr100.dll we ship * Bug 23230: Fix build error on Windows 64 * OS X * Bug 23404: Add missing Noto Sans Buginese font to the macOS whitelist * Linux * Bug 10089: Set middlemouse.contentLoadURL to false by default * Bug 22692: Enable content sandboxing on Linux * Bug 18101: Suppress upload file dialog proxy bypass (linux part) * Build System * All Platforms * Switch from gitian/tor-browser-bundle to rbm/tor-browser-build
Georg
[1] https://blog.torproject.org/tor-0321-alpha-released-support-next-gen-onion-s...