Hi tor-qa people!
We are happy to announce that Tor Browser 6.5a4 is ready for testing. Bundles can be found on
https://people.torproject.org/~boklm/builds/6.5a4-build3/
This release is updating Firefox to 45.5.0esr fixing important security bugs. Moreover, other components are getting an update as well: Tor to 0.2.9.5-alpha, HTTPS-Everywhere to 5.2.7, and OpenSSL to 1.0.2j to name just a few.
This release includes numerous fixes and improvements. Most notably we improved our Unix domain socket support by resolving all the issues that showed up in the previous alpha and by making sure all connections to tor (not only the control port related ones) are using this feature on OS X and Linux now.
Additionally, we fixed a lot of usability bugs, some caused by Apple's macOS Sierra (meek did not work anymore and windows could not be dragged either). Others were caused by our window resizing logic. We moved that one into a C++ patch which we hope to get upstreamed into Firefox. We improved the usability of our security slider as well by reducing the amount of security levels available and redesigning the custom mode.
Finally, we added a donation banner shown in some localized bundles starting on Nov 22 in order to point to our end-of-the-year 2016 donation campaign.
The full changelog since Tor Browser 6.5a3 is:
Tor Browser 6.5a4 -- November 16 2016 * All Platforms * Update Firefox to 45.5.0esr * Update Tor to 0.2.9.5-alpha * Update OpenSSL to 1.0.2j * Update Torbutton to 1.9.6.6 * Bug 20414: Add donation banner on about:tor for 2016 campaign * Bug 20111: use Unix domain sockets for SOCKS port by default * Bug 19459: Move resizing code to tor-browser.git * Bug 20264: Change security slider to 3 options * Bug 20347: Enhance security slider's custom mode * Bug 20123: Disable remote jar on all security levels * Bug 20244: Move privacy checkboxes to about:preferences#privacy * Bug 17546: Add tooltips to explain our privacy checkboxes * Bug 17904: Allow security settings dialog to resize * Bug 18093: Remove 'Restore Defaults' button * Bug 20373: Prevent redundant dialogs opening * Bug 20388+20399+20394: Code clean-up * Translation updates * Update Tor Launcher to 0.2.10.2 * Bug 20111: use Unix domain sockets for SOCKS port by default * Bug 20185: Avoid using Unix domain socket paths that are too long * Bug 20429: Do not open progress window if tor doesn't get started * Bug 19646: Wrong location for meek browser profile on OS X * Translation updates * Update HTTPS-Everywhere to 5.2.7 * Update meek to 0.25 * Bug 19646: Wrong location for meek browser profile on OS X * Bug 20030: Shut down meek-http-helper cleanly if built with Go > 1.5.4 * Bug 20304: Support spaces and other special characters for SOCKS socket * Bug 20490: Fix assertion failure due to fix for #20304 * Bug 19459: Size new windows to 1000x1000 or nearest 200x100 (Firefox patch) * Bug 20442: Backport fix for local path disclosure after drag and drop * Bug 20160: Backport fix for broken MP3-playback * Bug 20043: Isolate SharedWorker script requests to first party * Bug 20123: Always block remote jar files * Bug 20244: Move privacy checkboxes to about:preferences#privacy * Bug 19838: Add dgoulet's bridge and add another one commented out * Bug 19481: Point the update URL to aus1.torproject.org * Bug 20296: Rotate ports again for default obfs4 bridges * Bug 20399+15852: Code clean-up * Windows * Bug 20342: Add tor-gencert.exe to expert bundle * Bug 18175: Maximizing window and restarting leads to non-rounded window size * Bug 13437: Rounded inner window accidentally grows to non-rounded size * OS X * Bug 20204: Windows don't drag on macOS Sierra anymore * Bug 20250: Meek fails on macOS Sierra if built with Go < 1.7 * Bug 20590: Badly resized window due to security slider notification bar on OS X * Bug 20439: Make the build PIE on OSX * Linux * Bug 15953: Weird resizing dance on Tor Browser startup * Build system * All platforms * Bug 20023: Upgrade Go to 1.7.3 * Bug 20583: Make the downloads.json file reproducible * OS X * Bug 20258: Make OS X Tor archive reproducible again * Bug 20184: Make OS X builds reproducible again * Bug 20210: In dmg2mar, extract old mar file to copy permissions to the new one
Georg