Hi tor-qa!
Tor Browser 8.5a4 is ready for testing. Bundles can be found at:
https://people.torproject.org/~boklm/builds/8.5a4-build2/
This release fixes important Firefox security bugs. Highlights in Tor Browser 8.5a4 are a new Tor alpha version, 0.3.5.3-alpha, a fixed layout of our macOS installer window and Stylo (Mozilla's new CSS engine[1]) being enabled on macOS after fixing a reproducibility issues. Please report any problems you find with those macOS related changes as we think about backporting them for the stable series.
Moreover, we backport a defense against protocol handler enumeration developed by Mozilla engineers and provide Tor Browser on all supported platforms in four additional locales: cs, el, hu, and ka.
The full changelog since 8.5a3 is:
Tor Browser 8.5a4 -- October 23 2018 * All Platforms * Update Firefox to 60.3.0esr * Update Tor to 0.3.5.3-alpha * Update Torbutton to 2.1.1 * Bug 23925+27959: Donation banner for year end 2018 campaign * Bug 24172: Donation banner clobbers Tor Browser version string * Bug 28082: Add locales cs, el, hu, ka * Translations update * Update Tor Launcher to 0.2.17 * Bug 27994+25151: Use the new Tor Browser logo * Bug 28082: Add locales cs, el, hu, ka * Translations update * Update HTTPS Everywhere to 2018.9.19 * Update NoScript to 10.1.9.9 * Bug 1623: Block protocol handler enumeration (backport of fix for #680300) * Bug 27905: Fix many occurrences of "Firefox" in about:preferences * Bug 28082: Add locales cs, el, hu, ka * Windows * Bug 21704: Abort install if CPU is missing SSE2 support * Bug 28002: Fix the precomplete file in the en-US installer * OS X * Bug 26263: App icon positioned incorrectly in macOS DMG installer window * Bug 26475: Fix Stylo related reproducibilitiy issue * Linux * Bug 26475: Fix Stylo related reproducibilitiy issue * Bug 28022: Use `/usr/bin/env bash` for bash invocation * Android * Backport of fixes for bug 1448014, 1458905, 1441345, and 1448305 * Build System * All Platforms * Bug 27218: Generate multiple Tor Browser bundles in parallel * Windows * Bug 27320: Build certutil for Windows * OS X * Bug 27320: Build certutil for macOS
Georg
[1] https://hacks.mozilla.org/2017/08/inside-a-super-fast-css-engine-quantum-css...