Hi!

We are happy to accounce that Tor Browser 7.0a2 is ready for testing. Bundles can be found on:

https://people.torproject.org/~gk/builds/7.0a2-build1/

This alpha release mainly contains updates to several of our Tor Browser components: Firefox got updated to 45.8.0esr, Tor to 0.3.0.4-rc, OpenSSL to 1.0.1k, and HTTPS-Everywhere to 5.2.11.

The update to 45.8.0esr made it necessary to rewrite the backported Mozilla patch that hardened the JavaScript JIT by enforcing W^X on all pages. Please test the release candidate with that in mind and report back in case crashes or other issues with that patch in particular show up.

Additionally, we updated the bridges we ship with Tor Browser, fixed some regressions that came with our last release, and cleaned up our build files a bit (which should have no impact on the stability of this release, though).

The full changelog since Tor Browser 7.0a1 is:

Tor Browser 7.0a2 -- March 7 2017 * All Platforms * Update Firefox to 45.8.0esr * Tor to 0.3.0.4-rc * OpenSSL to 1.0.2k * Update Torbutton to 1.9.7.1 * Bug 21396: Allow leaking of resource/chrome URIs (off by default) * Bug 21574: Add link for zh manual and create manual links dynamically * Bug 21330: Non-usable scrollbar appears in tor browser security settings * Bug 21324: Don't update NoScript button with timer update * Translation updates * Update HTTPS-Everywhere to 5.2.11 * Bug 21514: Restore W^X JIT implementation removed from ESR45 * Bug 21536: Remove scramblesuit bridge * Bug 21342: Move meek-azure to the meek.azureedge.net backend and cymrubridge02 bridge * Bug 21348: Make snowflake only available on Linux for now * Linux * Bug 21326: Update the "Using a system-installed Tor" section in start script * Build system * OS X * Bug 21343: Remove unused FTE related parts for macOS * Linux * Bug 17034: Use our built binutils and GCC for building tor * Clean-up

Georg