[tbb-commits] [tor-browser-bundle/maint-6.5] Release preparations for 6.5

gk at torproject.org gk at torproject.org
Thu Jan 19 11:22:17 UTC 2017


commit b3f4e8e590377d74456a0b92c9400dd3c1d6fa41
Author: Georg Koppen <gk at torproject.org>
Date:   Thu Jan 19 11:20:51 2017 +0000

    Release preparations for 6.5
    Changelog update, version bumps, and config.yml update
---
 Bundle-Data/Docs/ChangeLog.txt    | 94 +++++++++++++++++++++++++++++++++++++++
 gitian/versions                   | 22 ++++-----
 tools/update-responses/config.yml | 13 +++---
 3 files changed, 112 insertions(+), 17 deletions(-)

diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index 92b638d..6c18afa 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,97 @@
+Tor Browser 6.5 -- January 24 2017
+ * All Platforms
+   * Update Firefox to 45.7.0esr
+   * Tor to 0.2.9.8
+   * OpenSSL to 1.0.2j
+   * Update Torbutton to 1.9.6.10
+     * Bug 16622: Timezone spoofing moved to tor-browser.git
+     * Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git
+     * Bug 8725: Block addon resource and url fingerprinting with nsIContentPolicy
+     * Bug 20701: Allow the directory listing stylesheet in the content policy
+     * Bug 19837: Whitelist internal URLs that Firefox requires for media
+     * Bug 19206: Avoid SOCKS auth and NEWNYM collisions when sharing a tor client
+     * Bug 19273: Improve external app launch handling and associated warnings
+     * Bug 15852: Remove/synchronize Torbutton SOCKS pref logic
+     * Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6
+     * Bug 17767: Make "JavaScript disabled" more visible in Security Slider
+     * Bug 20556: Use pt-BR strings from now on
+     * Bug 20614: Add links to Tor Browser User Manual
+     * Bug 20414: Fix non-rendering arrow on OS X
+     * Bug 20728: Fix bad preferences.xul dimensions
+     * Bug 19898: Use DuckDuckGo on about:tor
+     * Bug 21091: Hide the update check menu entry when running under the sandbox
+     * Bug 19459: Move resizing code to tor-browser.git
+     * Bug 20264: Change security slider to 3 options
+     * Bug 20347: Enhance security slider's custom mode
+     * Bug 20123: Disable remote jar on all security levels
+     * Bug 20244: Move privacy checkboxes to about:preferences#privacy
+     * Bug 17546: Add tooltips to explain our privacy checkboxes
+     * Bug 17904: Allow security settings dialog to resize
+     * Bug 18093: Remove 'Restore Defaults' button
+     * Bug 20373: Prevent redundant dialogs opening
+     * Bug 20318: Remove helpdesk link from about:tor
+     * Bug 21243: Add links for pt, es, and fr Tor Browser manuals
+     * Bug 20753: Remove obsolete StartPage locale strings
+     * Bug 21131: Remove 2016 donation banner
+     * Bug 18980: Remove obsolete toolbar button code
+     * Bug 18238: Remove unused Torbutton code and strings
+     * Bug 20388+20399+20394: Code clean-up
+     * Translation updates
+   * Update Tor Launcher to 0.2.10.3
+     * Bug 19568: Set CurProcD for Thunderbird/Instantbird
+     * Bug 19432: Remove special handling for Instantbird/Thunderbird
+     * Translation updates
+   * Update HTTPS-Everywhere to 5.2.9
+   * Update NoScript to 2.9.5.3
+   * Bug 16622: Spoof timezone with Firefox patch
+   * Bug 17334: Spoof referrer when leaving a .onion domain
+   * Bug 19273: Write C++ patch for external app launch handling
+   * Bug 19459: Size new windows to 1000x1000 or nearest 200x100 (Firefox patch)
+   * Bug 12523: Mark JIT pages as non-writable
+   * Bug 20123: Always block remote jar files
+   * Bug 19193: Reduce timing precision for AudioContext, HTMLMediaElement, and MediaStream
+   * Bug 19164: Remove support for SHA-1 HPKP pins
+   * Bug 19186: KeyboardEvents are only rounding to 100ms
+   * Bug 16998: Isolate preconnect requests to URL bar domain
+   * Bug 19478: Prevent millisecond resolution leaks in File API
+   * Bug 20471: Allow javascript: links from HTTPS first party pages
+   * Bug 20244: Move privacy checkboxes to about:preferences#privacy
+   * Bug 20707: Fix broken preferences tab in non-en-US alpha bundles
+   * Bug 20709: Fix wrong update URL in alpha bundles
+   * Bug 19481: Point the update URL to aus1.torproject.org
+   * Bug 20556: Start using pt-BR instead of pt-PT for Portuguese
+   * Bug 20442: Backport fix for local path disclosure after drag and drop
+   * Bug 20160: Backport fix for broken MP3-playback
+   * Bug 20043: Isolate SharedWorker script requests to first party
+   * Bug 18923: Add script to run all Tor Browser regression tests
+   * Bug 20651: DuckDuckGo does not work with JavaScript disabled
+   * Bug 19336+19835: Enhance about:tbupdate page
+   * Bug 20399+15852: Code clean-up
+ * Windows
+   * Bug 20981: On Windows, check TZ for timezone first
+   * Bug 18175: Maximizing window and restarting leads to non-rounded window size
+   * Bug 13437: Rounded inner window accidentally grows to non-rounded size
+ * OS X
+   * Bug 20590: Badly resized window due to security slider notification bar on OS X
+   * Bug 20439: Make the build PIE on OSX
+ * Linux
+   * Bug 20691: Updater breaks if unix domain sockets are used
+   * Bug 15953: Weird resizing dance on Tor Browser startup
+ * Build system
+   * All platforms
+     * Bug 20927: Upgrade Go to 1.7.4
+     * Bug 20583: Make the downloads.json file reproducible
+     * Bug 20133: Don't apply OpenSSL patch anymore
+     * Bug 19528: Set MOZ_BUILD_DATE based on Firefox version
+     * Bug 18291: Remove some uses of libfaketime
+     * Bug 18845: Make zip and tar helpers generate reproducible archives
+   * OS X
+     * Bug 20258: Make OS X Tor archive reproducible again
+     * Bug 20184: Make OS X builds reproducible (use clang for compiling tor)
+     * Bug 19856: Make OS X builds reproducible (getting libfaketime back)
+     * Bug 19410: Fix incremental updates by taking signatures into account
+     * Bug 20210: In dmg2mar, extract old mar file to copy permissions to the new one
+
 Tor Browser 6.5a6-hardened -- December 14 2016
  * All Platforms
    * Update Firefox to 45.6.0esr
diff --git a/gitian/versions b/gitian/versions
index 81963bb..6b8d796 100755
--- a/gitian/versions
+++ b/gitian/versions
@@ -10,15 +10,15 @@ DATA_OUTSIDE_APP_DIR=1
 
 VERIFY_TAGS=1
 
-FIREFOX_VERSION=45.2.0esr
+FIREFOX_VERSION=45.7.0esr
 
 TORBROWSER_UPDATE_CHANNEL=release
 
-TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.0-1-build1
-TOR_TAG=tor-0.2.7.6
-TORLAUNCHER_TAG=0.2.9.3
-TORBUTTON_TAG=1.9.5.4
-HTTPSE_TAG=5.1.9
+TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1
+TOR_TAG=tor-0.2.9.8
+TORLAUNCHER_TAG=0.2.10.3
+TORBUTTON_TAG=1.9.6.10
+HTTPSE_TAG=5.2.9
 NSIS_TAG=v0.3.1
 ZLIB_TAG=v1.2.8
 LIBEVENT_TAG=release-2.0.22-stable
@@ -44,10 +44,10 @@ NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2
 
 GITIAN_TAG=tor-browser-builder-4-1
 
-OPENSSL_VER=1.0.1t
+OPENSSL_VER=1.0.2j
 GMP_VER=5.1.3
 FIREFOX_LANG_VER=$FIREFOX_VERSION
-FIREFOX_LANG_BUILD=build2
+FIREFOX_LANG_BUILD=build1
 BINUTILS_VER=2.24
 GCC_VER=5.1.0
 CLANG_VER=r247539
@@ -68,7 +68,7 @@ NSIS_VER=2.51
 ## File names for the source packages
 OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz
 GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2
-NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.11-fn+sm+fx.xpi
+NOSCRIPT_PACKAGE=noscript_security_suite-2.9.5.3-fx+sm.xpi
 TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz
 CCTOOLS_PACKAGE=cctools.tar.gz
 OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz
@@ -97,12 +97,12 @@ NOTOSCFONT_PACKAGE=NotoSansSC-Regular.otf
 NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf
 
 # Hashes for packages with weak sigs or no sigs
-OPENSSL_HASH=4a6ee491a2fdb22e519c76fdc2a628bb3cec12762cd456861d207996c8a07088
+OPENSSL_HASH=e7aff292be21c259c6af26469c7a9b3ba26e9abaaffd325e3dccc9785256c431
 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf
 OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc
 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9
-NOSCRIPT_HASH=fdd965a69188ac651b08a7d3ada54821a89db10a4685aa73ba59edc0b8243390
+NOSCRIPT_HASH=ce9779a3a5a2574b958f8e4d079a99d43a8f84193bef52c587c704ed81c2fbbd
 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4
 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c
diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml
index 210e707..90bc017 100644
--- a/tools/update-responses/config.yml
+++ b/tools/update-responses/config.yml
@@ -20,16 +20,17 @@ build_targets:
     osx64: Darwin_x86_64-gcc3
 channels:
     alpha: 6.5a6
-    release: 6.0.1
+    release: 6.5
 versions:
-    6.0.1:
-        platformVersion: 45.2.0
-        detailsURL: https://blog.torproject.org/blog/tor-browser-601-released
+    6.5:
+        platformVersion: 45.7.0
+        detailsURL: https://blog.torproject.org/blog/tor-browser-65-released
         incremental_from:
-          - 5.5.5
-          - 6.0
+          - 6.0.8
         migrate_archs:
           osx32: osx64
+        migrate_langs:
+          pt-PT: pt-BR
         osx32:
             minSupportedOSVersion: 10.8
             detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#updating



More information about the tbb-commits mailing list