[tor-announce] Tor Browser 8.0.4 is released

[Nicolas Vigier]

Tor Browser 8.0.4 is now available from the Tor Browser Project page [1]
and also from our distribution directory [2].

    1: https://www.torproject.org/download/download-easy.html
    2: https://www.torproject.org/dist/torbrowser/8.0.4/

This release features important security updates to Firefox.

    4: https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/

Tor Browser 8.0.4 contains updates to Tor (0.3.4.9 [5]), OpenSSL (1.0.2q)
and other bundle components. Additionally, we backported a number of
patches from our alpha series where they got some baking time. The most
important ones are

    5: https://blog.torproject.org/new-release-tor-0349

 - a defense against protocol handler enumeration which should enhance
   our fingerprinting resistance,

 - enabling Stylo for macOS users by bypassing a reproducibility issue
   caused by Rust compilation and

 - setting back the sandboxing level to 5 on Windows (the Firefox default),
   after working around some Tor Launcher interference causing a broken
   Tor Browser experience.

Moreover, we ship an updated donation banner for our year-end donation
campaign.

The full changelog since Tor Browser 8.0.3 is:

 * All platforms
   * Update Firefox to 60.4.0esr
   * Update Tor to 0.3.4.9
   * Update OpenSSL to 1.0.2q
   * Update Torbutton to 2.0.9
     * Bug 28540: Use new text for 2018 donation banner
     * Bug 28515: Use en-US for english Torbutton strings
     * Translations update
   * Update HTTPS Everywhere to 2018.10.31
   * Update NoScript to 10.2.0
 * Bug 1623: Block protocol handler enumeration (backport of fix for #680300)
 * Bug 25794: Disable pointer events
 * Bug 28608: Disable background HTTP response throttling
 * Bug 28185: Add smallerRichard to Tor Browser
 * Windows
   * Bug 26381: about:tor page does not load on first start on Windows
   * Bug 28657: Remove broken FTE bridge from Tor Browser
 * OS X
   * Bug 26263: App icon positioned incorrectly in macOS DMG installer window
   * Bug 26475: Fix Stylo related reproducibility issue
 * Linux
   * Bug 26475: Fix Stylo related reproducibility issue
   * Bug 28657: Remove broken FTE bridge from Tor Browser
 * Build System
   * All Platforms
     * Bug 27218: Generate multiple Tor Browser bundles in parallel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-announce/attachments/20181211/353bc665/attachment.sig>