[tor-commits] [tor-browser-bundle/master] Release preparations

gk at torproject.org gk at torproject.org
Thu Jan 21 20:22:50 UTC 2016 

commit 56c9e21c35d93e29d2750184fa44d23f46aef71c
Author: Georg Koppen <gk at torproject.org>
Date:   Thu Jan 21 20:22:19 2016 +0000

    Release preparations
---
 Bundle-Data/Docs/ChangeLog.txt    |   49 +++++++++++++++++++++++++++++++++++++
 gitian/versions                   |   32 ++++++++++--------------
 tools/update-responses/config.yml |   12 ++++-----
 3 files changed, 68 insertions(+), 25 deletions(-)

diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index dbb01bd..6042c2f 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,52 @@
+Tor Browser 5.5 -- January 26 2016
+ * All Platforms
+   * Update Firefox to 38.6.0esr
+   * Update libevent to 2.0.22-stable
+   * Update NoScript to 2.9.0.2
+   * Update Torbutton to 1.9.4.3
+     * Bug 16990: Show circuit display for connections using multi-party channels
+     * Bug 18019: Avoid empty prompt shown after non-en-US update
+     * Bug 18004: Remove Tor fundraising donation banner
+     * Bug 16940: After update, load local change notes
+     * Bug 17108: Polish about:tor appearance
+     * Bug 17568: Clean up tor-control-port.js
+     * Bug 16620: Move window.name handling into a Firefox patch
+     * Bug 17351: Code cleanup
+     * Translation updates
+   * Update Tor Launcher to 0.2.7.8
+     * Bug 18113: Randomly permutate available default bridges of chosen type
+   * Bug 13313: Bundle a fixed set of fonts to defend against fingerprinting
+   * Bug 10140: Add new Tor Browser locale (Japanese)
+   * Bug 17428: Remove Flashproxy
+   * Bug 13512: Load a static tab with change notes after an update
+   * Bug 9659: Avoid loop due to optimistic data SOCKS code (fix of #3875)
+   * Bug 15564: Isolate SharedWorkers by first-party domain
+   * Bug 16940: After update, load local change notes
+   * Bug 17759: Apply whitelist to local fonts in @font-face (fix of #13313)
+   * Bug 17009: Shift and Alt keys leak physical keyboard layout (fix of #15646)
+   * Bug 17369: Disable RC4 fallback
+   * Bug 17442: Remove custom updater certificate pinning
+   * Bug 16620: Move window.name handling into a Firefox patch
+   * Bug 17220: Support math symbols in font whitelist
+   * Bug 10599+17305: Include updater and build patches needed for hardened builds
+   * Bug 18115+18102+18071+18091: Update/add new obfs4 bridge
+   * Bug 18072: Change recommended pluggable transport type to obfs4
+   * Bug 18008: Create a new MAR Signing key and bake it into Tor Browser
+   * Bug 16322: Use onion address for DuckDuckGo search engine
+   * Bug 17917: Changelog after update is empty if JS is disabled
+ * Windows
+   * Bug 17250: Add localized font names to font whitelist
+   * Bug 16707: Allow more system fonts to get used on Windows
+   * Bug 13819: Ship expert bundles with console enabled
+   * Bug 17250: Fix broken Japanese fonts
+   * Bug 17870: Add intermediate certificate for authenticode signing
+ * OS X
+   * Bug 17122: Rename Japanese OS X bundle
+   * Bug 16707: Allow more system fonts to get used on OS X
+   * Bug 17661: Whitelist font .Helvetica Neue DeskInterface
+ * Linux
+   * Bug 16672: Don't use font whitelisting for Linux users
+
 Tor Browser 5.5a6-hardened -- January 7 2016
  * All Platforms
    * Update NoScript to 2.9
diff --git a/gitian/versions b/gitian/versions
index 8e35391..7ff094e 100755
--- a/gitian/versions
+++ b/gitian/versions
@@ -3,27 +3,25 @@ BUNDLE_LOCALES="ar de es-ES fa fr it ko nl pl pt-PT ru tr vi zh-CN"
 BUNDLE_LOCALES_LINUX="ja"
 BUNDLE_LOCALES_WIN32="ja"
 BUNDLE_LOCALES_MAC="ja-JP-mac"
-
 BUILD_PT_BUNDLES=1
 
 VERIFY_TAGS=1
 
-FIREFOX_VERSION=38.2.0esr
+FIREFOX_VERSION=38.6.0esr
 
 TORBROWSER_UPDATE_CHANNEL=release
 
-TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.0-1-build2
-TOR_TAG=tor-0.2.6.10
-TORLAUNCHER_TAG=0.2.7.7
-TORBUTTON_TAG=1.9.3.2
-HTTPSE_TAG=5.1.0
+TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-5.5-1-build1
+TOR_TAG=tor-0.2.7.6
+TORLAUNCHER_TAG=0.2.7.8
+TORBUTTON_TAG=1.9.4.3
+HTTPSE_TAG=5.1.2
 NSIS_TAG=v0.3
 ZLIB_TAG=v1.2.8
-LIBEVENT_TAG=release-2.0.21-stable
+LIBEVENT_TAG=release-2.0.22-stable
 MINGW_TAG=a883b47a45ff74ced41dfbd9f748d5c2c61f3c01 # due to bug 1156131
 PYPTLIB_TAG=pyptlib-0.0.6
 OBFSPROXY_TAG=obfsproxy-0.2.12
-FLASHPROXY_TAG=1.6
 LIBFTE_TAG=85ef8ae58dbf0d02ea26b627e343784b5574c428 # sketch master with fix
 FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19
 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014
@@ -38,12 +36,12 @@ GO_X_NET_TAG=7dbad50ab5b31073856416cdcfeb2796d682f844
 OBFS4_TAG=obfs4proxy-0.0.5
 NOTOFONTS_TAG=720e34851382ee3c1ef024d8dffb68ffbfb234c2
 
-GITIAN_TAG=tor-browser-builder-3.x-8
+GITIAN_TAG=tor-browser-builder-3.x-8-gpgsux
 
-OPENSSL_VER=1.0.1p
+OPENSSL_VER=1.0.1q
 GMP_VER=5.1.3
 FIREFOX_LANG_VER=$FIREFOX_VERSION
-FIREFOX_LANG_BUILD=build2
+FIREFOX_LANG_BUILD=build1
 BINUTILS_VER=2.24
 GCC_VER=5.1.0
 PYTHON_VER=2.7.5
@@ -52,7 +50,6 @@ ARGPARSE_VER=1.2.1
 PYYAML_VER=3.11
 ZOPEINTERFACE_VER=4.0.5
 TWISTED_VER=13.2.0
-M2CRYPTO_VER=0.21.1
 PY2EXE_VER=0.6.9
 SETUPTOOLS_VER=1.4
 LXML_VER=3.3.5
@@ -63,7 +60,7 @@ NOTOCJKFONT_VER=1.004
 ## File names for the source packages
 OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz
 GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2
-NOSCRIPT_PACKAGE=noscript_security_suite-2.6.9.34-sm+fn+fx.xpi
+NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.2-sm+fx+fn.xpi
 TOOLCHAIN4_PACKAGE=x86_64-apple-darwin10.tar.xz
 TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz
 OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz
@@ -78,7 +75,6 @@ ARGPARSE_PACKAGE=argparse-${ARGPARSE_VER}.tar.gz
 PYYAML_PACKAGE=PyYAML-${PYYAML_VER}.tar.gz
 ZOPEINTERFACE_PACKAGE=zope.interface-${ZOPEINTERFACE_VER}.zip
 TWISTED_PACKAGE=Twisted-${TWISTED_VER}.tar.bz2
-M2CRYPTO_PACKAGE=M2Crypto-${M2CRYPTO_VER}.tar.gz
 PY2EXE_PACKAGE=py2exe-${PY2EXE_VER}.win32-py2.7.exe
 SETUPTOOLS_PACKAGE=setuptools-${SETUPTOOLS_VER}.tar.gz
 LXML_PACKAGE=lxml-${LXML_VER}.tar.gz
@@ -88,20 +84,19 @@ NOTOCJKFONT_PACKAGE=NotoSansCJKsc-Regular.otf
 STIXMATHFONT_PACKAGE=STIXv1.1.1-latex.zip
 
 # Hashes for packages with weak sigs or no sigs
-OPENSSL_HASH=bd5ee6803165c0fb60bbecbacacf244f1f90d2aa0d71353af610c29121e9b2f1
+OPENSSL_HASH=b3658b84e9ea606a5ded3c972a5517cd785282e7ea86b20c78aa4b773a047fb7
 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf
 OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc
 TOOLCHAIN4_HASH=7b71bfe02820409b994c5c33a7eab81a81c72550f5da85ff7af70da3da244645
 TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9
-NOSCRIPT_HASH=d17e3eeb8cc6ddc6c6cabd002184eced5c8cf061c9d337bac2085e7d2daceacd
+NOSCRIPT_HASH=f3c9dec710e02d809fa85ac76750e5f074656105c1bde03d400cb597b2eb1fba
 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c
 ARGPARSE_HASH=ddaf4b0a618335a32b6664d4ae038a1de8fbada3b25033f9021510ed2b3941a4
 PYYAML_HASH=c36c938a872e5ff494938b33b14aaa156cb439ec67548fcab3535bb78b0846e8
 ZOPEINTERFACE_HASH=1a7c84716bbd9981915b64a81d8a3f076a5934a8c8df4224655469b3564940cc
 TWISTED_HASH=095175638c019ac7c0604f4c291724a16ff1acd062e181b01293bf4dcbc62cf3
-M2CRYPTO_HASH=25b94498505c2d800ee465db0cc1aff097b1615adc3ac042a1c85ceca264fc0a
 PY2EXE_HASH=610a8800de3d973ed5ed4ac505ab42ad058add18a68609ac09e6cf3598ef056c
 SETUPTOOLS_HASH=75d288687066ed124311d6ca5f40ffa92a0e81adcd7fff318c6e84082713cf39
 PARSLEY_HASH=50d30cee70770fd44db7cea421cb2fb75af247c3a1cd54885c06b30a7c85dd23
@@ -127,7 +122,6 @@ PYYAML_URL=https://pypi.python.org/packages/source/P/PyYAML/${PYYAML_PACKAGE}
 ZOPEINTERFACE_URL=https://pypi.python.org/packages/source/z/zope.interface/${ZOPEINTERFACE_PACKAGE}
 TWISTED_URL=https://pypi.python.org/packages/source/T/Twisted/${TWISTED_PACKAGE}
 # TWISTED_URL=https://twistedmatrix.com/Releases/Twisted/$(echo ${TWISTED_VER} | awk -F. '{print $1"."$2}')/${TWISTED_PACKAGE}
-M2CRYPTO_URL=https://pypi.python.org/packages/source/M/M2Crypto/${M2CRYPTO_PACKAGE}
 PY2EXE_URL=http://liquidtelecom.dl.sourceforge.net/project/py2exe/py2exe/${PY2EXE_VER}/${PY2EXE_PACKAGE}
 SETUPTOOLS_URL=https://pypi.python.org/packages/source/s/setuptools/${SETUPTOOLS_PACKAGE}
 LXML_URL=https://pypi.python.org/packages/source/l/lxml/${LXML_PACKAGE}
diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml
index d61793c..362c146 100644
--- a/tools/update-responses/config.yml
+++ b/tools/update-responses/config.yml
@@ -10,14 +10,14 @@ build_targets:
     osx64: Darwin_x86_64-gcc3
 channels:
     alpha: 5.5a6
-    release: 5.0
+    release: 5.5
 versions:
-    5.0:
-        platformVersion: 38.2.0
-        detailsURL: https://www.torproject.org/projects/torbrowser.html.en
-        download_url: https://www.torproject.org/dist/torbrowser/5.0
+    5.5:
+        platformVersion: 38.6.0
+        detailsURL: https://blog.torproject.org/blog/tor-browser-55-released
+        download_url: https://www.torproject.org/dist/torbrowser/5.5
         incremental_from:
-          - 4.5.3
+          - 5.0.7
         migrate_archs:
           osx32: osx64
         osx32:

More information about the tor-commits mailing list