[tor-commits] [tor-browser-bundle/hardened-builds] Release preparations for 6.5a4-hardened

gk at torproject.org gk at torproject.org
Mon Nov 14 08:27:47 UTC 2016


commit 0cbe69dbc243ee09a9c536ed43ef705609c68e1e
Author: Georg Koppen <gk at torproject.org>
Date:   Mon Nov 14 08:06:44 2016 +0000

    Release preparations for 6.5a4-hardened
    
    Version bumps, Changelog update, and config.yml update
---
 Bundle-Data/Docs/ChangeLog.txt    | 48 +++++++++++++++++++++++++++++++++++++++
 gitian/versions.alpha             | 16 ++++++-------
 tools/update-responses/config.yml | 10 ++++----
 3 files changed, 61 insertions(+), 13 deletions(-)

diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt
index 68a9d43..fd5b60e 100644
--- a/Bundle-Data/Docs/ChangeLog.txt
+++ b/Bundle-Data/Docs/ChangeLog.txt
@@ -1,3 +1,51 @@
+Tor Browser 6.5a4-hardened -- November 16 2016
+ * All Platforms
+   * Update Firefox to 45.5.0esr
+   * Update Tor to 0.2.9.5-alpha
+   * Update OpenSSL to 1.0.2j
+   * Update Torbutton to 1.9.6.7
+     * Bug 20414: Add donation banner on about:tor for 2016 campaign
+     * Bug 20111: use Unix domain sockets for SOCKS port by default
+     * Bug 19459: Move resizing code to tor-browser.git
+     * Bug 20264: Change security slider to 3 options
+     * Bug 20347: Enhance security slider's custom mode
+     * Bug 20123: Disable remote jar on all security levels
+     * Bug 20244: Move privacy checkboxes to about:preferences#privacy
+     * Bug 17546: Add tooltips to explain our privacy checkboxes
+     * Bug 17904: Allow security settings dialog to resize
+     * Bug 18093: Remove 'Restore Defaults' button
+     * Bug 20373: Prevent redundant dialogs opening
+     * Bug 20388+20399+20394: Code clean-up
+     * Translation updates
+   * Update Tor Launcher to 0.2.11.1
+     * Bug 20111: use Unix domain sockets for SOCKS port by default
+     * Bug 20185: Avoid using Unix domain socket paths that are too long
+     * Bug 20429: Do not open progress window if tor doesn't get started
+     * Bug 19646: Wrong location for meek browser profile on OS X
+     * Translation updates
+   * Update HTTPS-Everywhere to 5.2.7
+   * Update meek to 0.25
+     * Bug 19646: Wrong location for meek browser profile on OS X
+     * Bug 20030: Shut down meek-http-helper cleanly if built with Go > 1.5.4
+   * Bug 20304: Support spaces and other special characters for SOCKS socket
+   * Bug 20490: Fix assertion failure due to fix for #20304
+   * Bug 19459: Size new windows to 1000x1000 or nearest 200x100 (Firefox patch)
+   * Bug 20442: Backport fix for local path disclosure after drag and drop
+   * Bug 20160: Backport fix for broken MP3-playback
+   * Bug 20043: Isolate SharedWorker script requests to first party
+   * Bug 20123: Always block remote jar files
+   * Bug 20244: Move privacy checkboxes to about:preferences#privacy
+   * Bug 19838: Add dgoulet's bridge and add another one commented out
+   * Bug 19481: Point the update URL to aus1.torproject.org
+   * Bug 20296: Rotate ports again for default obfs4 bridges
+   * Bug 20651: DuckDuckGo does not work with JavaScript disabled
+   * Bug 20399+15852: Code clean-up
+   * Bug 15953: Weird resizing dance on Tor Browser startup
+ * Build system
+   * All platforms
+     * Bug 20023: Upgrade Go to 1.7.3
+     * Bug 20583: Make the downloads.json file reproducible
+
 Tor Browser 6.5a3-hardened -- September 20 2016
  * All Platforms
    * Update Firefox to 45.4.0esr
diff --git a/gitian/versions.alpha b/gitian/versions.alpha
index 02e2bbd..c22ed9f 100755
--- a/gitian/versions.alpha
+++ b/gitian/versions.alpha
@@ -14,15 +14,15 @@ DATA_OUTSIDE_APP_DIR=1
 
 VERIFY_TAGS=1
 
-FIREFOX_VERSION=45.4.0esr
+FIREFOX_VERSION=45.5.0esr
 
 TORBROWSER_UPDATE_CHANNEL=hardened
 
-TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build2
-TOR_TAG=tor-0.2.9.2-alpha
-TORLAUNCHER_TAG=0.2.11
-TORBUTTON_TAG=1.9.6.4
-HTTPSE_TAG=5.2.4
+TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build3
+TOR_TAG=tor-0.2.9.5-alpha
+TORLAUNCHER_TAG=0.2.11.1
+TORBUTTON_TAG=1.9.6.7
+HTTPSE_TAG=5.2.7
 NSIS_TAG=v0.3.1
 ZLIB_TAG=v1.2.8
 LIBEVENT_TAG=release-2.0.22-stable
@@ -49,7 +49,7 @@ SELFRANDO_TAG=44ac0df8c0e8eb291f2d913e2dd147000bf54863
 
 GITIAN_TAG=tor-browser-builder-4-1
 
-OPENSSL_VER=1.0.2h
+OPENSSL_VER=1.0.2j
 GMP_VER=5.1.3
 FIREFOX_LANG_VER=$FIREFOX_VERSION
 FIREFOX_LANG_BUILD=build1
@@ -104,7 +104,7 @@ NOTOTCFONT_PACKAGE=NotoSansTC-Regular.otf
 ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2
 
 # Hashes for packages with weak sigs or no sigs
-OPENSSL_HASH=1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919
+OPENSSL_HASH=e7aff292be21c259c6af26469c7a9b3ba26e9abaaffd325e3dccc9785256c431
 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160
 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf
 OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc
diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml
index 022cea2..67d63c9 100644
--- a/tools/update-responses/config.yml
+++ b/tools/update-responses/config.yml
@@ -20,7 +20,7 @@ build_targets:
     osx32: Darwin_x86-gcc3
     osx64: Darwin_x86_64-gcc3
 channels:
-    hardened: 6.5a3-hardened
+    hardened: 6.5a4-hardened
     release: 6.0.1
 versions:
     6.0.1:
@@ -33,11 +33,11 @@ versions:
         osx32:
             minSupportedOSVersion: 10.8
             detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#updating
-    6.5a3-hardened:
-        platformVersion: 45.4.0
-        detailsURL: https://blog.torproject.org/blog/tor-browser-65a3-hardened-released
+    6.5a4-hardened:
+        platformVersion: 45.5.0
+        detailsURL: https://blog.torproject.org/blog/tor-browser-65a4-hardened-released
         incremental_from:
-          - 6.5a2-hardened
+          - 6.5a3-hardened
         migrate_archs:
           osx32: osx64
         osx32:



More information about the tor-commits mailing list