[tor-qa] Tor Browser 8.5a4 is ready for testing

[Georg Koppen]

Hi tor-qa!

Tor Browser 8.5a4 is ready for testing. Bundles can be found at:

https://people.torproject.org/~boklm/builds/8.5a4-build2/

This release fixes important Firefox security bugs. Highlights in Tor
Browser 8.5a4 are a new Tor alpha version, 0.3.5.3-alpha, a fixed layout
of our macOS installer window and Stylo (Mozilla's new CSS engine[1])
being enabled on macOS after fixing a reproducibility issues. Please
report any problems you find with those macOS related changes as we
think about backporting them for the stable series.

Moreover, we backport a defense against protocol handler enumeration
developed by Mozilla engineers and provide Tor Browser on all supported
platforms in four additional locales: cs, el, hu, and ka.

The full changelog since 8.5a3 is:

Tor Browser 8.5a4 -- October 23 2018
 * All Platforms
   * Update Firefox to 60.3.0esr
   * Update Tor to 0.3.5.3-alpha
   * Update Torbutton to 2.1.1
     * Bug 23925+27959: Donation banner for year end 2018 campaign
     * Bug 24172: Donation banner clobbers Tor Browser version string
     * Bug 28082: Add locales cs, el, hu, ka
     * Translations update
   * Update Tor Launcher to 0.2.17
     * Bug 27994+25151: Use the new Tor Browser logo
     * Bug 28082: Add locales cs, el, hu, ka
     * Translations update
   * Update HTTPS Everywhere to 2018.9.19
   * Update NoScript to 10.1.9.9
   * Bug 1623: Block protocol handler enumeration (backport of fix for
#680300)
   * Bug 27905: Fix many occurrences of "Firefox" in about:preferences
   * Bug 28082: Add locales cs, el, hu, ka
 * Windows
   * Bug 21704: Abort install if CPU is missing SSE2 support
   * Bug 28002: Fix the precomplete file in the en-US installer
 * OS X
   * Bug 26263: App icon positioned incorrectly in macOS DMG installer
window
   * Bug 26475: Fix Stylo related reproducibilitiy issue
 * Linux
   * Bug 26475: Fix Stylo related reproducibilitiy issue
   * Bug 28022: Use `/usr/bin/env bash` for bash invocation
 * Android
   * Backport of fixes for bug 1448014, 1458905, 1441345, and 1448305
 * Build System
   * All Platforms
     * Bug 27218: Generate multiple Tor Browser bundles in parallel
   * Windows
     * Bug 27320: Build certutil for Windows
   * OS X
     * Bug 27320: Build certutil for macOS

Georg

[1]
https://hacks.mozilla.org/2017/08/inside-a-super-fast-css-engine-quantum-css-aka-stylo/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-qa/attachments/20181020/33d805a3/attachment.sig>