Update Firefox to 3.6.19
Update HTTPS-Everywhere to 1.0.0development.4
Update Libevent to 2.0.12-stable

https://gitweb.torproject.org/torbrowser.git/blob_plain/HEAD:/README

1 Changes in version 0.2.2.31-rc - 2011-08-17
2 Tor 0.2.2.31-rc is the second and hopefully final release candidate
3 for the Tor 0.2.2.x series.
4
5 o Major bugfixes:
6 - Remove an extra pair of quotation marks around the error
7 message in control-port STATUS_GENERAL BUG events. Bugfix on
8 0.1.2.6-alpha; fixes bug 3732.
9 - If we're configured to write our ControlPorts to disk, only write
10 them after switching UID and creating the data directory. This way,
11 we don't fail when starting up with a nonexistent DataDirectory
12 and a ControlPortWriteToFile setting based on that directory. Fixes
13 bug 3747; bugfix on Tor 0.2.2.26-beta.
14
15 o Minor features:
16 - Update to the August 2 2011 Maxmind GeoLite Country database.
17
18 o Minor bugfixes:
19 - Allow GETINFO fingerprint to return a fingerprint even when
20 we have not yet built a router descriptor. Fixes bug 3577;
21 bugfix on 0.2.0.1-alpha.
22 - Write several files in text mode, on OSes that distinguish text
23 mode from binary mode (namely, Windows). These files are:
24 'buffer-stats', 'dirreq-stats', and 'entry-stats' on relays
25 that collect those statistics; 'client_keys' and 'hostname' for
26 hidden services that use authentication; and (in the tor-gencert
27 utility) newly generated identity and signing keys. Previously,
28 we wouldn't specify text mode or binary mode, leading to an
29 assertion failure. Fixes bug 3607. Bugfix on 0.2.1.1-alpha (when
30 the DirRecordUsageByCountry option which would have triggered
31 the assertion failure was added), although this assertion failure
32 would have occurred in tor-gencert on Windows in 0.2.0.1-alpha.
33 - Selectively disable deprecation warnings on OS X because Lion
34 started deprecating the shipped copy of openssl. Fixes bug 3643.
35 - When unable to format an address as a string, report its value
36 as "???" rather than reusing the last formatted address. Bugfix
37 on 0.2.1.5-alpha.

Tor Browser Bundle (2.2.32-3)

Update Firefox to 6.0.2
New Firefox patches:
Improve cache APIs to enable better isolation (closes: #3666)
Provide auth headers to on-modify-request (closes: #3907)
Randomize HTTP pipelining as an experimental website traffic fingerprinting defense (closes: #3914)
Enable HTTP pipelining in TBB prefs.js (closes: #3913)
Update Torbutton to 1.4.2
bug 3879: Fix broken framed sites (yopmail, gmane, gmaps, etc)
bug 3337: Fetch check.tp.o page to check versions (TBB only)
Bug 3754: Fix SafeCache OCSP errors (fix for TBB only)
Update NoScript to 2.1.2.7

Windows fixes

Add missing C runtime libraries so WinXP users can use TBB again. Fix found by velope.

Linux fixes

Update libpng to 1.4.8 (closes: #3906)
Make the TBB launch script work when using a relative symlink (closes: #2525)

The Tor Browser Bundles have been updated to Firefox 7.0.1 and Tor 0.2.2.33. The bundles were originally uploaded with Firefox 7.0, but a fix was quickly released, so the two changelogs have been merged in this post.

Windows fixes

Begin building Vidalia with DEP/ASLR

OS X fixes

Stop TBB from logging so much information to the system by only allowing dyld log library loads to syslog when it is in debug mode (closes: #4093)

General fixes and updates

Update Firefox to 7.0.1
Update OpenSSL to 1.0.0e (closes: #3996) (except for OS X)
Update Tor to 0.2.2.33
Update NoScript to 2.1.2.8
Downgrade HTTPS Everywhere to 1.0.3, because we don't want stable TBBs to use development versions of extensions (closes: #4050)

Tor 0.2.3.5-alpha fixes two bugs that make it possible to enumerate
bridge relays; fixes an assertion error that many users started hitting
today; and adds the ability to refill token buckets more often than
once per second, allowing significant performance improvements.

Security fixes:

Bridge relays now do their directory fetches inside Tor TLS
connections, like all the other clients do, rather than connecting
directly to the DirPort like public relays do. Removes another
avenue for enumerating bridges. Fixes bug 4115; bugfix on 0.2.0.35.
Bridges relays now build circuits for themselves in a more similar
way to how clients build them. Removes another avenue for
enumerating bridges. Fixes bug 4124; bugfix on 0.2.0.3-alpha,
when bridges were introduced.

Major bugfixes:

Fix an "Assertion md->held_by_node == 1 failed" error that could
occur when the same microdescriptor was referenced by two node_t
objects at once. Fix for bug 4118; bugfix on Tor 0.2.3.1-alpha.

Major features (networking):

Add a new TokenBucketRefillInterval option to refill token buckets
more frequently than once per second. This should improve network
performance, alleviate queueing problems, and make traffic less
bursty. Implements proposal 183; closes ticket 3630. Design by
Florian Tschorsch and Björn Scheuermann; implementation by
Florian Tschorsch.

Minor bugfixes:

Change an integer overflow check in the OpenBSD_Malloc code so
that GCC is less likely to eliminate it as impossible. Patch
from Mansour Moufid. Fixes bug 4059.

Minor bugfixes (usability):

Downgrade log messages about circuit timeout calibration from
"notice" to "info": they don't require or suggest any human
intervention. Patch from Tom Lowenthal. Fixes bug 4063;
bugfix on 0.2.2.14-alpha.

Minor features (diagnostics):

When the system call to create a listener socket fails, log the
error message explaining why. This may help diagnose bug 4027.

Update Firefox to 17.0.5esr
Update NoScript to 2.6.59

Update Firefox to 17.0.5esr
Update NoScript to 2.6.59

Alpha Bundle Contents

Vidalia 0.3.1
Tor 0.2.4.12-alpha
Mozilla Firefox 17.0.5esr and Torbutton 1.5.1
https://gitweb.torproject.org/torbrowser.git/tree

hanges in version 0.2.4.15-rc - 2013-07-01
Tor 0.2.4.15-rc is the first release candidate for the Tor 0.2.4.x
series. It fixes a few smaller bugs, but generally appears stable.
Please test it and let us know whether it is!

o Major bugfixes:
- When receiving a new configuration file via the control port's
LOADCONF command, do not treat the defaults file as absent.
Fixes bug 9122; bugfix on 0.2.3.9-alpha.

o Minor features:
- Issue a warning when running with the bufferevents backend enabled.
It's still not stable, and people should know that they're likely
to hit unexpected problems. Closes ticket 9147.

1 Changes in version 0.2.4.18-rc - 2013-11-16
2 Tor 0.2.4.18-rc is the fourth release candidate for the Tor 0.2.4.x
3 series. It takes a variety of fixes from the 0.2.5.x branch to improve
4 stability, performance, and better handling of edge cases.
5
6 o Major features:
7 - Re-enable TLS 1.1 and 1.2 when built with OpenSSL 1.0.1e or later.
8 Resolves ticket 6055. (OpenSSL before 1.0.1 didn't have TLS 1.1 or
9 1.2, and OpenSSL from 1.0.1 through 1.0.1d had bugs that prevented
10 renegotiation from working with TLS 1.1 or 1.2, so we had disabled
11 them to solve bug 6033.)
12
13 o Major bugfixes:
14 - No longer stop reading or writing on cpuworker connections when
15 our rate limiting buckets go empty. Now we should handle circuit
16 handshake requests more promptly. Resolves bug 9731.
17 - If we are unable to save a microdescriptor to the journal, do not
18 drop it from memory and then reattempt downloading it. Fixes bug
19 9645; bugfix on 0.2.2.6-alpha.
20 - Stop trying to bootstrap all our directory information from
21 only our first guard. Discovered while fixing bug 9946; bugfix
22 on 0.2.4.8-alpha.
23 - The new channel code sometimes lost track of in-progress circuits,
24 causing long-running clients to stop building new circuits. The
25 fix is to always call circuit_n_chan_done(chan, 0) from
26 channel_closed(). Fixes bug 9776; bugfix on 0.2.4.17-rc.

Update Tor to 0.2.4.18-rc
4 * Update Firefox to 17.0.11esr
5 * Update NoScript to 2.6.8.5
6 * Remove PDF.js since it is no longer supported in Firefox 17

Tor Browser Bundle (2.3.25-15); suite=windows

* Update Firefox to 17.0.11esr
* Update NoScript to 2.6.8.5

-- Erinn Clark <erinn@torproject.org> Fri Nov 15 18:11:02 BRST 2013