Tor Browser 6.5a2 is released

Tor Browser 6.5a2 is now available from the Tor Browser Project page and also from ourdistribution directory.

This release features important security updates to Firefox.

This release updates firefox to 45.3.0esr and contains the improvements that went intoTor Browser 6.0.3. Additionally, Tor is updated to 0.2.8.5-rc, the default search engine has been switched to DuckDuckGo, resource URLs are blocked to avoid fingerprinting.

Note: Due to bug 19410, on OSX the incremental update will not be working for users who installed the previous version using the .dmg file. The internal updater should still work, though, doing a complete update.

Here is the full changelog since 6.5a1:

• All Platforms
  • Update Firefox to 45.3.0esr
  • Update Tor to tor-0.2.8.5-rc
  • Update Torbutton to 1.9.6.1
    • Bug 19689: Use proper parent window for plugin prompt
    • Bug 19206: Avoid SOCKS auth and NEWNYM collisions when sharing a tor client
    • Bug 19417: Disable asm.js (but add code to clear on New Identity if enabled)
    • Bug 19273: Improve external app launch handling and associated warnings
    • Bug 8725: Block addon resource and url fingerprinting with nsIContentPolicy
  • Update HTTPS-Everywhere to 5.2.1
  • Update NoScript to 2.9.0.12
  • Bug 19417: Disable asmjs for now
  • Bug 19715: Disable the meek-google pluggable transport option
  • Bug 19714: Remove mercurius4 obfs4 bridge
  • Bug 19585: Fix regression test for keyboard layout fingerprinting
  • Bug 19515: Tor Browser is crashing in graphics code
  • Bug 18513: Favicon requests can bypass New Identity
  • Bug 19273: Write C++ patch for external app launch handling
  • Bug 16998: Isolate preconnect requests to URL bar domain
  • Bug 18923: Add script to run all Tor Browser regression tests
  • Bug 19478: Prevent millisecond resolution leaks in File API
  • Bug 19401: Fix broken PDF download button
  • Bug 19411: Don’t show update icon if a partial update failed
  • Bug 19400: Back out GCC bug workaround to avoid asmjs crash
  • Bug 19735: Switch default search engine to DuckDuckGo
• Windows
  • Bug 19348: Adapt to more than one build target on Windows (fixes updates)
  • Bug 19725: Remove old updater files left on disk after upgrade to 6.x
• Linux
  • Bug 19276: Disable Xrender due to possible performance regressions
  • Bug 19725: Remove old updater files left on disk after upgrade to 6.x
• OS X
  • Bug 19269: Icon doesn’t appear in Applications folder or Dock
• Android
  • Bug 19484: Avoid compilation error when MOZ_UPDATER is not defined
• Build System
  • All Platforms
    • Bug 19703: Upgrade Go to 1.6.3

原文：http://ift.tt/2avh4KI

via 细节的力量 http://ift.tt/2aIqSQE