Tor Browser 7.5a5 is released

Tor Browser 7.5a5 is now available from the Tor Browser Project page and also from our distribution directory.

This release features important security updates to Firefox.

Besides the usual Firefox security and extensions updates this alpha contains a bunch of long-awaited features:

1. We include Tor 0.3.2.1-alpha, the first alpha release in the 0.3.2 series, with support for next generation onion services and a new circuit scheduler, KIST.
2. Thanks to the work of Jed Davis we are able to ship a content sandbox for Linux users. While the content sandbox is disabled in Firefox 52 ESR versions, which Tor Browser is based on, backported patches allow us to protect our Linux users with the same mechanisms that are provided to regular Firefox users.
3. The content sandbox is enabled for Windows users as well. While we still need to clean up our workarounds to get the sandboxing code to work with our mingw-w64 compiler, we think the enabled sandbox is ready for a wider testing in our alpha series. Please give it a try if you can.
4. Although this change should be invisible to users, we switched our build system from gitian/tor-browser-bundleto rbm/tor-browser-build. The build should continue to be reproducible and if you want to do a build yourself the README file in the tor-browser-build repository has some informations.

Update: Tor Browser 7.5a5 is broken when using the sandboxed-tor-browser version 0.0.13, due to bug 23692. Version 0.0.14 of the sandboxed-tor-browser has been released to fix that issue.

Note: The release date in the changelog displayed after the update is incorrect. The actual release date is September 28.

The full changelog since Tor Browser 7.5a4 is:

• All Platforms
  • Update Firefox to 52.4.0esr
  • Update Tor to 0.3.2.1-alpha
  • Update Torbutton to 1.9.8.1
    • Bug 20375: Warn users after entering fullscreen mode
    • Bug 22989: Fix dimensions of new windows on macOS
    • Bug 23526: Add 2017 Donation banner text
    • Bug 23483: Donation banner on about:tor for 2017 (testing mode)
    • Translations update
  • Update Tor Launcher to 0.2.13
    • Bug 23240: Retrieve current bootstrap progress before showing progress bar
    • Bug 22232: Add README on use of bootstrap status messages
    • Translations update
  • Update HTTPS-Everywhere to 2017.9.12
  • Update NoScript to 5.0.10
  • Update sandboxed-tor-browser to 0.0.13
  • Bug 23393: Don’t crash all tabs when closing one tab
  • Bug 23166: Add new obfs4 bridge to the built-in ones
  • Bug 23258: Fix broken HTTPS-Everywhere on higher security levels
  • Bug 21270: NoScript settings break WebExtensions add-ons
  • Bug 23104: CSS line-height reveals the platform Tor Browser is running on
• Windows
  • Bug 16010: Enable content sandboxing on Windows
  • Bug 23582: Enable the Windows DLL blocklist for mingw-w64 builds
  • Bug 23396: Update the msvcr100.dll we ship
  • Bug 23230: Fix build error on Windows 64
• OS X
  • Bug 23404: Add missing Noto Sans Buginese font to the macOS whitelist
• Linux
  • Bug 10089: Set middlemouse.contentLoadURL to false by default
  • Bug 22692: Enable content sandboxing on Linux
  • Bug 18101: Suppress upload file dialog proxy bypass (linux part)
• Build System
  • All Platforms
    • Switch from gitian/tor-browser-bundle to rbm/tor-browser-build

原文：http://ift.tt/2ywwYOf

via 细节的力量 http://ift.tt/2fXl7Sj