zerotracepen (2.7.1)

  • Security fixes

    • Upgrade Tor Browser to 6.0.7 (build3) based on Firefox 45.5.1.

    • Upgrade gstreamer0.10-based packages to 0.10.31-3+nmu4+deb8u2.

    • Upgrade imagemagick-based packages to 8:6.8.9.9-5+deb8u6.

    • Upgrade libicu52 to 52.1-8+deb8u4.

    • Upgrade vim-based packages to 2:7.4.488-7+deb8u1.

    • Minor improvements

    • Reserve 64 MiB for the kernel and 128 MiB for privileged
      processes before the memory is wiped. We hope that this might
      help (but not solve, sadly) some crashes experienced while
      wiping the memory.

    • Build system

    • Make the wiki shipped inside Zero Trace Pen build deterministically
      (Closes: #11966):

      • Enable ikiwiki's "deterministic" option, and require it when
        building.
      • Use our custom backport of discount (2.2.1-1~bpo8+1~0.zerotracepen1),
        to fix reproducibility issues (Debian#782315). This can be
        dropped once our ISO builders use Stretch.
      • Install ikiwiki from our builder-jessie APT suite, to make the
        pagestats plugin output deterministic.
    • refresh-translations: don't update PO files unless something
      other than POT-Creation-Date was changed. (Closes: #11967)

    • Fix Vagrant's is_release? check. Per auto/build, we consider it
      a release when we build from detached head, and HEAD is tagged.

    • Enforce cleanall when building a release. I.e. don't allow the
      user supplied options to override this behaviour. This is
      important since Vagrant caches wiki builds, and we do not want
      leftovers from a previous builds ending up in a release. Also,
      this is required for making Zero Trace Pen images build reproducibly.

    • Make the build system's cleanall option really clean
      everything. At the moment it doesn't clean the cached wiki
      build (which basically was its only job).

    • import-package: support contrib and non-free sections.

    • Test suite

    • Wait a bit between opening the shutdown applet menu, and
      clicking one of its widgets. (Closes: #11616).

    • Adapt Icedove test after removing the amnesia branding add-on.
      (Closes: #11906)

    • Replace --pause-on-fail with --interactive-debugging. It does
      the same thing, but also offers an interactive Ruby shell, via
      pry, with the Cucumber world context.