Security fixes
Harden sudo config to avoid potential future privilege escalation
(Closes: #15829).
Upgrade Linux to 4.18 and aufs to 4.18-20181008 (Closes: #15936).
Upgrade the snapshot of the Debian archive to 2018100901 accordingly.
Upgrade Tor Browser to 8.0.3-build1 (Closes: #16067).
Upgrade Thunderbird to 60.2.1 (Closes: #16037).
Bugfixes
Fix installation of mesa/stretch-backports by installing libwayland*
from stretch-backports (Closes: #15846).
Tor Browser AppArmor profile patch: update to apply cleanly on top
of torbrowser-launcher 0.2.9-5.
Additional Software: fix issues spotted during the code review
(Closes: #15838).
Additional Software: make sure to offer persistence only for newly
installed packages, avoiding inconsistency (Closes: #15983).
Improve button labels in confirmation dialogs of the Zero Trace Pen installer
(Closes: #11501).
Hardcode User Agent in htpdate.user-agent (Closes: #15912), as the
Tor Browser doesn't expose it anymore.
Fix encoding-related crashes in Zero Trace Pen Installer (Closes: #15166).
Set the Firefox preferences to spoof English, to avoid leaking
information about locale settings (Closes: #16029).
VeraCrypt: Hide PIM entries in GNOME Shell and Disks, since a newer
cryptsetup would be needed (Closes: #16031).
VeraCrypt: Fix support for multiple encryption, by iterating over
all children in the device-mapper tree (Closes: #15967).
Update translations.
Minor improvements and updates
Add dmsetup and losetup output in WhisperBack reports to help debug
VeraCrypt-related issues (Closes: #15966).
Let AppArmor allow access to /usr/local/share/mime, reducing noise
in logs due to many DENIED entries (Closes: #15965).
Use proper stem.connection module in onion-grater instead of trying
to read the auth cookie manually: that's fragile and breaks some use
cases (e.g. custom auth cookie).
Unlock VeraCrypt Volumes: Improve internationalization support.
Test suite
Ensure the test suite doesn't break when changing the headline of
/home (Closes: #12156).
Update test suite for updated button labels in confirmation dialogs
of the Zero Trace Pen installer (Closes: #11501).