zerotracepen (3.10)

  • Security fixes

    • Harden sudo config to avoid potential future privilege escalation
      (Closes: #15829).

    • Upgrade Linux to 4.18 and aufs to 4.18-20181008 (Closes: #15936).

    • Upgrade the snapshot of the Debian archive to 2018100901 accordingly.

    • Upgrade Tor Browser to 8.0.3-build1 (Closes: #16067).

    • Upgrade Thunderbird to 60.2.1 (Closes: #16037).

    • Bugfixes

    • Fix installation of mesa/stretch-backports by installing libwayland*
      from stretch-backports (Closes: #15846).

    • Tor Browser AppArmor profile patch: update to apply cleanly on top
      of torbrowser-launcher 0.2.9-5.

    • Additional Software: fix issues spotted during the code review
      (Closes: #15838).

    • Additional Software: make sure to offer persistence only for newly
      installed packages, avoiding inconsistency (Closes: #15983).

    • Improve button labels in confirmation dialogs of the Zero Trace Pen installer
      (Closes: #11501).

    • Hardcode User Agent in htpdate.user-agent (Closes: #15912), as the
      Tor Browser doesn't expose it anymore.

    • Fix encoding-related crashes in Zero Trace Pen Installer (Closes: #15166).

    • Set the Firefox preferences to spoof English, to avoid leaking
      information about locale settings (Closes: #16029).

    • VeraCrypt: Hide PIM entries in GNOME Shell and Disks, since a newer
      cryptsetup would be needed (Closes: #16031).

    • VeraCrypt: Fix support for multiple encryption, by iterating over
      all children in the device-mapper tree (Closes: #15967).

    • Update translations.

    • Minor improvements and updates

    • Add dmsetup and losetup output in WhisperBack reports to help debug
      VeraCrypt-related issues (Closes: #15966).

    • Let AppArmor allow access to /usr/local/share/mime, reducing noise
      in logs due to many DENIED entries (Closes: #15965).

    • Use proper stem.connection module in onion-grater instead of trying
      to read the auth cookie manually: that's fragile and breaks some use
      cases (e.g. custom auth cookie).

    • Unlock VeraCrypt Volumes: Improve internationalization support.

    • Test suite

    • Ensure the test suite doesn't break when changing the headline of
      /home (Closes: #12156).

    • Update test suite for updated button labels in confirmation dialogs
      of the Zero Trace Pen installer (Closes: #11501).