Security fixes
Upgrade Tor Browser to 8.0.4-build2 (Closes: #16193).
Upgrade Thunderbird to 60.3.0-1~deb9u1.0zerotracepen1 (Closes: #16118).
Thunderbird: unconditionally disable Autocrypt, as it is not safe in
its current state (See: #15923, Closes: #16186).
Upgrade Linux to 4.18.20 and aufs to 4.18.11+-20181119
(Closes: #16145).
Upgrade cURL to 7.52.1-5+deb9u8 (DSA-4331).
Upgrade Ghostscript to 9.26~dfsg-0+deb9u1 (DSA-4336, DSA-4346).
Upgrade Perl to 5.24.1-3+deb9u5 (DSA-4347).
Upgrade Policykit to 0.105-18+deb9u1 (DSA-4350).
Upgrade Samba to 2:4.5.12+dfsg-2+deb9u4 (DSA-4345).
Upgrade OpenSSL to 1.1.0j-1~deb9u1 (DSA-4348).
Upgrade libtiff to 4.0.8-2+deb9u4 (DSA-4349).
Bugfixes
Zero Trace Pen Upgrader:
· Improve support for incremental upgrades to avoid issues with
partially applied upgrades (Closes: #14754).
· Add a prompt after the IUK has been downloaded so the user can
control when the network will be disabled; previously this was
done without users having a say, possibly leading to confusion and
lost work (Closes: #15282).
Thunderbird: always set locale according to environment (Closes: #16113).
Minor improvements and updates
Remove packages which were needed for getTorBrowserUserAgent
(Closes: #16024).
Fix persistence configuration window opening on full screen
(Closes: #15894).
Time sync: don't temporarily increase tor's log level when using
bridges/PTs (Closes: #15743).
Warn about non-free software depending on the host operating system
and/or virtualization stack (Closes: #16195).
Build system
Create USB image after building the ISO, and include it in build
artifacts (Closes: #15984, #15985, #15990).
Release process: adapt to IDF v2 (Closes: #16171).
Test suite
Add new Using "VeraCrypt encrypted volumes" feature, with scenarios
split into two parts: "Unlock VeraCrypt Volumes" and "GNOME Disks"
(Closes: #14469, #14471, #15238, #15239).
Reintroduce "Clock is one day in the future in bridge mode" test
(Closes: #15743).
Make starting apps via GNOME Activities Overview more robust
(Closes: #13469).
Check for "Upgrading the system" and adjust to "Upgrade successfully
downloaded" new UI (See: #14754, #15282).