zerotracepen (3.7.1)

Security fixes

• Upgrade Tor Browser to 7.5.5 (MFSA 2018-14; closes: #15643).

• Upgrade Thunderbird to 52.8.0 (DSA-4209-1; Closes: #15607).

  • Partially fixes EFAIL.
  • Fixes importing OpenPGP keys from keyservers with Enigmail.
  • Accordingly refresh our Thunderbird AppArmor profile patch.

• Upgrade cURL to 7.52.1-5+deb9u6 (DSA-4202-1).

• Upgrade GnuPG (modern) 2.1.18-8~deb9u2 (DSA-4222-1).

• Upgrade GnuPG (legacy) to 1.4.21-4+deb9u1 (DSA-4223-1).

• Upgrade Git to 1:2.11.0-3+deb9u3 (DSA-4212-1).

• Upgrade PackageKit to 1.1.5-2+deb9u1 (DSA-4207-1).

• Upgrade procps to 2:3.3.12-3+deb9u1 (DSA-4208-1).

• Upgrade wavpack to 5.0.0-2+deb9u2 (DSA-4197-1).

• Upgrade wget to 1.18-5+deb9u2 (DSA-4195-1).

• Upgrade xdg-utils to 1.1.1-1+deb9u1 (DSA-4211-1).

• Bugfixes

• Fix setting a screen locker password with non-ASCII characters
  (Closes: #15636).

• WhisperBack:

  • Rename the WhisperBack launcher to "WhisperBack Error Reporting"
    so that users have a better chance to understand what it does
    (Closes: #6432)
  • Ensure debugging info in Whisperback reports don't contain email
    signature markers so that email clients forward it in full
    (Closes: #15468).
  • Wrap text written by the user to 70 chars (Closes: #11689).

• Minor improvements

• The "Zero Trace Pen documentation" desktop launcher now opens /doc instead of
  the aging /getting_started that confused people during user testing
  (Closes: #15575).

• Test suite

• Update to match "Zero Trace Pen documentation" behaviour change.