zerotracepen (4.2)

  • Major changes

    • Switch to a redesigned upgrade system (Closes: #15281), which:
      • removes the need for manual upgrades caused by lack of disk space
        on the Zero Trace Pen device
      • uses less RAM
    • Bump snapshot of the Debian archive to 2019122802

    • Security fixes

      • Upgrade Tor Browser to 9.0.3 (Closes: #17402)
      • Upgrade Linux to 5.3.15-1 (Closes: #17332)
        and upgrade the aufs module to 5.3-20191223
      • Upgrade Thunderbird to 1:68.3.0-2~deb10u1
      • Upgrade libsasl2 to 2.1.27+dfsg-1+deb10u1
      • Upgrade python3-ecdsa to 0.13-3+deb10u1

    • Bugfixes

      • KeePassXC:
        • Open ~/Persistent/keepassx.kdbx by default again (Closes: #17212)
        • Open the database specified by the user on the command-line, if any
        • Fix database renaming prompt
      • Upgrader:
        • Ensure debugging info lands in the Journal before we refer to it
        • Catch more download errors
      • Upgrade amd64-microcode to 3.20191218.1, which removes firmware
        updates that cause issues

    • Minor improvements and updates

      • Add metadata analysis tools used by SecureDrop (Closes: #17178)
      • Refresh the signing key before checking for available upgrades
        (Closes: #15279)
      • Port the Upgrader and perl5lib to a set of dependencies that are
        faster and have a lower memory footprint (Closes: #17152)
      • Ensure IUKs don't include files of our website if their content
        has not changed (refs: #15290)
      • Zero heap memory at allocation time and at free time (Closes: #17236)

    • Build system

      • Import the Upgrader and perl5lib codebases into zerotracepen.git
        (part of #7036)
      • lint_po: ignore pre-existing rply cache file that can cause
        trouble if it's corrupted (Closes: #17359)
      • Move generate-languages-list to auto/scripts
      • import-translations: work around the lack of usable branches
        in Tor's translation.git (Closes: #17279)
      • Build released IUKs on Jenkins and verify that they match
        those built locally by the Release Manager (Closes: #15287)
      • Don't download every localized Tor Browser tarball: instead,
        use the new tarball that includes every langpacks (Closes: #17400)

    • Test suite

      • Adapt for the "one single SquashFS diff" upgrade scheme
      • Chutney: update to upstream 33cbff7fc73aa51a785197c5f4afa5a91d81de9c
        (Closes: #16792)
      • Fix tagging of Chutney exit relays and bridge authorities
      • Tag Chutney clients as such
      • Wait for all Chutney nodes to have bootstrapped before assuming
        the simulated Tor network is ready
      • Don't try to save tor control sockets as artifacts
      • Add a crude script to generate IUKs for our test suite
Made with ProductLift