tails (0.17.2) unstable; urgency=low
* Iceweasel
- Upgrade to Iceweasel 17.0.5esr-0+tails2~bpo60+1.
- Stop displaying obsolete context menu entries ("Open Tor URL" and friends).
* Hardware support
- Update Linux to 3.2.41-2
* Bugfixes
- Use more reliable OpenPGP keyservers:
· use the hkps pool in GnuPG (and import their SSL CA)
· use
hkp://pool.sks-keyservers.net in Seahorse (as it does not support
hkps yet)
- Keep udisks users (GNOME Disk Utility, tails-persistence-setup, etc.)
from resetting the system partition's attributes when manipulating the
partition table. To this end, backport the relevant bugfix from Wheezy
into parted 2.3-5+tails1. This allowed to remove the sgdisk-based
workaround in tais-persistence-setup, and to stop installing
python-parted. All this is a first needed step to fix
todo/make_system_disk_read-only in a future release.
* Minor improvements
- Disable NoScript's HTML5 media click-to-play for better user experience.
* Localization
- Tails USB installer: update translations for French, German, Spanish,
Finnish, Greek, Italian, Latvian, Dutch, Polish and Chinese.
- Tails Greeter: update translations for Farsi, Chinese, French;
new translations: Finnish, Norwegian Bokmål, Galician.
- tails-persistence-setup: update Farsi and Chinese translations;
import new translations for Finnish and Swedish.
- WhisperBack: update translations for Arabic, French, German, Greek,
Spanish, Korean, Polish, Russian. New translations: Finnish, Chinese.
* Build process
- Add automated testing framework (Sikuli, Cucumber, libvirt -based)
with a bunch of tests.
-- Tails developers <
[email protected]> Sun, 07 Apr 2013 12:17:26 +0200
tails (0.17.1) unstable; urgency=low
* Iceweasel
- Upgrade to Iceweasel 17.0.4esr-0+tails1~bpo60+1.
* Hardware support
- Update Linux to 3.2.39-2.
It includes the drm and agp subsystems from Linux 3.4.29.
- Don't install xserver-xorg-video-rendition backport.
xserver-xorg-video-rendition has been removed from squeeze-backports
due to an upstream tarball mismatch discover when merging backports
into the main Debian archive, and xserver-xorg-video-all still depends
on it, so we explicitly install all drivers from -all but -rendition
as a (hopefully temporary) workaround.
* Minor improvements
- Remove Indymedia IRC account, until we ship a version of Pidgin
with SASL support, that is when Tails is based on Wheezy.
* Build system
- Don't ship the wiki's todo and bugs on ISO images.
-- Tails developers <
[email protected]> Thu, 21 Mar 2013 18:54:11 +0100
tails (0.17) unstable; urgency=low
* New features
- Install the KeePassX password manager, with a configuration and
documentation that makes it easy to persist the password database.
* Iceweasel
- Upgrade to Iceweasel 17.0.3esr-1+tails1~bpo60+1.
- Install xul-ext-adblock-plus from squeeze-backports.
- Do not allow listing all available fonts.
Set browser.display.max_font_attempts and browser.display.max_font_count
to enable the Torbrowser Limit-the-number-of-fonts-per-document patch.
- Set default spellchecker dictionary to English (USA),
and localize it according to locale with our custom branding extension.
- Disable the add-ons automatic update feature.
- Make the generated profile world-readable.
- Remove NoScript click-to-play confirmation.
- Sync some prefs set by Torbutton, to be ready when it stops setting these.
- Disable navigation timing.
- Disable SPDY. It stores state and may have keepalive issues.
- More aggressive iceweasel HTTP pipelining settings.
- Enable WebGL (as click-to-play only).
- Disable network.http.connection-retry-timeout.
- Disable full path information for plugins.
- Remove NoScript blocks of WebFonts.
- Disable DOM storage in Torbutton.
Since we don't apply the 0026-Isolate-DOM-storage-to-first-party-URI.patch
Torbrowser patch yet, and still disable DOM storage, we need to tell
Torbutton not to use it.
- Synchronize iceweasel's general.useragent.override with TBB based on FF17.
The User-Agent settings are not kept up-to-date anymore in Torbutton, so
we have to keep in sync manually with TBB's settings.
- Remove obsolete APT pining for Torbutton.
It's not maintained in Debian anymore, so we now fetch it from our own
APT repository.
- Fetch FoxyProxy from Debian experimental and libnspr4-0d from
squeeze-backports, for compatibility with Iceweasel 17.
- Rebase bookmarks file on top of the default iceweasel 17 one.
- Explicitly disable AdBlock Plus "correct typos" feature.
This feature connects to
http://urlfixer.org/.
It is disabled by default in 2.2-1, but let's be careful.
* Minor improvements
- Upgrade to live-boot 3.0~b11-1 and live-config 3.0.12-1.
Accordingly update the 9980-permissions hook, live-persist,
unsafe-browser and boot-profile.
Add compatibility symlinks from /live to /lib/live, and from /live/image
to /lib/live/mount/medium, to ease the transition.
- Check for errors when sourcing live-boot files, e.g. to detect when
they have been renamed upstream.
- Don't add "quiet" to the kernel command-line ourselves.
Else, it appears twice as live-build's lb_binary_syslinux adds it too.
Historically, we've been adding it ourselves on top of that because
lb_binary_yaboot does not add it, but since we gave up the PowerPC support
attempt, we're now only interested in syslinux, so let's make it easier
for the general case, e.g. when one wants to remove the "quiet" parameter
as suggested by our "Tails does not start" debugging documentation.
- Upgrade I2P to 0.9.4.
* Bugfixes
- Many bugfixes brought by the Debian Squeeze 6.0.7 point-release.
- Use the regular GnuPG agent + pinentry-gtk2 instead of Seahorse
as a GnuPG agent. This fixes usage of OpenPGP in Claws Mail,
and brings support for OpenPGP smartcards.
- Enable I2P hidden mode.
Else, killing I2P ungracefully is bad for the I2P network.
- live-persist: move error() function before the first potential usecase.
- Add missing executable bit on restart-tor and restart-vidalia.
- Add shutdown and reboot launchers to the menu.
This workarounds the lack of a shutdown helper applet in camouflage mode.
- Remove Pidgin's MXit and Sametime support.
... at least until CVE-2013-0273, CVE-2013-0272 and CVE-2013-0271 are
fixed in Debian stable. While we're at it, don't force file removal in
these "set -e" build scripts: fail hard, instead of silently ignoring
the fact that files may have moved or disappeared.
* Hardware support
- Install recent Intel and AMD microcode from squeeze-backports,
explicitly excluding the iucode-tool package that's not a good idea
for Live systems.
- Install firmware loader for Qualcomm Gobi USB chipsets.
This is needed to have various mobile broadband chipsets work.
- Upgrade barry to 0.18.3-5~bpo60+1.
This much improved new version supports more hardware & ISP,
and does not display dozens of spurious error messages at boot time.
* Build system
- Remove APT local cache (/Var/cache/apt/{,src}pkgcache.bin).
-- Tails developers <
[email protected]> Sat, 23 Feb 2013 10:37:57 +0100