Draft release notes for 3.13.2 (#16694)

wiki/src/news/version_3.13.2.mdwn

+[[!meta date="Sun, 5 May 2019 12:34:56 +0000"]]
+[[!meta title="Tails 3.13.2 is out"]]
+[[!pagetemplate template="news.tmpl"]]
+[[!tag announce]]
+
+This release is an emergency release to fix a critical security
+vulnerability in *Tor Browser*.
+
+It also fixes [[other security
+vulnerabilities|security/Numerous_security_holes_in_3.13.1]]. You should upgrade as soon as possible.
+
+[[!toc levels=1]]
+
+# Changes
+
+## Upgrades and changes
+
+- Update *Tor Browser* to 8.0.9.
+
+  XXX: Check if there's a new blog post upstream.
+
+  Starting from Friday May 3, a problem in *Firefox* and *Tor Browser*
+  disabled all add-ons.
+
+  This release fixes the activation of add-ons in *Tor Browser*,
+  especially the *NoScript* add-on which is used to:
+
+  - Most importantly, protect against a very strong fingerprinting
+    technique called *HTML5 canvas fingerprinting* which can break your
+    anonymity.
+
+    Using HTML5 canvas fingerprinting, 2 or more collaborating websites
+    can compare how graphics and text are displayed by your computer to
+    determine whether 2 website visits are coming from the same
+    computer.
+
+  - Strengthen *Tor Browser* against some JavaScript attacks that can
+    lead to compromised accounts and credentials on websites.
+
+  - Enable or disable JavaScript on some websites using the NoScript
+    interface, if you use it.
+
+  XXX: Create ticket
+
+- Remove the *OpenPGP Applet* and *Pidgin* notification icons from the top
+  navigation bar.
+
+  [[!img top-navigation-bar.png link="no"]]
+
+  You can still access the *OpenPGP Applet* and *Pidgin* notification icons
+  from the system tray in the bottom-left corner of the screen.
+
+  To display the system tray, move your mouse to the thin gray line on the of
+  the window list in the bottom-left of the screen:
+
+  [[!img system-tray-folded.png class="margin" link="no"]] [[!img system-tray-unfolded.png class="margin" link="no"]]
+
+  To move these icons back to the top navigation bar, you can execute the
+  following command in a *Terminal*:
+
+  <p class="pre command">gnome-shell-extension-tool --enable-extension=TopIcons@phocean.net</p>
+
+  Until now, these icons were display in the top navigation bar by the
+  *TopIcons* GNOME extension. This extension is unmaintained, causes GNOME to
+  crash ([[!tails_ticket 11188]]), and will not work in Tails 5.0 based on
+  Debian 11 (Bullseye).
+  
+  XXX: Tell the help desk what to do
+
+- Install localization packages only for the following languages:
+
+  - Arabic
+  - English
+  - Farsi
+  - French
+  - German
+  - Hindi
+  - Indonesian
+  - Italian
+  - Portuguese
+  - Russian
+  - Simplified Chinese
+  - Spanish
+  - Turkish
+
+  You can install localization packages for other languages using the
+  *[[Additional Software|doc/first_steps/additional_software]]* feature.
+
+  Localization packages include:
+
+  - *Thunderbird* localization:
+    packages <span class="command">thunderbird-l10n-<span class="command-placeholder">lang</span></span>
+  - *LibreOffice* localization:
+    packages <span class="command">libreoffice-l10n-<span class="command-placeholder">lang</span></span>
+  - Spell-checking dictionaries:
+    packages <span class="command">hunspell-<span class="command-placeholder">lang</span></span>
+
+  Where <span class="command-placeholder">lang</span> is the code for
+  your language. For example, <span class="command-placeholder">es</span> for
+  Spanish.
+
+  XXX: Create ticket
+
+- Add a suspend button to the system menu.
+
+  XXX: Add screenshot
+
+- Add shutdown and restart buttons to the system menu when the screen is
+  locked.
+
+  XXX: Add screenshot
+
+- Replace all non-Latin fonts with the [[!wikipedia Noto_fonts
+  desc="Noto fonts family"]].
+
+- Update *Debian* to 9.9.
+
+- Update *Thunderbird* to 60.6.1.
+
+## Fixed problems
+
+- Fix the automatic configuration of new email accounts in *Thunderbird*.
+  ([[!tails_ticket 16573]])
+
+- Fix Tails shutting down when waking up from suspend on some computers.
+  ([[!tails_ticket 11729]])
+
+- Fix the import of the [[Tails signing key|tails-signing.key]] in the
+  *Passwords and Keys* utility.
+
+- Don't show notifications about *TailsData* when configuring a persistent
+  volume. ([[!tails_ticket 16632]])
+
+  [[!img TailsData-notification.png link="no"]]
+
+For more details, read our [[!tails_gitweb debian/changelog desc="changelog"]].
+
+<a id="known-issues"></a>
+
+# Known issues
+
+### Tails fails to start a second time on some computers ([[!tails_ticket 16389]])
+
+On some computers, after installing Tails to a USB stick,
+Tails starts a first time but fails to start a second time. In some
+cases, only BIOS (Legacy) was affected and the USB stick was not listed
+in the Boot Menu.
+
+We are still investigating the issue, so if it happens to you, please
+report your findings by email to <tails-testers@boum.org>. Mention the
+model of the computer and the USB stick. This mailing
+list is [archived publicly](https://lists.autistici.org/list/tails-testers.html).
+
+To fix this issue:
+
+1. Reinstall your USB stick using the same installation method.
+
+1. Start Tails for the first time and [[set up an administration
+   password|doc/first_steps/startup_options/administration_password]].
+
+1. Choose <span class="menuchoice">
+   <span class="guimenu">Applications</span>&nbsp;▸
+   <span class="guisubmenu">System Tools</span>&nbsp;▸
+   <span class="guimenuitem">Root Terminal</span>
+   </span> to open a <span class="application">Root Terminal</span>.
+
+1. Execute the following command:
+
+   <p class="pre command">sgdisk --recompute-chs /dev/bilibop</p>
+
+You can also test an experimental image:
+
+1. [Download the *.img* file from our development
+   server](https://nightly.tails.boum.org/build_Tails_ISO_bugfix-16389-recompute-chs/lastSuccessful/archive/build-artifacts/).
+
+1. Install it using the same installation methods.
+
+   We don't provide any OpenPGP signature or other verification technique
+   for this test image. Please only use it for testing.
+
+See the list of [[long-standing issues|support/known_issues]].
+
+# Get Tails 3.13.2
+
+## To upgrade your Tails USB stick and keep your persistent storage
+
+- Automatic upgrades are available from 3.12.1, 3.13, and 3.13.1 to 3.13.2.
+
+  XXX: Check which IUK will be available with:
+
+      git diff origin/master...origin/web/release-$VERSION wiki/src/upgrade/v1/Tails | grep "to_$VERSION"
+
+- If you cannot do an automatic upgrade or if Tails fails to start after an
+  automatic upgrade, please try to do a [[manual upgrade|upgrade]].
+
+## To install Tails on a new USB stick
+
+Follow our installation instructions:
+
+  - [[Install from Windows|install/win]]
+  - [[Install from macOS|install/mac]]
+  - [[Install from Linux|install/linux]]
+
+<div class="caution"><p>All the data on this USB stick will be lost.</p></div>
+
+## To download only
+
+If you don't need installation or upgrade instructions, you can directly download
+Tails 3.13.2:
+
+  - [[For USB sticks (USB image)|install/download]]
+  - [[For DVDs and virtual machines (ISO image)|install/download-iso]]
+
+# What's coming up?
+
+Tails 3.14 is [[scheduled|contribute/calendar]] for May 14.
+
+Have a look at our [[!tails_roadmap]] to see where we are heading to.
+
+We need your help and there are many ways to [[contribute to
+Tails|contribute]] (<a href="https://tails.boum.org/donate/?r=3.13.2">donating</a> is only one of
+them). Come [[talk to us|about/contact#tails-dev]]!