Add bsaes as a new dependency of utls.

The jessie-backports suite has been removed from ftp.debian.org, so we
now download and install the package using snapshot.debian.org.

Fixes bug 29872 (XSS popup with DuckDuckGo search on about:tor)

Versions bump and Changelog update

We work around Mozilla's bug 1532530 (tracked in #29733).

Versions bump and Changelog update

This reverts commit 7dc74d16.

Make sure we use the includes from our build of gcc instead of the ones
from /usr/lib/gcc:
https://trac.torproject.org/projects/tor/ticket/26323#comment:7

We now generate source tarballs for firefox, torbutton and tor-launcher
during stable, alpha and nightly builds. We don't generate them with
|make testbuild|, but they can be generated with |make testbuild-src|.

Fixes #29660 and similar bugs where tor mishandled empty SOCKS auth.
See #29175 for more details.

Conflicts:
	projects/orbot/build

We don't use Orbot's VPN mode and therefore don't need pdnsd bundled.
Thanks, Nathan, for noticing.

There should be no excuse anymore to use plan HTTP (even though, we
check the SHA-256 sum). Use HTTPS where possible.

Update rbm to set DEBIAN_FRONTEND=noninteractive when using apt-get in
install_package.

Also set DEBIAN_FRONTEND=noninteractive for the other apt-get commands
we use in debootstrap-image and container-image.

We now also use the -q (quiet) argument.

By default dma will send emails by connecting to the configured mail
server on port 25.

According to https://riseup.net/en/email/clients we should be connecting
to mail.riseup.net on port 587.