tor-announce

tor-announce@lists.torproject.org

October 2018

1 participants
2 discussions

Tor Browser 8.0.3 is released
by Nicolas Vigier 23 Oct '18

23 Oct '18

Tor Browser 8.0.3 is now available from the Tor Browser Project page [1] and also from our distribution directory [2]. 1: https://www.torproject.org/download/download-easy.html 2: https://www.torproject.org/dist/torbrowser/8.0.3/ This release features important security updates [3] to Firefox. 3: https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/ Tor Browser 8.0.3 includes newer NoScript and HTTPS Everywhere versions. Moreover, it ships with a donation banner for our end of the year campaign and includes another round of smaller fixes for Tor Browser 8 issues on Linux systems. We switched as well to a newer API for our NoScript <-> Torbutton communication, which we need for the Security Slider. The full changelog since Tor Browser 8.0.2 is: * All platforms * Update Firefox to 60.3.0esr * Update Torbutton to 2.0.8 * Bug 23925+27959: Donation banner for year end 2018 campaign * Bug 24172: Donation banner clobbers Tor Browser version string * Bug 27760: Use new NoScript API for IPC and fix about:blank issue * Translations update * Update HTTPS Everywhere to 2018.9.19 * Update NoScript to 10.1.9.9 * Linux * Bug 27546: Fix vertical scrollbar behavior in Tor Browser 8 with Gtk3 * Bug 27552: Use bundled dir on CentOS/RHEL 6

1 0

Tor Browser 8.0.2 is released
by Nicolas Vigier 05 Oct '18

05 Oct '18

Tor Browser 8.0.2 is now available from the Tor Browser Project page [1] and also from our distribution directory [2]. 1: https://www.torproject.org/download/download-easy.html 2: https://www.torproject.org/dist/torbrowser/8.0.2/ This release features important security updates [3] to Firefox. We picked up the necessary patches, but because we needed to start building before Mozilla was ready with a first candidate build, we did not bump the Firefox version to 60.2.2esr. Thus, users are fine with Tor Browser 8.0.2 even though the Firefox version is 60.2.1esr. 3: https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/ _Known Issues_ We already collected a number of unresolved bugs since Tor Browser 7.5.6 and tagged them with our tbb-8.0-issues [4] keyword to keep them on our radar. The most important current issues are: 4: https://trac.torproject.org/projects/tor/query?status=!closed&keywords=… * WebGL is broken [5] right now. 5: https://trac.torproject.org/projects/tor/ticket/27290 * Accessibility support is broken [6] on Windows. We are considering options to address this issue right now. 6: https://trac.torproject.org/projects/tor/ticket/27503 * Tor Browser 8 is not starting anymore on some older Ubuntu/Mint Linux systems [7]. We still have issues to reproduce this bug but hope we can fix it in the next release. 7: https://trac.torproject.org/projects/tor/ticket/27508 * Tor Browser 8 is not starting anymore on CentOS 6 [8]. We have a fix in our 8.5a2 release to give it a bit of testing. Users affected by this bug may resort to that alpha version for now. We plan to backport the patch in the next stable release. 8: https://trac.torproject.org/projects/tor/ticket/27552 * NoScript is not saving per-site permissions anymore [9]. We have a potential patch for this bug in our 8.5a2 release as well and plan to backport it, too, in the next stable release in case no issues with it are found. 9: https://trac.torproject.org/projects/tor/ticket/27175 * While preparing the 8.0.2 release we encountered intermittent reproducibility failures [10] for Linux (64bit) bundles. 10: https://trac.torproject.org/projects/tor/ticket/27937 The full changelog since Tor Browser 8.0.1 is: * All platforms * Update Firefox to 60.2.1esr * Backport fix for Mozilla bug 1493900 and 1493903 * OS X * Backport fix for Mozilla bug 1489785 for macOS 10.14 compatibility

1 0