February 2024 - tor-announce - lists.torproject.org

New Release: Tor Browser 13.5a5 (Android, Windows, macOS, Linux)
by Richard Pospesel 28 Feb '24

28 Feb '24

Hi everyone, Tor Browser 13.5a5 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-135a5/ Changelog: > Tor Browser 13.5a5 - February 28 2024 > * All Platforms > * Updated OpenSSL to 3.0.13 > * Updated Snowflake to 2.9.0 > * Bug 42376: The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser] > * Bug 42378: spoof english + htmlform <details> can leak app language [tor-browser] > * Bug 42390: Betterboxing: make the decorator border disappear when the corners are flat [tor-browser] > * Bug 42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser] > * Bug 42412: Rebase Tor Browser Alpha onto 115.8.0esr [tor-browser] > * Bug 41079: Bump version of Snowflake to v2.9.0 [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 115.8.0esr > * Bug 41814: Change "vanilla bridge:" to "Tor bridge:" in bridge cards [tor-browser] > * Bug 42270: Implement design changes to QR code dialog [tor-browser] > * Bug 42389: Betterboxing: gradient is never shown [tor-browser] > * Bug 42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser] > * Bug 42414: Show ellipsis when the tor bridge address overflows [tor-browser] > * Bug 42415: Improve focus styling for forced focus in bridge settings [tor-browser] > * Bug 42421: Remove bridge option should be hidden for Lox bridges [tor-browser] > * Bug 42423: Move temporary Lox Fluent strings to new file [tor-browser] > * Bug 42425: Improve accessibility of the bridge emoji cells [tor-browser] > * Android > * Updated GeckoView to 115.8.0esr > * Bug 42253: Remove "New private tab" action and widget [tor-browser] > * Bug 42402: Remove Android YEC strings [tor-browser] > * Bug 42407: TTP-03-010 WP3: Potential phishing [tor-browser] > * Bug 42416: Backport Android security fixes from Firefox 123 [tor-browser] > * macOS > * Bug 40569: Create build-specific installer for macOS [tor-browser-build] > * Build System > * All Platforms > * Updated Go to 1.20.14 and 1.21.7 > * Bug 41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build] > * Bug 41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build] > * Bug 40068: Switch from IO::CaptureOutput to Capture::Tiny [rbm] > * Bug 40069: Make stdout and stderr utf8 [rbm] > * Bug 40071: Add an option to create zip files using 7z [rbm] > * Bug 40072: Move capture_exec to a separate module [rbm] > * Windows > * Bug 41076: Include the ShellLink plugin in NSIS [tor-browser-build] > * macOS > * Bug 41084: $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build] > * Android > * Bug 42399: Re-enable minimization of JS for Android [tor-browser] > * Bug 41080: Re-pack omni.ja with 7-zip on Android [tor-browser-build] > * Bug 41092: Use an uncompressed omni.ja to improve final apk compression. [tor-browser-build] > * Bug 41093: Sign unsigned APKs instead of the QA-signed ones [tor-browser-build] best, -richard

1 0

New Release: Tor Browser 13.0.10 (Android, Windows, macOS, Linux)
by Richard Pospesel 20 Feb '24

20 Feb '24

Hi everyone, Tor Browser 13.0.10 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-13010/ Changelog: > Tor Browser 13.0.10 - February 20 2024 > * All Platforms > * Updated OpenSSL to 3.0.13 > * Updated zlib to 1.3.1 > * Updated Snowflake to 2.9.0 > * Bug 42374: spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn) [tor-browser] > * Bug 42411: Rebase Tor Browser stable onto 115.8.0esr [tor-browser] > * Bug 41079: Bump version of Snowflake to v2.9.0 [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 115.8.0esr > * Bug 42338: Changing circuit programmatically in Tor Browser not working anymore! [tor-browser] > * Android > * Updated GeckoView to 115.8.0esr > * Bug 42402: Remove Android YEC strings [tor-browser] > * Bug 42416: Backport Android security fixes from Firefox 123 [tor-browser] > * Linux > * Bug 42293: Updater is disabled when tor-browser is run by torbrowser-launcher flatpak [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.20.14 and 1.21.7 > * Bug 41067: Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build] > * Bug 40067: Use --no-verbose wget option when not running in a terminal [rbm] > * Bug 40068: Switch from IO::CaptureOutput to Capture::Tiny [rbm] > * Bug 40069: Make stdout and stderr utf8 [rbm] > * Bug 40072: Move capture_exec to a separate module [rbm] best, -richard

1 0

New Release: Tor Browser 13.5a4 (Android, Windows, macOS, Linux)
by Richard Pospesel 01 Feb '24

01 Feb '24

Hi everyone, Tor Browser 13.5a4 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-135a4/ Changelog since 13.5a3: > Tor Browser 13.5a4 - January 31 2024 > * All Platforms > * Updated zlib to 1.3.1 > * Updated Snowflake to 2.8.1 > * Bug 42343: Consume pt_config.json in the browser [tor-browser] > * Bug 42348: TorSettings.defaultSettings() removed but still referenced by Moat.sys.mjs [tor-browser] > * Bug 42354: Refactor exclusions in ShouldSanitizePreference() to the pref list. [tor-browser] > * Bug 42358: Separate the domain fronted requests from Moat [tor-browser] > * Bug 42359: Handle firewall and proxy in TorSettings.setSettings [tor-browser] > * Bug 42363: Tab thumbnails enhancements [tor-browser] > * Bug 42366: Rebase Tor Browser Alpha onto Firefox 115.7.0esr [tor-browser] > * Bug 42369: Revert YEC 2023 changes [tor-browser] > * Bug 42374: spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn) [tor-browser] > * Bug 42384: Regression: quickstart doesn't work anymore [tor-browser] > * Bug 41058: Update Snowflake to 2.8.1 [tor-browser-build] > * Bug 262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser] > * Windows + macOS + Linux > * Updated Firefox to 115.7.0esr > * Bug 41917: Make the appearance of letterboxing look more intentional [tor-browser] > * Bug 42036: Design and build a user interface for Lox [tor-browser] > * Bug 42338: Changing circuit programmatically in Tor Browser not working anymore! [tor-browser] > * Bug 42387: Visual noise in 13.5a4 letterboxing [tor-browser] > * Linux > * Bug 42293: Updater is disabled when tor-browser is run by torbrowser-launcher flatpak [tor-browser] > * Android > * Updated GeckoView to 115.7.0esr > * Bug 42252: Plumb down TorConnect commands from firefox-android to GeckoView [tor-browser] > * Bug 42346: Crash in firefox-android originating in backported FullScreenNotificationDialog patch [tor-browser] > * Bug 42353: Fix Android NoScript automatic updates [tor-browser] > * Bug 42355: Fullscreen on Android doesn't hide system bars [tor-browser] > * Bug 42367: Backport Android security fixes from Firefox 122 [tor-browser] > * Bug 42368: Tor Browser 13.5a3 crashes during start-up because of API26+ methods [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.20.13 and 1.21.6 > * Bug 41037: Set time on signing machine before starting signing [tor-browser-build] > * Bug 41038: Add RPM dependencies to README [tor-browser-build] > * Bug 41059: Update keyring/torbrowser.gpg with updated key [tor-browser-build] > * Bug 41063: Run "file $keyring" in tools/keyring/list-all-keyrings [tor-browser-build] > * Bug 41067: Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build] > * Bug 41073: Update documention about required packages for container-less build [tor-browser-build] > * Bug 40067: Use --no-verbose wget option when not running in a terminal [rbm] > * Windows + macOS + Linux > * Bug 41078: pt_config.json not touch'd before adding to omni.ja, resulting in build non-determinism [tor-browser-build] > * Windows > * Bug 40606: Use Clang to compile NSIS [tor-browser-build] > * Bug 40900: Update NSIS to 3.09 [tor-browser-build] > * Bug 41065: Do a cleanup of the NSIS script [tor-browser-build] best, -richard

1 0