March 2024 - tor-announce - lists.torproject.org

New Release: Tor Browser 13.5a6 (Android, Windows, macOS, Linux)
by Richard Pospesel 28 Mar '24

28 Mar '24

Hi everyone, Tor Browser 13.5a6 has now been published for all platforms. For details please see our blog post: - $(BLOG_POST_URL) Changelog: > Tor Browser 13.5a6 - March 28 2024 > * All Platforms > * Bug 41114: Fix no-async-promise-executor on TorConnect [tor-browser] > * Bug 41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser] > * Bug 42336: Review the relationship between TorSettings and the TorProvider [tor-browser] > * Bug 42428: Timezone offset leak via document.lastModified [tor-browser] > * Bug 42435: Update moat domain fronting configuration [tor-browser] > * Bug 42437: Drop "torbrowser.version" preference [tor-browser] > * Bug 42444: Remove the "Prioritize .onion sites when known" option [tor-browser] > * Bug 42449: Rebase Tor Browser alpha onto Firefox 115.9.0esr [tor-browser] > * Bug 42459: Add startpage onion service to list of search providers [tor-browser] > * Bug 42466: Drop the "Onion Logo" from trademark statement [tor-browser] > * Bug 42472: Timezone May leak from XSLT Date function [tor-browser] > * Bug 42473: ESR 115.9.1 fixes [tor-browser] > * Bug 42481: Modularize SecurityLevel [tor-browser] > * Bug 41105: Bump version of snowflake to v2.9.2 [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 115.9.0esr > * Bug 41916: Letterboxing preferences UI [tor-browser] > * Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser] > * Bug 42203: Fluent migration: about dialog [tor-browser] > * Bug 42209: Fluent migration: tor circuit [tor-browser] > * Bug 42211: Fluent migration: new identity [tor-browser] > * Bug 42214: Fluent migration: security level [tor-browser] > * Bug 42236: Let users decide whether to load their home page on new identity. [tor-browser] > * Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser] > * Bug 42446: Improve accessible descriptions in built-in dialog [tor-browser] > * Bug 42458: Update the "Submit Feedback" link in "About Tor Browser" [tor-browser] > * Windows > * Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser] > * Linux > * Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser] > * Bug 41110: Avoid Fontconfig warning about "ambiguous path" [tor-browser-build] > * Android > * Updated GeckoView to 115.9.0esr > * Bug 41187: Improve Android's bridge settings UI [tor-browser] > * Bug 42427: Do not ship bridges as prefences anymore [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.21.8 > * Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build] > * Bug 41107: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo for new type of URL [tor-browser-build] > * Bug 40073: We should remove ./ when using 7-zip for zip files [rbm] > * Windows + macOS + Linux > * Bug 42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop) [tor-browser] > * Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build] > * Windows > * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build] > * Android > * Bug 40502: Do not recommend addons on Tor Browser [tor-browser] > * Bug 41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap [tor-browser-build] best, -richard

1 1

[RELEASE] Onionspray release 1.6.1
by rhatto 26 Mar '24

26 Mar '24

Greetings, We just released Onionspray 1.6.1. This is a maintenance release, with some fixes and a few minor underlying features. Operators are advised to reconfigure and restart their services to apply template updates. The full ChangeLog is available at https://gitlab.torproject.org/tpo/onion-services/onionspray/-/blob/main/doc… -- Silvio Rhatto pronouns he/him

1 0

New Release: Tor Browser 13.0.13 (Windows, macOS, Linux)
by Richard Pospesel 22 Mar '24

22 Mar '24

Hi everyone, Tor Browser 13.0.13 has now been published for all Desktop platforms. This is an unscheduled emergency release for our Desktop platforms only. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-13013/ Changelog: > Tor Browser 13.0.13 - March 22 2024 > * Windows + macOS + Linux > * Updated Firefox to 115.9.1esr > * Bug 42473: ESR 115.9.1 fixes [tor-browser] > * Bug 42474: Rebase stable browsers on 115.9.1 [tor-browser] best, -richard

1 0

New Release: Tor Browser 13.0.12 (Android, Windows, macOS, Linux)
by Nicolas Vigier 19 Mar '24

19 Mar '24

Hi everyone, Tor Browser 13.0.12 has now been published for all platforms. For details please see our blog post: https://blog.torproject.org/new-release-tor-browser-13012/ Changelog: * All Platforms * Updated Snowflake to 2.9.2 * Bug 42376: The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser] * Bug 42378: spoof english + htmlform <details> can leak app language [tor-browser] * Bug 42444: Remove the "Prioritize .onion sites when known" option [tor-browser] * Bug 42448: Rebase Tor Browser stable onto Firefox 115.9.0esr [tor-browser] * Bug 42459: Add startpage onion service to list of search providers [tor-browser] * Bug 41105: Bump version of snowflake to v2.9.2 [tor-browser-build] * Windows + macOS + Linux * Updated Firefox to 115.9.0esr * Windows * Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser] * Android * Updated GeckoView to 115.9.0esr * Bug 42407: TTP-03-010 WP3: Potential phishing [tor-browser] * Build System * All Platforms * Updated Go to 1.21.8 * Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build]

1 0

New Release: Tor Browser 13.0.11 (Android, Windows, macOS, Linux)
by Richard Pospesel 06 Mar '24

06 Mar '24

Hi everyone, Tor Browser 13.0.11 has now been published for all platforms. This is an unscheduled release fixing an issue with the Snowflake pluggable transport and the connect-assist domain-fronting configurations. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-13011/ Changelog: > Tor Browser 13.0.11 - March 06 2024 > * All Platforms > * Bug 42435: Update moat domain fronting configuration [tor-browser] > * Build System > * All Platforms > * Bug 41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build] > * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build] best, -richard

1 0