September 2024 - tor-announce - lists.torproject.org

New Release: Tor Browser 14.0a7 (Android, Windows, macOS, Linux)
by Morgan 27 Sep '24

27 Sep '24

Hi everyone, Tor Browser 14.0a7 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a7/ Changelog: > Tor Browser 14.0a7 - September 27 2024 > * All Platforms > * Updated NoScript to 11.4.40 > * Bug 42832: Download spam prevention should not affect browser extensions [tor-browser] > * Bug 43163: Disable offscreen canvas until verified it is not fingerprintable [tor-browser] > * Bug 43166: Rebase Tor Browser alpha onto Firefox 128.3.0esr [tor-browser] > * Windows + macOS + Linux > * Updated Firefox to 128.3.0esr > * Bug 42070: Backport Bugzilla 1834307 and hide smooth-scroll UX [tor-browser] > * Bug 42362: "New window" missing from File menu [tor-browser] > * Bug 42742: Inconsistent use of "New private window" vs "New window" [tor-browser] > * Bug 41248: Check and update bundled font versions [tor-browser-build] > * Android > * Updated GeckoView to 128.3.0esr > * Bug 43172: remove remote settings and SERPTelemetry [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.23.1 > * Bug 41236: Remove binutils when not needed [tor-browser-build] > * Windows + macOS + Linux > * Bug 41246: Add updater rewriterules to make 13.5a10 a watershed [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 13.5a10 (Windows, macOS, Linux)
by Morgan 26 Sep '24

26 Sep '24

Hi everyone, Tor Browser 13.5a10 has now been published for all desktop platforms. You read that right, it's a 13.5 alpha release! This is just a test release to verify that our channel-splitting logic in the updater is working correctly before enabling it in 13.5 stable. This logic will allow users on legacy platforms (e.g. Windows 7) to split off into a legacy ESR-115 branch, while those users on updated operating systems move to the new ESR-128 branch. NOTE: This branch will not be updated further or receiving feature updates. This is just a test <3 Changelog: > Tor Browser 13.5a10 - September 25 2024 > * Windows + macOS + Linux > * Updated Firefox to 115.15.0esr > * Updated NoScript to 11.4.37 > * Updated OpenSSL to 3.0.15 > * Windows + macOS > * Bug 42747: Windows 7/8 and macOS 10.12-10.14 Legacy/Maintenance [tor-browser] > * Build System > * Windows + macOS + Linux > * Updated Go to 1.21.12 best, -morgan

1 0

New Release: Tor Browser 13.5.5 (Windows, macOS, Linux)
by Morgan 26 Sep '24

26 Sep '24

Hi everyone, Tor Browser 13.5.5 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1355/ Changelog: > Tor Browser 13.5.5 - September 25 2024 > * Windows + macOS > * Bug 43125: Update message for legacy OS (windows ≤8.1, macOS ≤10.14) users [tor-browser] > * Linux > * Bug 334: When set as default browser on Linux in standard mode, links don't open correctly [mullvad-browser]

1 0

New Release: Tor Browser 14.0a6 (Android, Windows, macOS, Linux)
by Morgan 21 Sep '24

21 Sep '24

Hi everyone, Tor Browser 14.0a6 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a6/ Changelog: > Tor Browser 14.0a6 - September 19 2024 > * All Platforms > * Bug 42831: Remove the shopping components [tor-browser] > * Bug 43144: Ensure non-privacy browsing also sets the GPC header [tor-browser] > * Windows + macOS + Linux > * Bug 42698: Bridge card background contrast is low for bridge-moji [tor-browser] > * Bug 42718: Remove the firefox-view button from UI, even when always-on private-browsing mode is disabled [tor-browser] > * Bug 42740: Stop trying to hide "Restore previous session" [tor-browser] > * Bug 43072: moz-message-bar does not get announced on Orca screen-reader [tor-browser] > * Bug 43083: Backport fix for Mozilla 1436462 [tor-browser] > * Linux > * Bug 43141: Hardcode Arimo as a system-ui font [tor-browser] > * Bug 41237: Add some aliases to our Linux font config for compatibility [tor-browser-build] > * Android > * Bug 41550: Remove unused extensions from Tor Browser for Android [tor-browser] > * Bug 43052: Remove non private tabs icon and "other device tabs" from tab view [tor-browser] > * Bug 43129: about:neterror cannot display SVG on Android with Security Level Safest [tor-browser] > * Bug 43145: Backport Android security fix from 130.0.1 [tor-browser] > * Bug 43146: Update the icon of DuckDuckGo onion search engine on Android [tor-browser] > * Bug 43147: Remove unused search plugins from the apk files [tor-browser] best, -morgan

1 0

New Release: Tor Browser 13.5.4 (Android, Windows, macOS, Linux)
by Morgan 17 Sep '24

17 Sep '24

Hi everyone, Tor Browser 13.5.4 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1354/ Changelog: > Tor Browser 13.5.4 - September 16 2024 > * All Platforms > * Updated NoScript to 11.4.37 > * Updated OpenSSL to 3.0.15 > * Windows + macOS + Linux > * Bug 41835: Review default search engine options [tor-browser] > * Android > * Bug 43124: Implement a migration procedure for Android [tor-browser] > * Bug 43145: Backport Android security fix from 130.0.1 [tor-browser] > * Build System > * All Platforms > * Bug 41229: Migrate OpenSSL download location to github releases [tor-browser-build] > * macOS > * Bug 41231: Use var/browser_release_date in tools/signing/gatekeeper-bundling.sh [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 14.0a5 (Android, Windows, macOS, Linux)
by Morgan 13 Sep '24

13 Sep '24

Hi everyone, Tor Browser 14.0a5 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a5/ Changelog: > Tor Browser 14.0a5 - September 12 2024 > * All Platforms > * Updated NoScript to 11.4.37 > * Bug 42255: pdfjs.disabled used to be part of RFP until Bug 1838415; lock pref to false in stable [tor-browser] > * Bug 42746: Extend prefers-contrast rules to include forced-colors [tor-browser] > * Bug 43046: Review Mozilla 1866927: Adds ability to enable email tracker blocking protection in private mode [tor-browser] > * Bug 43054: check bounceTrackingProtection in PB mode does not persist to disk [tor-browser] > * Windows + macOS + Linux > * Bug 42647: "Switching to a new device" regressed on 128 [tor-browser] > * Bug 42653: The Neterror page has a checkbox to report iframe origin errors to TPO [tor-browser] > * Bug 42777: Remove 'Website Privacy Preferences' and ensure sensible default prefs [tor-browser] > * Bug 43087: Onion pattern on about:torconnect needs a dark theme asset [tor-browser] > * Bug 43109: Remove mention of Firefox Relay from settings [tor-browser] > * Bug 43115: Height of search bar has collapsed on about:tor [tor-browser] > * Bug 43117: Hide 'Always underline links' option [tor-browser] > * Bug 43118: hide CFR [tor-browser] > * Bug 43131: Reduce layout jank when loading about:tor [tor-browser] > * Linux > * Bug 42702: Cannot access the clipboard for the crypto address check (wayland) [tor-browser] > * Bug 334: When set as default browser on Linux in standard mode, links don't open correctly [mullvad-browser] > * Android > * Bug 42954: Remove product recommendation API integration (Review Mozilla 1857215) [tor-browser] > * Bug 43097: NoScript fails to install on Android [tor-browser] > * Bug 43108: Backport Android fullscreen notifications refactoring on ESR128 [tor-browser] > * Bug 43128: Use DuckDuckGo HTML on the Safest security level for Android [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.23.1 > * macOS > * Bug 41231: Use var/browser_release_date in tools/signing/gatekeeper-bundling.sh [tor-browser-build] > * Android > * Bug 41106: Non matching builds after application-services not being rebuilt in a long time [tor-browser-build] > * Bug 41232: Re-implement single-arch builds after the monorepo migration [tor-browser-build] > * Bug 41234: More dependencies are needed when building Android as a release [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 14.0a4 (Android, Windows, macOS, Linux)
by Morgan 06 Sep '24

06 Sep '24

Hi everyone, Tor Browser 14.0a4 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a4/ Changelog: > Tor Browser 14.0a4 - September 06 2024 > * All Platforms > * Updated NoScript to 11.4.35 > * Updated OpenSSL to 3.0.15 > * Bug 30862: 10ms time precision via EXSLT date-time function [tor-browser] > * Bug 42601: Check Bug 1894779: Allow font-face urls to be resource:// urls and relax CORS for resource:// URLs [tor-browser] > * Bug 42684: Disable network prefetch [tor-browser] > * Bug 42685: compat: ESR128: enable textmetrics [tor-browser] > * Bug 42686: Backport Mozilla 1885101 [tor-browser] > * Bug 42730: Make RemoteSettings use only local dumps [tor-browser] > * Bug 42867: Disable contentRelevancy component [tor-browser] > * Bug 43100: Backport security fixes from Firefox 130 [tor-browser] > * Windows + macOS + Linux > * Bug 40147: Re-enable Picture-in-Picture mode [tor-browser] > * Bug 41309: Re-enable screenshots component [tor-browser] > * Bug 41835: Review default search engine options [tor-browser] > * Bug 42617: Restore the HTML form on DDG when using safest in 128 [tor-browser] > * Bug 42630: Review LaterRun in 128 [tor-browser] > * Bug 42640: Disable Firefox Flame button due to unknown interactions with New Identity [tor-browser] > * Bug 42735: Disable recent search suggestions [tor-browser] > * Bug 42737: Drop the hash check on updates [tor-browser] > * Bug 42743: Invalid onion sites are shown as secure in the page info window [tor-browser] > * Bug 42744: Light theme override for "about:tor" is inherited by chrome error pages. [tor-browser] > * Bug 42745: Remove some residuals from update scripts [tor-browser] > * Bug 42764: Unconditionally disable find-bar transition animation [tor-browser] > * Bug 42803: Lost focus styling for built-in bridges radio options [tor-browser] > * Bug 42891: Review Mozilla 1854965: Define new search engine configuration schema [tor-browser] > * Bug 43015: Missing region-name-skr fluent entry when fetching TorConnect country names [tor-browser] > * Bug 43075: Should we drop link spacing in about:tor [tor-browser] > * Bug 43082: Search engine icon is not shown while typing in the address bar [tor-browser] > * Bug 43103: Verify whether an update is unsupported before choosing one [tor-browser] > * Bug 43105: Migrating Disconnect is not needed anymore [tor-browser] > * macOS + Linux > * Bug 42467: Make OS HTTP User-Agent OS spoofing configurable by pref [tor-browser] > * macOS > * Bug 42494: mac: add Arial Black and Arial Narrow to allowlist [tor-browser] > * Linux > * Bug 42773: Replace ~ with the original HOME [tor-browser] > * Bug 43092: Disable Wayland by default in 14.0 [tor-browser] > * Android > * Bug 42655: Implement "New circuit for this site" on Android [tor-browser] > * Bug 42731: Verify `privacy.spoof_english` still works once we have Android builds [tor-browser] > * Bug 43016: Re-disable Nimbus [tor-browser] > * Bug 43023: Review Mozilla 1872510: Use SamsungColorEmoji by default for Samsung devices [tor-browser] > * Bug 43043: Remove credit card autofill UI elements from menu [tor-browser] > * Bug 43088: Query stripping is disabled on Android [tor-browser] > * Bug 43094: Remove "Open in regular tab" button [tor-browser] > * Bug 43114: Reader view uses the catch-all circuit on Android [tor-browser] > * Bug 43116: The lack of GeoIP databases produces a lot of spam in the console on Android [tor-browser] > * Build System > * All Platforms > * Bug 41096: Set SOURCE_DATE_EPOCH in the default env variables [tor-browser-build] > * Bug 41180: Some files do not need to be copied when building tor-expert-bundle [tor-browser-build] > * Bug 41188: Upgrade binutils to 2.41 [tor-browser-build] > * Bug 41229: Migrate OpenSSL download location to github releases [tor-browser-build] > * Android > * Bug 41224: Do not ship Conjure and GeoIP databases on Android x86, x86-64 to save some space [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 13.5.3 (Android, Windows, macOS, Linux)
by Morgan 04 Sep '24

04 Sep '24

Hi everyone, Tor Browser 13.5.3 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1353/ Changelog: > Tor Browser 13.5.3 - September 03 2024 > * All Platforms > * Updated NoScript to 11.4.35 > * Bug 40056: Ensure that the lazy loading attribute is ignored on script-disabled documents [tor-browser] > * Bug 42686: Backport Mozilla 1885101 [tor-browser] > * Bug 42829: Prevent CSS-based scriptless interaction tracking [tor-browser] > * Bug 43084: Rebase Tor Browser Stable onto 115.15.0esr [tor-browser] > * Bug 43100: Backport security fixes from Firefox 130 [tor-browser] > * Bug 41207: Upgrade lyrebird to 0.3.0 [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 115.15.0esr > * Bug 42596: Several console errors: Console.maxLogLevelPref used with a non-existing pref: [tor-browser] > * Bug 42622: Offline state is unreachable in about:torconnect (first bootstrap attempt) [tor-browser] > * Bug 42642: Downloads button warning no longer announced on Orca [tor-browser] > * Bug 42661: Re-run update_emojis.py and update locales [tor-browser] > * Bug 42691: Simplified bridge cards prevent censored users from modifying built-in bridges [tor-browser] > * Bug 42696: Update `mail` icon used in "Find more bridges" [tor-browser] > * Bug 42697: Remove padding to left of `tor-bridges-provider-list` under "Find more bridges" [tor-browser] > * Bug 43059: Drag and Drop issue in new update 13.5.2 [tor-browser] > * Bug 43066: about:torconnect no longer changes the title icon on errors [tor-browser] > * Linux > * Bug 43064: Make copy/paste and drag/drop file filtering more specific [tor-browser] > * Android > * Updated GeckoView to 115.15.0esr > * Build System > * All Platforms > * Updated Go to 1.21.13 > * Bug 41213: Update the update_manual.py script to notify when no changes needed [tor-browser-build] > * Bug 41218: Use new Tor Browser gpg subkey for signing stable releases [tor-browser-build] > * Bug 41222: link_old_mar_filenames still referenced in torbrowser-incrementals-{release,alpha}-unsigned [tor-browser-build] > * Android > * Bug 41206: GeckoView ignores the number of processors [tor-browser-build] best, -morgan

1 0