November 2025 - tor-announce - lists.torproject.org

New Release: Tor Browser 13.5.25 (Windows 7/8/8.1, macOS 10.12-10.14)
by Giorgio Maone 19 Nov '25

19 Nov '25

Hi everyone, Tor Browser 13.5.25 has now been published for Windows 7/8/8.1, macOS 10.12-10.14. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-13525 Changelog: Tor Browser 13.5.25 - November 13 2025 * All Platforms * Updated Tor to 0.4.8.20 * Bug 44335: Additional Security Fix Backport from Firefox 145 to esr115 [tor-browser] -- ma1

1 0

New Release: Tor Browser 15.0.2 (Android, Windows, macOS, Linux)
by Giorgio Maone 19 Nov '25

19 Nov '25

Hi everyone, Tor Browser 15.0.2 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1502 Changelog: * All Platforms o Updated Tor to 0.4.8.20 * Build System o Android + Bug tor-browser-build#41629 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Bump JNA to 5.16.0 -- ma1

1 0

[RELEASE] Tor 0.4.8.21 stable
by David Goulet 18 Nov '25

18 Nov '25

Greetings, We have another stable fixing more security issues. See announcement: https://forum.torproject.org/t/stable-release-0-4-8-21/20817 Here is the ChangeLog. Changes in version 0.4.8.21 - 2025-11-17 This release is a continuation of the previous one and addresses additional Conflux-related issues identified through further testing and feedback from relay operators. We strongly recommend upgrading as soon as possible. o Major bugfixes (conflux, exit): - When dequeuing out-of-order conflux cells, the circuit could be close in between two dequeue which could lead to a mishandling of a NULL pointer. Fixes bug 41162; bugfix on 0.4.8.4. o Minor feature (compiler flag): - Add -mbranch-protection=standard for arm64. o Minor features (fallbackdir): - Regenerate fallback directories generated on November 17, 2025. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2025/11/17. o Minor bugfixes (bridges, pluggable transport): - Fix a bug causing the initial tor process to hang intead of exiting with RunAsDaemon, when pluggable transports are used. Fixes bug 41088; bugfix on 0.4.8.1-alpha. Cheers! David -- DKF8td80doiu+vmXr1f3qf84hR+DbmSu+T/Ll1tDT0k=

1 0

[RELEASE] Tor 0.4.8.20 stable - Security Fixes
by David Goulet 11 Nov '25

11 Nov '25

Greetings, We just released 0.4.8.20 containing two security medium severity fixes affecting Exit relays mostly. As of this announcement, our Debian packages are available at https://deb.torproject.org Here is the announcement: https://forum.torproject.org/t/stable-release-0-4-8-20/20781 Changes in version 0.4.8.20 - 2025-11-10 This release fixes several bugfixes related to Conflux edge cases as well as adding a new hardening compiler flag if supported. We strongly recommend to upgrade as soon as possible. o Minor feature (compiler flag): - Add -fcf-protection=full if supported by the compiler. Fixes 41139. o Minor features (fallbackdir): - Regenerate fallback directories generated on October 06, 2025. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2025/11/10. o Minor bugfixes (conflux fragile asserts): - Fix the root cause of some conflux fragile asserts when a control port listener is attached. Fixes bug 41037; bugfix on 0.4.8.16. o Minor bugfixes (conflux, relay): - Fix a series of conflux edge cases about sequence number arithmetic and OOM handler kicking in under heavy memory pressure. Fixes bug 41155; bugfix on 0.4.8.4. Cheers! David -- liO7tEkAvH7asFm910GjXnAJ++7tf/uz6e1uCcUHj8E=

1 0

New Release: Tor Browser 13.5.24 (Windows Windows 7/8/8.1, macOS 10.12-10.14)
by Giorgio Maone 11 Nov '25

11 Nov '25

Hi everyone, Tor Browser 13.5.24 has now been published for legacy Windows and macOS platforms. For details please see our blog post <https://blog.torproject.org/new-release-tor-browser-13524/>. <https://blog.torproject.org/new-release-tor-browser-13518/> <https://blog.torproject.org/new-release-tor-browser-13518/> Changelog: * All Platforms o Updated NoScript to 13.4 o Bug tor-browser#44270 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44270>: Re-enable SHA1 for signing to match Firefox's TLS fingerprint o Bug tor-browser#44320 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44320>: Rebase Tor Browser legacy onto 115.30.0esr o Bug tor-browser#44325 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44325>: Backport Security Fixes from Firefox 145 o Bug tor-browser-build#41609 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Move back to CDN77 for default snowflake bridge * Build System o All Platforms + Bug tor-browser-build#41603 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Automate stand-alone legacy release deployment -- ma1

1 0

New Release: Tor Browser 15.0.1 (Android, Windows, macOS, Linux)
by Giorgio Maone 11 Nov '25

11 Nov '25

Hi everyone, Tor Browser 15.0.1 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1501 Changelog: Tor Browser 15.0.1 - November 11 2025 * All Platforms o Updated NoScript to 13.4 o Bug tor-browser#44319 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44319>: Rebase Tor Browser onto 140.5.0esr o Bug tor-browser#44325 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44325>: Backport Security Fixes from Firefox 145 o Bug tor-browser#44333 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44333>: Add the "No AI" version of DuckDuckGo to available search engines o Bug mullvad-browser#487 <https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/issues/487>: Search engines are sorted alphabetically rather than the desired order * Windows + macOS + Linux o Updated Firefox to 140.5.0esr o Bug tor-browser#44310 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44310>: Default zoom always resets to 100% o Bug tor-browser#44314 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44314>: Upgrade message not shown in about:tor * Linux o Bug tor-browser#44273 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44273>: Restore Noto CJK as Jigmo has a too low readability o Bug tor-browser#44315 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44315>: Font/text issue with self-upgrade window * Android o Updated GeckoView to 140.5.0esr o Bug tor-browser#44303 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44303>: Extension update job might never work on Android * Build System o All Platforms + Bug tor-browser-build#41618 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Restore the expert bundle's version in the final release directory o Windows + Linux + Android + Updated Go to 1.24.10 o Android + Bug tor-browser-build#41617 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Pass page size to zipalign + Bug tor-browser-build#41620 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Do not rerun zipalign when signing + Bug tor-browser-build#41621 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Remove support using older android build tools when signing 14.5 releases in tools/signing/wrappers/sign-apk -- ma1

1 0