July 2026 - tor-announce - lists.torproject.org

Heads up: anti-censorship tools now packaged on deb.torproject.org
by Micah Anderson 30 Jul '26

30 Jul '26

Greetings, We're currently preparing 4 new Debian packages to be included in the Tor Project Debian repository hosted at "deb.torproject.org" in the coming days: * lyrebird * webtunnel * snowflake-proxy * snowflake-client If your system is configured with "deb.torproject.org" in your APT sources and any of the above packages are installed from the regular Debian archive, they will automatically upgrade the Tor Project-published versions. We're doing this to ensure that downstream users of these important anti-censorship tools have an update channel that allows them to receive timely upgrades automatically. That being said, packages from both channels should remain compatible and interchangeable. If you encounter any issues with them, please let us know by creating an issue in https://gitlab.torproject.org/tpo/anti-censorship/team/-/work_items. If you wish to add "deb.torproject.org" in your Debian system's APT sources, please follow the instructions at: https://support.torproject.org/little-t-tor/getting-started/installing/#deb… -- Micah Anderson (he/him) Director of Engineering The Tor Project, Inc. <https://torproject.org>

1 0

New Release: Tor Browser 16.0a9 (Android, Windows, macOS, Linux)
by Morgan 23 Jul '26

23 Jul '26

Hi everyone, Tor Browser 16.0a9 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-160a9/ Changelog: > Tor Browser 16.0a9 - July 23 2026 > * All Platforms > * Updated NoScript to 13.6.30.90201984 > * Bug 43819: Show custom security level on android [tor-browser] > * Bug 44748: Revert Funding the Commons Implementations [tor-browser] > * Bug 44811: Remove the lock on pdfjs.disable. [tor-browser] > * Bug 45101: Rebase Tor Browser onto 153.0esr [tor-browser] > * Bug 45131: Security level is using an unsafe getBoolPref [tor-browser] > * Bug 41831: Update libevent to 2.1.13 [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 153.0esr > * Bug 44439: Remove translate action from urlbar [tor-browser] > * Bug 44883: Remove urlbar quick action for labs [tor-browser] > * Bug 45029: Convert connection status settings to new design and config approach [tor-browser] > * Bug 45055: Rename --color-gray-05 to --color-gray-0 [tor-browser] > * Bug 45081: Use the new "Acorn" icons on desktop [tor-browser] > * Bug 45110: Disable the settings redesign until ready for us [tor-browser] > * Bug 45112: Missing CSS border tokens in 153 [tor-browser] > * Bug 45132: nsAppFileLocationProvider.cpp: use of undeclared identifier 'XRE_EXECUTABLE_FILE' [tor-browser] > * Bug 41800: Create a script that adapts the Tor Browser manual HTMLs to work in Tor Browser [tor-browser-build] > * macOS > * Bug 45108: Artifact generation fails due to missing .DS_Store in the branding directories [tor-browser] > * Android > * Updated GeckoView to 153.0esr > * Bug 43820: Use SecurityLevel integration on android [tor-browser] > * Bug 44157: Remove secret setting toggle for Tab Management Redesign [tor-browser] > * Bug 45045: Remove moz asset in Downloads screen [tor-browser] > * Bug 45103: Disable broken "tab management" [tor-browser] > * Bug 45109: No value passed for parameter 'jsEnabled' [tor-browser] > * Bug 45118: Audit and disable Mozilla VPN promo [tor-browser] > * Bug 45130: Clean up TorHomePage padding [tor-browser] > * Build System > * All Platforms > * Bug 41838: Update personal_access_tokens URL in tools/fetch_changelogs.py [tor-browser-build] > * Windows + Linux + Android > * Updated Go to 1.26.5 > * Windows > * Bug 41819: Fix windows-rs URL in projects/firefox/config [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 15.0.19 (Android, Windows, macOS, Linux)
by Giorgio Maone 21 Jul '26

21 Jul '26

Hi everyone, Tor Browser 15.0.19 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-release-tor-browser-15019/>. * All Platforms o Updated NoScript to 13.6.31.1984 o Bug tor-browser#44748 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44748>: Revert Funding the Commons Implementations o Bug tor-browser#45117 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45117>: Rebase Tor Browser stable onto 140.13.0esr o Bug tor-browser#45124 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45124>: Backport Security Fixes from Firefox 153 * Windows + macOS + Linux o Updated Firefox to 140.13.0esr * Android o Updated GeckoView to 140.13.0esr * Build System o All Platforms + Bug tor-browser-build#41838 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update personal_access_tokens URL in tools/fetch_changelogs.py o Windows + Bug tor-browser-build#41819 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Fix windows-rs URL in projects/firefox/config -- ma1

1 0

New Release: Tor Browser 15.0.18 (Android, Windows, macOS, Linux)
by Giorgio Maone 14 Jul '26

14 Jul '26

Hi everyone, Tor Browser 15.0.18 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-release-tor-browser-15018/>. * All Platforms o Updated NoScript to 13.6.30.1984 o Bug tor-browser#45111 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45111>: Cherry-pick latest firefox/esr140 commits on 140.12.0esr * Build System o All Platforms + Bug tor-browser-build#41821 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update gpg subkeys for boklm o Windows + Linux + Android + Updated Go to 1.25.12 -- ma1

1 0

New Release: Tor Browser 16.0a8 (Android, Windows, macOS, Linux)
by Giorgio Maone 02 Jul '26

02 Jul '26

Hi everyone, Tor Browser 16.0a8 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-alpha-release-tor-browser-160a8/>. * All Platforms o Updated NoScript to 13.6.25.90301984 o Updated Tor to 0.4.9.11 o Updated OpenSSL to 3.5.7 o Bug tor-browser#44857 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44857>: Drop |browser.display.use_system_colors| from our preference list o Bug tor-browser#44896 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44896>: Review Mozilla 2030929: Remove unused pref privacy.partition.network_state o Bug tor-browser#45018 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45018>: resistfingerprinting not available in appearance.mjs in 152 o Bug tor-browser#45019 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45019>: ReportBrokenSite startup error in 152 o Bug tor-browser#45047 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45047>: Cross-site oracle via worklet rejection error in Safer Mode o Bug tor-browser#45072 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45072>: Disable XSLT already for 16.0 * Windows + macOS + Linux o Updated Firefox to 152.0a1 o Bug tor-browser#44528 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44528>: Make sure desktop IP Protection is disabled on desktop o Bug tor-browser#44795 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44795>: Revert BB 27604 patch as not needed anymore o Bug tor-browser#44844 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44844>: Use new urlbar CSS variables o Bug tor-browser#44888 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44888>: Use |--button-opacity-disabled| for disabled styling. o Bug tor-browser#44955 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44955>: Use |context-fill| for |about-wordmark.svg| o Bug tor-browser#44956 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44956>: Switch colours in letterboxing setting icons to match the tab-alignment icons o Bug tor-browser#45016 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45016>: Several errors about EngineProcess.sys.mjs in 152 o Bug tor-browser#45017 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45017>: Wrong letterboxing background in 152 o Bug tor-browser#45037 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45037>: Potential runtime errors in the search service when changing JS status o Bug tor-browser#45043 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45043>: Re-add missing changes to settings after 151/152 rebase o Bug tor-browser#45083 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45083>: Error in about:preferences due to ipprotection missing * macOS o Bug tor-browser#44728 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44728>: Bundled fonts are broken on macOS when the GPU process is enabled * Linux o Bug @ libfontconfig.so.1#45048 <https://gitlab.torproject.org/tpo/applications/@ libfontconfig.so.1/-/issues/45048>: Backport Bugzilla 2041887: Crash in after users upgraded to fontconfig 2.18.0 [tor-browser] * Android o Updated GeckoView to 152.0a1 o Bug tor-browser#43856 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43856>: Fix onBackPressed() deprecation o Bug tor-browser#44091 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44091>: Add frequent regions to tor connection assist for android o Bug tor-browser#44175 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44175>: Remove all default browser functionality (Android) o Bug tor-browser#44769 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44769>: TBA crash screen has firefox asset as well as a "Send crash report" button o Bug tor-browser#45052 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45052>: Initialise Tor modules on android in the same order as desktop * Build System o All Platforms + Bug tor-browser-build#41802 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Remove the tor daemon requirement for signing + Bug tor-browser-build#41809 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update toolchains for Firefox 152 + Bug tor-browser-build#41813 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Disable build artifacts in |make generate_gradle_dependencies_list-geckoview| + Bug tor-browser-build#41821 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update gpg subkeys for boklm + Bug tor-browser-build#41823 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add versions information to the toolchain list update + Bug tor-browser-build#41827 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update morgan's keychain with renewed key o Windows + Linux + Android + Updated Go to 1.26.4 o Windows + Bug tor-browser-build#41810 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Define GetAddrInfoExCancel on mingw o Android + Bug tor-browser#45086 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45086>: Compress omni.ja with xz on Android + Bug tor-browser-build#41830 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update the browser project to change omni.ja.xz -- ma1

1 0