- tor-announce - lists.torproject.org

New Release: Tor Browser 15.0.24(Android, Windows, macOS, Linux)
by Morgan 29 Sep '26

29 Sep '26

Hi everyone, Tor Browser 15.0.24 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-15024/ Changelog: > Tor Browser 15.0.24 - September 29 2026 > * All Platforms > * Updated NoScript to 13.6.35.1984 > * Updated Tor to 0.4.9.13 > * Bug 45358: Rebase Tor Browser stable onto 140.17.0esr [tor-browser] > * Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser] > * Bug 45368: Account for onion aliases in NoScript site parsing [tor-browser] > * Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser] > * Windows + macOS + Linux > * Updated Firefox to 140.17.0esr > * Bug 45218: Implement YEC 2026 Takeover for Desktop Stable [tor-browser] > * Linux > * Bug 44996: Change the 32-bit linux message to the expired version for the final 15.0 release [tor-browser] > * Android > * Updated GeckoView to 140.17.0esr > * Bug 45217: Implement YEC 2026 Takeover for Android Stable [tor-browser] > * Build System > * All Platforms > * Bug 41847: Sign all releases using new gpg subkey [tor-browser-build] > * macOS > * Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build] best, -morgan

1 0

[RELEASE] Tor release 0.4.9.13
by David Goulet 23 Sep '26

23 Sep '26

Greetings, We just released 0.4.9.13 containing a lot of security fixes: https://forum.torproject.org/t/security-release-0-4-9-13/22178 Here is the ChangeLog. Changes in version 0.4.9.13 - 2026-09-23 This security release includes several high severity fixes, once again originating from the LLM report firehose. The fixes affect all Tor components: relays, clients, and onion services. We strongly recommend upgrading as soon as possible. o Major bugfixes (security): - Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. Fixes bug 41381; bugfix on 0.1.0.1-rc. Tracked as TROVE-2026-051. - Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response addresses incorrectly, and defaulted to caching when the address could not be parsed. Fixes bug 41380; bugfix on 0.2.4.7-alpha. Tracked as TROVE-2026-050. o Major bugfixes (client stream handling): - Stop trying to reattach BEGIN_DIR directory streams. Previously we would look at the reason field in the END cell and consider retrying it like a normal BEGIN exit request, which led to bizarre behavior. TROVE-2026-052. Fixes bug 41369; bugfix on 0.1.2.5-alpha. o Major bugfixes (client, guard): - Stop blaming guards for circuit, stream, directory-request, and generic channel-close failures, and instead only record guard failure once per unsuccessful outgoing connection establishment. This also covers directory guards, synchronous failures, and proxy or pluggable transport paths. This fixes TROVE-2026-030, TROVE-2026-038, TROVE-2026-041. Fixes bug 41360; bugfix on 0.3.0.1-alpha, bug 41365; bugfix on 0.3.0.1-alpha, and bug 41366; bugfix on 0.3.0.1-alpha. o Major bugfixes (connection handling): - Fix a use-after-free when a TCP connection succeeds immediately but starting its TLS handshake fails. Fixed by detaching the OR connection from its channel before freeing the channel, so deferred connection cleanup cannot access freed memory. This fixes TROVE-2026-056. Fixes bug 41398; bugfix on 0.2.4.4-alpha. o Major bugfixes (onion service): - A service-side rendezvous circuit that failed before reaching the rendezvous point was relaunched twice (once when marked for close and once more when freed), producing two concurrent circuits that carried the same rendezvous cookie and key material and, with repeated failures, 2^(N+1)-1 circuit builds per INTRODUCE2 instead of N+1. It is now relaunched exactly once. TROVE-2026-058. Fixes bug 41408; bugfix on 0.4.7.11. - Rotate intro point at the service if the INTRODUCE2 replay cache is at capacity. TROVE-2026-012. Fixes bug 41256; bugfix on 0.3.2.1-alpha. o Major bugfixes (onion service, TROVE): - Reject INTRODUCE2 cells containing a zeroed rendezvous point ntor onion key. Previously, we would record a first-hop failure against a guard that was never contacted. This is trove TROVE-2026-030. Fixes bug 41360; bugfix on 0.4.9.1-alpha. o Major bugfixes (relay, ): - Remove circuits waiting for a channel from the pending channel list as soon as they are marked for close instead of waiting until they are freed. Fixes bug 41393; bugfix on 0.2.8.1-alpha. o Major bugfixes (stream isolation): - When a client establishes a circuit to an onion service, but the original stream had already closed, we were mistakenly clearing the isolation parameters on that circuit, allowing it to be reused by a future stream from a different isolation context. A malicious onion service or HSDir relay could use this technique to break first-party isolation (FPI) in Tor Browser. TROVE-2026-053. Fixes bug 41368; bugfix on 0.2.3.3-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on September 23, 2026. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2026/09/23. o Minor features (HSDirs): - Rate limit "Service descriptor has an invalid signature length" messages at HSDir relays. This step only makes a flooding attack more tolerable; it does not resolve or explain a flooding attack. Improves the situation for ticket 41339. Bugfix on 0.3.0.1-alpha. o Minor bugfixes (client, stream handling): - When an exit or onion service answers a BEGIN with an END cell whose reason byte is 0, report the stream to the application and to controllers as a generic remote failure. Previously reason 0 turned into the internal "succeeded" value, so SOCKS clients got a success reply, HTTP CONNECT clients got "200 OK", and controllers got a STREAM SUCCEEDED event for a stream that never connected. Also fix the formatting of unrecognized END reasons in controller STREAM events. Fixes bug 41353; bugfix on 0.1.2.3-alpha. o Minor bugfixes (controller): - No longer seg fault if a local authenticated controller connection asks for SETCIRCUITPURPOSE with no arguments. Fixes bug 41332; bugfix on 0.4.1.1-alpha. o Minor bugfixes (directory parsing): - When parsing an authority certificate with an explicit length, do not skip trailing whitespace beyond that length. All current callers pass NUL-terminated strings, so no bug was reachable in practice. Fixes bug 41378; bugfix on 0.4.0.1-alpha. o Minor bugfixes (metrics): - Fix an off-by-one in metrics_store_hist_entry_get_value() that read one histogram bucket past the end of the array when asked for a bucket boundary that does not exist. No in-tree caller currently passes such a value. Fixes bug 41376; bugfix on 0.4.8.1-alpha. o Minor bugfixes (pluggable transports): - Bridge clients or bridge relays no longer mangle memory the second time a pluggable transport or socksproxy configuration is changed, such as by setconf, resetconf, or sighup. Fixes bug 41375; bugfix on 0.4.0.1-alpha. -- SKiS4J5BW5PLWdds0TfKMAoeyszozaGsv07HoQpHtXY=

1 0

New Release: Tor Browser 16.0a12 (Android, Windows, macOS, Linux)
by Giorgio Maone 22 Sep '26

22 Sep '26

Hi everyone, Tor Browser 16.0a12 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-alpha-release-tor-browser-160a12/>. * All Platforms o Updated Tor to 0.4.9.12 o Updated NoScript to 13.6.33.90101984 o Bug tor-browser#45304 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45304>: Rebase Tor Browser alpha onto 153.3.0esr o Bug tor-browser#45336 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45336>: Pass --disable-proxy-direct-failover in our mozconfigs o Bug tor-browser#45299 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45299>: Backport Security Fixes from Firefox 156 o Bug tor-browser-build#41846 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Sign alpha releases using new gpg subkey o Bug tor-browser-build#41875 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update relprep.py for the new versions.ini URL * Windows + macOS + Linux o Updated Firefox to 153.3.0esr o Bug tor-browser#42065 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42065>: Security exception warning and button for Onion Services with self-signed certificates o Bug tor-browser#45133 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45133>: Disable |browser.toolbars.share-button.enabled| o Bug tor-browser#45177 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45177>: Remove websiteSpoofEnglishControl o Bug tor-browser#45249 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45249>: Remove the duplicate "Verified by" from the old site identity panel o Bug tor-browser#45255 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45255>: Add YEC 2026 Strings (Desktop) o Bug tor-browser#45262 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45262>: Disable reset PBM burn button and related UI migration o Bug tor-browser#45277 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45277>: Change setting icon for About Tor Browser o Bug tor-browser#45278 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45278>: Explicitly disable WebXR * Linux o Bug tor-browser#44887 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44887>: Drop Linux 32-bit deprecation notice * Android o Updated GeckoView to 153.3.0esr o Bug tor-browser#44548 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44548>: Remove "Passwords" UI from Android o Bug tor-browser#44936 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44936>: Search widget icon is too small on android alpha o Bug tor-browser#45100 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45100>: Regression in #43229 "Buttons that open links can be accessed before torbrowser is bootstrapped, leaving the app in a bad state" o Bug tor-browser#45172 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45172>: Move our "Connect to Tor before opening links" code from the deprecated openToBrowserAndLoad to the recommended loadUrlOrSearch o Bug tor-browser#45217 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45217>: Implement YEC 2026 Takeover for Android Stable o Bug tor-browser#45225 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45225>: Remove "Share" and "Translate" options from "Settings" -> "Customize" -> "Toolbar shortcut" o Bug tor-browser#45250 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45250>: Remove "Privacy report" in tabs settings in Android o Bug tor-browser#45251 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45251>: Turn off and hide the remote improvements UI o Bug tor-browser#45252 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45252>: Remove the change wallpaper menu item o Bug tor-browser#45256 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45256>: Add YEC 2026 Strings (Android) o Bug tor-browser#45261 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45261>: Add linter check: only |MAIN+LAUNCHER| components may be exported="true" o Bug tor-browser#45269 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45269>: Completely disable search suggestion feature o Bug tor-browser#45275 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45275>: Drop clearOnShutdown on Android-specific profile o Bug tor-browser#45280 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45280>: about:config broken on Android o Bug tor-browser#45281 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45281>: Fix or remove broken "Use screen lock to hide Tor Browser tabs" feature * Build System o All Platforms + Bug tor-browser-build#41867 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update tails-dev email address in release prep templates + Bug tor-browser-build#41871 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update downloads repository references in relprep templates o Windows + Bug tor-browser-build#41877 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: |make list_toolchain_updates| is not checking windows-app-sdk + Bug tor-browser-build#41878 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update the Windows app SDK and add some additional DLLs o Android + Bug tor-browser-build#41876 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add missing firefox_platform_version.txt file in android artifacts directories -- ma1

1 0

New Release: Tor Browser 15.0.23 (Android, Windows, macOS, Linux)
by Giorgio Maone 15 Sep '26

15 Sep '26

Hi everyone, Tor Browser 15.0.23 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-release-tor-browser-15023/>. * All Platforms o Updated NoScript to 13.6.33.1984 o Bug tor-browser#45296 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45296>: (H1) SharedWorker Identity Mismatch allows WebAssembly execution at Safer o Bug tor-browser#45297 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45297>: (H1) Missing setHTMLUnsafe hook leaves a permanent WebAssembly-capable child realm at Safer o Bug tor-browser#45299 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45299>: Backport Security Fixes from Firefox 156 o Bug tor-browser#45303 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45303>: Rebase Tor Browser stable onto 140.16.0esr o Bug tor-browser-build#41875 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update relprep.py for the new versions.ini URL * Windows + macOS + Linux o Updated Firefox to 140.16.0esr * Linux o Bug tor-browser#44996 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44996>: Change the 32-bit linux message to the expired version for the final 15.0 release * Android o Updated GeckoView to 140.16.0esr * Build System o All Platforms + Bug tor-browser-build#41871 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update downloads repository references in relprep templates -- ma1

1 0

New Release: Tor Browser 15.0.22 (Android, Windows, macOS, Linux)
by Giorgio Maone 09 Sep '26

09 Sep '26

Hi everyone, Tor Browser 15.0.22 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-release-tor-browser-15022/>. * All Platforms o Updated Tor to 0.4.9.12 -- ma1

1 0

[RELEASE] Tor stable 0.4.9.12
by David Goulet 08 Sep '26

08 Sep '26

Greetings, We just announced Tor 0.4.9.12: https://forum.torproject.org/t/security-release-0-4-9-12/22096 Note that we are moving to a two weeks release cadence due to the sheer amount of security reports we got. Please upgrade as soon as possible! Here is the ChangeLog: Changes in version 0.4.9.12 - 2026-09-08 Another security release containing several high security fixes reported by the exciting and controversial world of LLMs. One important note is that new protocol versions are recommended for clients and relays (41316). Furthermore, authorities will NOT accept relay descriptor containing TAP keys anymore hence the importance for all relays to upgrade to the latest 0.4.9.x stable version. We very strongly recommend upgrading as soon as possible. o Major bugfixes (security): - Do not purge memory for OOM from within low-level code. Previously, we would handle OOM conditions from within append_cell_to_circuit_queue, which could appear at various places within our call stack, and lead to objects being freed at surprising points in the code, with attendent risk of use-after- free errors. Now we only check for OOM conditions there, and handle them from much higher in the stack. Fixes bugs 41341, 41336, 41326, and 41363; bugfix on 0.2.4.14-alpha. Root-cause fix for TROVE-2026-043. - Fix a bug where a hostile cache could trick a client into falsely believing that certain relays' microdescriptors or router descriptors were unusable. Fixes bug 41358; bugfix on 0.2.6.1-alpha or earlier. Tracked as TROVE-2026-034. - Fix a use-after-free error that could occur if AutomapHostsOnResolve was set. Applications using AutomapHostsOnResolve with IPv4, or with small VirtualAddrNetwork values, are especially vulnerable. Fixes bug 41319; bugfix on 0.2.1.29. Tracked as TROVE-2026-036. - Limit the size of consensus diffs, in bytes and in lines, to prevent a class of memory-based denial-of-service attacks. Fixes bug 41329; bugfix on 0.3.1.1-alpha. This is tracked as TROVE-2026-042. - Negotiate CGO cryptography with every hop that supports it. Previously, we failed to negotiate CGO with hops other than the final hop of a circuit, since we did not enable congestion-control with those hops. Now, we negotiate congestion-control _and_ CGO whenever we can. Fixes bug 41348; bugfix on 0.4.9.3-alpha. Tracked as TROVE-2026-033. - Reject the CC_RESPONSE extension in any handshakes for which congestion control was _not_ requested. Previously, clients would interpret this extension, which could put congestion control into an invalid state, leading to a possible remote crash attack. Fixes bug 41345; bugfix on 0.4.9.3-alpha. Tracked as TROVE-2026-032. - Validate DNS names for complience whenever providing or receiving them from evdns, to limit exposure to a class of application and library bugs. Fixes bug 41320; bugfix on 0.1.1.23. Resolves TROVE-2026-035. o Major bugfixes (conflux, client, stream isolation): - Keep the stream isolation state in sync of a linked conflux set on every leg when attaching new streams. This is TROVE-2026-040. Fixes bug 41325; bugfix on 0.4.8.1-alpha. o Minor feature (authority): - Reject 0.4.8.x series at the authority level. Closes ticket 41234. o Minor features (directory authority): - Authorities now recommend additional protocols for clients and relays. Part of ticket 41316. - Provide a new `AuthDirSupport048Clients` option, which is disabled by default. When this option is disabled, authorities will accept router descriptors that do not contain TAP keys, and will be willing to generate microdescriptors without TAP keys in response to such descriptors. This introduces a new consensus method (36). Part of ticket 41316. o Minor features (fallbackdir): - Regenerate fallback directories generated on September 08, 2026. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2026/09/08. o Minor features (portability): - Fix seccomp compilation with recent versions of glibc. (Closes ticket 41317.) o Minor bugfixes (controller): - Fix an assert that can happen if a controller requests an HSFETCH naming a relay that has a local descriptor but isn't in the consensus. Fixes bug 41367; bugfix on 0.2.7.1-alpha. o Minor bugfixes (directory authorities): - If two shared-random-value commitments are equal, directory authorities now tie-break by authority identity during the reveal phase. Equal commits could happen if an evil authority republishes another's public commitment (and later its public reveal) as its own. Previously the two tied entries could cause honest authorities to disagree about the resulting SRV. Fixes bug 41356; bugfix on 0.2.9.1-alpha. o Removed features: - Tor clients no longer accept consensus instructions to downgrade the congestion control algorithm. This is defense-in-depth for issues like 41345. Implements ticket 41361. Cheers! David -- M5tMvg2BsHibEAX/INnzIxZZxnswS6bx2zkY2awF30s=

1 0

Upcoming C-tor security release - 0.4.9.12
by David Goulet 03 Sep '26

03 Sep '26

Greetings everyone! Next Tuesday, September 8th, we will do a C-tor release (0.4.9.12) containing fixes for a set of high severity issues. And then, as a heads up, C-tor will likely enter a release cadence every 2-3 weeks for the foreseeable coming month(s) as we continue to fix more and more security issues we received from this new reality that we happen to all be in where LLMs are in an echo chamber stuck in a tight loop over our C code ;). Cheers! David -- NeD2Y6SX2RdikJfl0oSgWfrO+dQkz9M114CVJBuzW3w=

1 0

New Release: Tor Browser 16.0a11 (Android, Windows, macOS, Linux)
by Giorgio Maone 02 Sep '26

02 Sep '26

Hi everyone, Tor Browser 16.0a11 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-alpha-release-tor-browser-160a11/>. * All Platforms o Bug tor-browser#45254 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45254>: Rebase Tor Browser alpha onto 153.2.0esr o Bug tor-browser#45259 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45259>: Backport Security Fixes from Firefox 155 * Windows + macOS + Linux o Updated Firefox to 153.2.0esr o Bug tor-browser#45264 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45264>: Use parent process for TorConnect redirections * Android o Updated GeckoView to 153.2.0esr o Bug tor-browser#44155 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44155>: Always enable LNA on Android as a defense-in-depth * Build System o All Platforms + Bug tor-browser-build#41860 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Change GCC sources mirror to https://gcc.gnu.org o Windows + Linux + Android + Updated Go to 1.26.8 -- ma1

1 0

New Release: Tor Browser 15.0.21 (Android, Windows, macOS, Linux)
by Giorgio Maone 01 Sep '26

01 Sep '26

Hi everyone, Tor Browser 15.0.21 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-release-tor-browser-15021/>. * All Platforms o Updated NoScript to 13.6.32.1984 o Updated OpenSSL to 3.5.8 o Bug tor-browser#45223 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45223>: Backport tor-browser#45220 - about:torconnect doesn't show when launching the browser in non-PBM o Bug tor-browser#45253 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45253>: Rebase Tor Browser stable onto 140.15.0esr o Bug tor-browser#45259 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45259>: Backport Security Fixes from Firefox 155 * Windows + macOS + Linux o Updated Firefox to 140.15.0esr o Bug tor-browser#44996 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44996>: Change the 32-bit linux message to the expired version for the final 15.0 release o Bug tor-browser#45264 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/45264>: Use parent process for TorConnect redirections * Android o Updated GeckoView to 140.15.0esr * Build System o Windows + Linux + Android + Updated Go to 1.25.14 -- ma1

1 0

New Release: Tor Browser 16.0a10 (Android, Windows, macOS, Linux)
by Morgan 28 Aug '26

28 Aug '26

Hi everyone, Tor Browser 16.0a10 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-160a10/ Changelog: > Tor Browser 16.0a10 - August 27 2026 > * All Platforms > * Updated NoScript to 13.6.31.90301984 > * Updated OpenSSL to 3.5.8 > * Bug 44257: Disable locale-based font rules as a defense-in-depth [tor-browser] > * Bug 45161: Drop TorProviderBuilder.firstWindowLoaded [tor-browser] > * Bug 45205: Rebase Tor Browser onto 153.1.0esr [tor-browser] > * Bug 45219: Backport Security Fixes from Firefox 154 [tor-browser] > * Windows + macOS + Linux > * Updated Firefox to 153.1.0esr > * Bug 43570: Report errors in about:torconnect when tor daemon crashes (Desktop) [tor-browser] > * Bug 43640: Poor screen reader experience when opening preferences and scrolling to element [tor-browser] > * Bug 43939: Update Bridge settings when connection failed [tor-browser] > * Bug 44247: Adapt Tor Browser manual to use the new support pages [tor-browser] > * Bug 44511: Make sure new search suggest features are disabled for 16.0 [tor-browser] > * Bug 44629: Add a search suggestion warning in the settings [tor-browser] > * Bug 44699: Amend commit message for "BB 43322: Customize the font visibility lists" [tor-browser] > * Bug 44802: Hide the "safe browsing" settings [tor-browser] > * Bug 44830: Migrate our home page adjustments to the settings config [tor-browser] > * Bug 44831: Misleading banner in "Search engine suggestions" settings [tor-browser] > * Bug 44855: Use `ariaNotify` for bridge updates [tor-browser] > * Bug 44959: Integrate the new Tor Browser manual into Tor Browser [tor-browser] > * Bug 44998: Remove Firefox branding from about:preferences [tor-browser] > * Bug 45039: Make it easier to test ProfileDataUpgrader customization [tor-browser] > * Bug 45051: Show a separate Tor error prompt for users who do not see about:torconnect (desktop) [tor-browser] > * Bug 45058: Convert bridge settings to new design and config approach [tor-browser] > * Bug 45059: Convert advanced connection settings to new design and config approach [tor-browser] > * Bug 45079: Move letterboxing to the appearance setting pane [tor-browser] > * Bug 45123: Disable profile backup for 16.0 [tor-browser] > * Bug 45125: Tidy up bridge emoji widget [tor-browser] > * Bug 45143: Modify moz-fieldset to allow focusing the heading [tor-browser] > * Bug 45156: Remove "Firefox Home" from the appearance settings [tor-browser] > * Bug 45157: Grant "access local files" permission to NoScript (Firefox 153 and above) [tor-browser] > * Bug 45168: Hide the history search option, again [tor-browser] > * Bug 45169: Cannot open history sidebar in private browsing window [tor-browser] > * Bug 45171: Disable split view for 16.0 [tor-browser] > * Bug 45176: Add "Request English" to the website language config [tor-browser] > * Bug 45178: Change support URLs in new settings [tor-browser] > * Bug 45179: Update the feedback URL to point to the new support page. [tor-browser] > * Bug 45180: Also show download warning in download settings [tor-browser] > * Bug 45185: Disable network also in the Rust implementation of the remote settings client [tor-browser] > * Bug 45186: Remove duplicate alert roles in moz-message-bar [tor-browser] > * Bug 45187: Disable private browsing "delete downloaded files" feature [tor-browser] > * Bug 45190: New circuit urlbar icon button is squished [tor-browser] > * Bug 45192: Some URLs trigger `The proxy server is refusing connections` rather than about:torconnect prior to bootstrap [tor-browser] > * Bug 45194: "Your bridges" background color [tor-browser] > * Bug 45195: Modify our calls to openPreferences to work with the new settings [tor-browser] > * Bug 45196: Replace old connection settings with setting-group widgets [tor-browser] > * Bug 45197: Hide password settings by default [tor-browser] > * Bug 45200: Include onion authentication in the new password settings [tor-browser] > * Bug 45201: Convert security level settings to the new config [tor-browser] > * Bug 45208: Switch on the setting redesign [tor-browser] > * Bug 45209: Remove mention of "sync" from new settings [tor-browser] > * Bug 45211: Add settings for protections from third party applications [tor-browser] > * Bug 45214: Keep megalist (contextual password manager) disabled for 16.0 [tor-browser] > * Bug 45220: about:torconnect doesn't show when launching the browser in non-PBM [tor-browser] > * Bug 45226: Stylelint issues on browser/components/torpreferences/content/torPreferences.css [tor-browser] > * Bug 45228: Drop browser.urlbar.update2.engineAliasRefresh [tor-browser] > * Bug 45232: Spoof picture-in-picture sizes under RFP [tor-browser] > * Bug 45236: Resolve miscellaneus accessibility issues in about:torconnect [tor-browser] > * Bug 45245: Fix a ML file inclusion that creates an error [tor-browser] > * Windows + Android > * Bug 44513: Backport Bugzilla 2059471: Do not spoof screen orientation when it is locked [tor-browser] > * Windows > * Bug 45144: Do not offer to make the browser a PDF viewer when in portable mode [tor-browser] > * Bug 45243: Disable taskbar tabs [tor-browser] > * macOS > * Bug 45163: Consistently do not disable app group container support [tor-browser] > * Android > * Updated GeckoView to 153.1.0esr > * Bug 41758: Don't allow PDFs to be opened by 3rd party apps [tor-browser] > * Bug 43571: Implement improved error handling and tor restart flow (Android) [tor-browser] > * Bug 44054: Review Mozilla 1970806: [Download v2] Implement new UI for External Download Manager dialog [tor-browser] > * Bug 44210: Consider dropping shouldDisableNormalMode setting [tor-browser] > * Bug 44448: Trivialise assets rather than delete them in "[android] Delete unused media" [tor-browser] > * Bug 44758: Disable email mask feature [tor-browser] > * Bug 44881: Remove link sharing setting on android [tor-browser] > * Bug 44921: Disable Google Lens feature [tor-browser] > * Bug 45049: Opening a pdf from outside TBA crashes TBA after bootstrapping it not already bootstrapped [tor-browser] > * Bug 45085: Disable GooglePlay Integrity [tor-browser] > * Bug 45098: Share link button shows in landscape mode on android despite being removed elsewhere [tor-browser] > * Bug 45115: Padlock always shows insecure even for HTTPS and Onion sites [tor-browser] > * Bug 45159: Fix Android Padlock security pane colors [tor-browser] > * Bug 45170: Tab Switcher shows Firefox's private browsing mask badge on tab switcher icon [tor-browser] > * Bug 45173: Disable Search Optimizations for android [tor-browser] > * Bug 45203: Rebase error with: TB 40041: [android] Implement Tor Network Settings [tor-browser] > * Bug 45221: Remove "Manage downloads with another app" setting from TBA download settings [tor-browser] > * Bug 45227: Remove "Default search engine for Standard Mode" [tor-browser] > * Bug 45234: Do not spoof secondary screen orientations if they were requested by a lock [tor-browser] > * Build System > * All Platforms > * Bug 45224: Enable Rust linter in CI [tor-browser] > * Bug 45231: Backport Bugzilla 2053518: Rust target detection fails to translate the host triple with rustc nightly >= 2026-07-02 (new *-oe-linux-* targets) [tor-browser] > * Bug 41844: Add scripts to backup/deploy signing keys on signing machines [tor-browser-build] > * Bug 41850: Update keyring/torbrowser.gpg for new subkey and updated expiration date of the main key [tor-browser-build] > * Windows + macOS + Linux > * Bug 41711: Update our manual machinery for its new home [tor-browser-build] > * Windows + Linux + Android > * Updated Go to 1.26.7 > * Android > * Bug 41843: Remove unused universal apk from geckoview [tor-browser-build] best, -morgan

1 0