- tor-announce - lists.torproject.org

New Release: Tor Browser 16.0a4 (Android, Windows, macOS, Linux)
by Giorgio Maone 11 Mar '26

11 Mar '26

Hi everyone, Tor Browser 16.0a4 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-160a4/ <https://blog.torproject.org/new-alpha-release-tor-browser-160a4/> Changelog: # All Platforms * Updated NoScript to 13.6.6.90401984 * Updated zlib to 1.3.2 * Bug tor-browser#44663 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44663>: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript * Bug tor-browser#44675 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44675>: Restore "BB 43850: Modify the Contrast Control settings for RFP" dropped during the 148.0a1 rebase * Bug tor-browser#44679 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44679>: Review Mozilla 2006066: Credit cards autofill settings are not visible * Bug tor-browser#44680 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44680>: Properly handle subdocuments created by data: URLs * Bug tor-browser#44687 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44687>: Security level requires a restart in a new profile after 148 update * Bug tor-browser#44689 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44689>: Forwardport tor-browser#44668 from legacy to alpha: Set detailsURL in update XML to be useful for 13.5 users * Bug tor-browser#44701 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44701>: Unexpected change to |netwerk/url-classifier/components.conf| * Bug tor-browser#44706 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44706>: creating a new profiles causes crash ENOTTY * Bug tor-browser-build#41738 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Allow to specify an unsupportedURL on update responses # Windows + macOS + Linux * Updated Firefox to 148.0a1 * Bug tor-browser#42664 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42664>: Use mozilla token sizes in CSS * Bug tor-browser#44634 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44634>: Review Mozilla 2006250: add ai window about:preferences section within ai features * Bug tor-browser#44682 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44682>: Wrong pid in the exit log * Bug tor-browser#44709 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44709>: Hide the AI settings panel * Bug tor-browser#44710 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44710>: Hide about:preferences#translations * Bug tor-browser#44713 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44713>: The about dialog is missing some padding in 148.0a1 * Bug tor-browser#44717 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44717>: Search suggestion settings are visible in 148 # Windows + Linux * Bug tor-browser-build#40892 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Move torrc-defaults, geoip and geoip6 on Windows and Linux # Windows * Bug tor-browser#44461 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44461>: Window controls are missing on Windows * Bug tor-browser#44633 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44633>: Move D3D11 function from local webrtc changes to tbb webrtc patches # Linux * Bug tor-browser#44394 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44394>: Do not read default prefs from /etc/firefox # Android * Updated GeckoView to 148.0a1 * Bug tor-browser#43349 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43349>: Add user feedback for when Tor connects (Android) * Bug tor-browser#43909 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43909>: Review Mozilla: TBD: new Android tab-strip feature * Bug tor-browser#44226 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44226>: Disable all link sharing functionality * Bug tor-browser#44274 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44274>: Review Mozilla 1986534: Disable screenshots in PBM * Bug tor-browser#44469 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44469>: Fix branding on Android RR * Bug tor-browser#44506 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44506>: Remove more sync from 147 * Bug tor-browser#44582 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44582>: Fix or remove new settings search functionality on Android * Bug tor-browser#44661 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44661>: Restore or fix new rebase-148 uses of moz assets instead of TB ones * Bug tor-browser#44718 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44718>: Fix splash screen branding and other issues in RR * Bug tor-browser#44721 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44721>: Android build failure in nightlyOssLicensesTask: missing dependencies.json file # Build System * All Platforms o Bug tor-browser-build#41690 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Merge list_toolchain_updates-firefox-* commands into one o Bug tor-browser-build#41725 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update toolchains for Firefox 148 o Bug tor-browser-build#41726 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Check in list_toolchain_updates that the sha512sum we have for the macOS SDK is the same as Mozilla o Bug tor-browser-build#41727 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Split the list_toolchain_updates_checks script in two o Bug tor-browser-build#41728 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update projects/application-services/list_toolchain_updates_checks to check nss sha256sum * Windows + macOS + Linux o Bug tor-browser#44406 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44406>: Fix CSS linting issues introduced by 146 * Windows + Linux + Android o Updated Go to 1.25.8 * Android o Bug tor-browser-build#41736 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add generate_gradle_dependencies_list-$project makefile targets o Bug tor-browser-build#41737 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Remove comment from gen-gradle-deps-file.py saying var/gradle_dependencies_version should be updated o Bug tor-browser-build#41743 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Make an error if gradle-dependencies-list is missing in the input files o Bug tor-browser-build#41744 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Reduce duplication between projects/geckoview/build and projects/geckoview/build_apk o Bug tor-browser-build#41745 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add .sh file extension to included build_* scripts in projects/geckoview o Bug tor-browser-build#41751 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Fix the NDK path -- ma1

1 0

New Release (EOL): Tor Browser 13.5.29 (ONLY Windows Windows 7/8/8.1, macOS 10.12-10.14)
by Giorgio Maone 25 Feb '26

25 Feb '26

Hi everyone, Tor Browser 13.5.29, end of life for the 13.5.x legacy series, has now been published for legacy Windows and macOS platforms ONLY. For details please see our blog post https://blog.torproject.org/new-release-tor-browser-13529/ Changelog: Tor Browser 13.5.29 - February 24 2026 * All Platforms * Updated Firefox to 115.33.0esr * Updated NoScript to 13.5.14.1984 * Updated zlib to 1.3.2 * Bug 43168: Review ESR 115 expiry date for legacy OS message [tor-browser] * Bug 44667: 13.5 EOL support link is 404 [tor-browser] * Bug 44668: Set detailsURL in update XML to be useful for 13.5 users [tor-browser] * Bug 44681: Backport Security Fixes from Firefox 148 [tor-browser] -- ma1

1 0

New Release: Tor Browser 15.0.7 (Android, Windows, macOS, Linux)
by Giorgio Maone 24 Feb '26

24 Feb '26

Hi everyone, Tor Browser 15.0.7 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1507 Changelog: Tor Browser 15.0.7 - February 24 2026 * All Platforms * Updated NoScript to 13.5.14.1984 * Updated zlib to 1.3.2 * Bug 44656: Rebase Tor Browser release onto 140.8.0esr [tor-browser] * Bug 44681: Backport Security Fixes from Firefox 148 [tor-browser] * Windows + macOS + Linux * Updated Firefox to 140.8.0esr * Android * Updated GeckoView to 140.8.0esr * Bug 44620: Move the Android IPC directory [tor-browser] -- ma1

1 0

New Release: Tor Browser 16.0a3 (Android, Windows, macOS, Linux)
by Giorgio Maone 17 Feb '26

17 Feb '26

Hi everyone, Tor Browser 16.0a3 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-160a3/ Changelog: Tor Browser 16.0a3 - February 17 2026 # All Platforms * Updated Tor to 0.4.9.5 * Updated NoScript to 13.5.12.90301984 * Bug tor-browser#44562 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44562>: Set the new online Suggest prefs to false * Bug tor-browser#44571 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44571>: Disable restrict_to_adults for potential fingerprintability * Bug tor-browser#44619 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44619>: Add custom logs to Tor logs * Bug tor-browser#44625 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44625>: metamask.io won't load on Safer security level * Bug tor-browser#44626 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44626>: Propagate WASM blocking to workers * Bug tor-browser#44647 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44647>: Clean up patch for |SearchEngineSelector.sys.mjs|. * Bug tor-browser#44652 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44652>: Backport fix for Firefox Bug 2014390 * Bug tor-browser-build#41713 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Try to find a component for bugs found with commits in triage spreadsheets # Windows + macOS + Linux * Bug tor-browser#43560 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43560>: Add "UTC" to the end of the timestamp on tor logs (Desktop) * Bug tor-browser#44459 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44459>: Letterboxing content alignment setting is missing styling * Bug tor-browser#44520 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44520>: Make sure "Firefox labs" is hidden by default # Windows * Bug tor-browser#44623 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44623>: 16.0a2: about:preferences#privacy is empty # Linux * Bug tor-browser#44050 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44050>: Consider changing the domain in DBus interfaces # Android * Bug tor-browser#43403 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43403>: Add "UTC" to the end of the timestamp on tor logs (Android) * Bug tor-browser#44057 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44057>: Drop about:torconnect from android * Bug tor-browser#44620 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44620>: Move the Android IPC directory * Bug tor-browser-build#28595 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/2…>: Remove the need to update var/gradle_dependencies_version # Build System * All Platforms o Bug tor-browser-build#40338 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Running |make release| multiple times fails o Bug tor-browser-build#41660 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add a Firefox target to build unpatched Firefox in tor-browser-build o Bug tor-browser-build#41693 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Drop base-browser targets o Bug tor-browser-build#41720 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: cp -l in release/build fails when crossing file systems o Bug rbm#40093 <https://gitlab.torproject.org/tpo/applications/rbm/-/issues/40093>: Make it easy to get the sha256sum of an input_files file o Bug rbm#40103 <https://gitlab.torproject.org/tpo/applications/rbm/-/issues/40103>: Allow having multiple tmp_dir values * Windows + Linux + Android o Updated Go to 1.25.7 * Android o Bug tor-browser-build#41719 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Enable network when var/generate_gradle_dependencies_list is set in geckoview -- ma1

1 0

New Release: Tor Browser 13.5.28 (ONLY Windows Windows 7/8/8.1, macOS 10.12-10.14)
by Giorgio Maone 17 Feb '26

17 Feb '26

Hi everyone, Tor Browser 13.5.28 has now been published for legacy Windows and macOS platforms ONLY. For details please see our blog post https://blog.torproject.org/new-release-tor-browser-13528/ The full changelog since Tor Browser 13.5.27 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/main…> is: * All Platforms o Updated Firefox to 115.32.1esr o Updated NoScript to 13.5.13.1984 o Updated Tor to 0.4.9.5 o Updated OpenSSL to 3.5.5 o Bug tor-browser#44625 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44625>: metamask.io won't load on Safer security level o Bug tor-browser#44626 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44626>: Propagate WASM blocking to workers o Bug tor-browser#44649 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44649>: Rebase Tor Browser legacy onto 13.5.32.1esr -- ma1

1 0

New Release: Tor Browser 15.0.6 (Android, Windows, macOS, Linux)
by Giorgio Maone 17 Feb '26

17 Feb '26

Hi everyone, Tor Browser 15.0.6 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1506 Changelog: The full changelog <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/main…> since Tor Browser 15.0.5 is: * All Platforms o Updated NoScript to 13.5.13.1984 o Updated Tor to 0.4.9.5 o Bug tor-browser#44625 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44625>: metamask.io won't load on Safer security level o Bug tor-browser#44626 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44626>: Propagate WASM blocking to workers o Bug tor-browser#44640 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44640>: Rebase Tor Browser stable onto 140.7.1esr * Windows + macOS + Linux o Updated Firefox to 140.7.1esr * Android o Updated GeckoView to 140.7.1esr * Build System o All Platforms + Bug tor-browser-build#40338 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Running |make release| multiple times fails + Bug tor-browser-build#41708 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: relprep.py fails to update extensions when out/browser does not exist + Bug tor-browser-build#41720 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: cp -l in release/build fails when crossing file systems o Windows + Linux + Android + Updated Go to 1.24.13 -- ma1

1 0

[RELEASE] Tor 0.4.9.5 stable
by David Goulet 12 Feb '26

12 Feb '26

Greetings, We released today 0.4.9.5 stable release which is the first stable of the 0.4.9.x series. Here is the announcement https://forum.torproject.org/t/stable-release-0-4-9-5/21227 Worth noting that 0.4.8.x series is now on the deprecating path for the next months and so we strongly encourage to upgrade as soon as possible. The release notes below. Cheers! David Changes in version 0.4.9.5 - 2026-02-12 This first stable release in the 0.4.9 series introduces a new circuit-level encryption design for better client security, as well as a more scalable way for large relay operators to annotate which relays they run so clients can avoid using too many of them in a single circuit. o Major features (cryptography): - Clients and relays can now negotiate Counter Galois Onion (CGO) relay cryptography, as designed by Jean Paul Degabriele, Alessandro Melloni, Jean-Pierre Münch, and Martijn Stam. CGO provides improved resistance to several kinds of tagging attacks, better forward secrecy, and better forgery resistance. Closes ticket 41047. Implements proposal 359. o Major features (path selection): - Clients and relays now support "happy families", a system to simplify relay family operation and improve directory performance. With "happy families", relays in a family share a secret "family key", which they use to prove their membership in the family. Implements proposal 321; closes ticket 41009. Note that until enough clients are upgraded, relay operators will still need to configure MyFamily lists. But once clients no longer depend on those lists, we will be able to remove them entirely, thereby simplifying family operation, and making microdescriptor downloads approximately 80% smaller. For more information, see https://community.torproject.org/relay/setup/post-install/family-ids/ o Major bugfixes (conflux): - Ensure conflux guards obey family and subnet restrictions. Fixes bug 40976; bugfix on 0.4.8.1-alpha. o Major bugfixes (controller events): - Fix spikes occurring in bandwidth cache events on control connection. Fixes bug 31524; bugfix on 0.0.9pre5. o Major bugfixes (sandbox): - Fix sandbox to work on architectures that use Linux's generic syscall interface, extending support for AArch64 (ARM64) and adding support for RISC-V, allowing test_include.sh and the sandbox unit tests to pass on these systems even when building with fragile hardening enabled. Fixes bugs 40465 and 40599; bugfix on 0.2.5.1-alpha. o Minor features (client security, reliability): - When KeepaliveIsolateSOCKSAuth is keeping a circuit alive, expire the circuit based on when it was last in use for any stream, not (as we did before) based on when a stream was last attached to it. Closes ticket 41157. Implements a minimal version of Proposal 368. o Minor features (exit relays): - Implement reevaluating new exit policy against existing connections. This is controlled by new config option ReevaluateExitPolicy, defaulting to 0. Closes ticket 40676. - Implement a token-bucket based rate limiter for stream creation and resolve request. It is configured by the DoSStream* family of configuration options. Closes ticket 40736. - Add Monero ports to the ReducedExitPolicy. Closes ticket 41168. o Minor features (bridges): - Save complete bridge lines to 'datadir/bridgelines'. Closes ticket 29128. o Minor features (client extensibility): - Implement new HTTPTunnelPort features for interoperability with Arti's HTTP CONNECT proxy. This work adds new headers to requests to and replies from the HttpConnectPort, support for OPTIONS requests, tightens the expected syntax for Proxy-Authorization, and increases defense-in-depth against some kinds of cross-site HTTP attacks. Closes ticket 41156. Implements proposal 365. - Detect invalid SOCKS5 username/password combinations according to new extended parameters syntax. (Currently, this rejects any SOCKS5 username beginning with "<torS0X>", except for the username "<torS0X>0". Such usernames are now reserved to communicate additional parameters with other Tor implementations.) Implements proposal 351. o Minor features (sandboxing): - Allow the fstatat64 and statx syscalls on i386 architecture when glibc >= 2.33. On i386, glibc uses fstatat64 instead of newfstatat for stat operations, and statx for time64 support. Without this, SIGHUP configuration reload fails when using sandbox mode with %include directives on i386 with Debian Bookworm or newer. - Allow the lstat64 syscall on i386 architecture. This syscall is used by glob() in glibc 2.36+ when processing %include directives with directory patterns. o Minor features (security): - Increase the size of our finite-field Diffie Hellman TLS group (which we should never actually use!) to 2048 bits. Part of ticket 41067. - Require TLS version 1.2 or later. (Version 1.3 support will be required in the near future.) Part of ticket 41067. - Update TLS 1.2 client cipher list to match current Firefox. Part of ticket 41067. - Verify needle is smaller than haystack before calling memmem. Closes ticket 40854. o Minor features (onion services): - Add 3 more keywords to the ADD_ONION control command: PoWDefensesEnabled, PoWQueueRate and PoWQueueBurst which correspond to HiddenServicePoWDefensesEnabled, HiddenServicePoWQueueRate and HiddenServicePoWQueueBurst from torrc. - Reduce the minimum value of hsdir_interval to match recent tor- spec change. o Minor feature (directory authority): - Introduce MinimalAcceptedServerVersion to allow configuring the minimum accepted relay version without requiring a new tor release. Closes ticket 40817. o Minor features (metrics port): - New metrics on the MetricsPort for the number of BUG() calls that occurred at runtime. Fixes bugs 40839 and 41104; bugfix on 0.4.7.1-alpha. - Handle rephist tracking of ntor and ntor_v3 handshakes individually such that MetricsPort exposes the correct values. Fixes bug 40638; bugfix on 0.4.7.11. - Add new metrics for relays on the MetricsPort namely the count of drop cell, destroy cell and the number of circuit protocol violation seen that lead to a circuit close. Closes ticket 40816. o Minor features (forward-compatibility): - We now correctly parse microdescriptors and router descriptors that do not include TAP onion keys. (For backward compatibility, authorities continue to require these keys.) Implements part of proposal 350. o Minor features (portability, android): - Use /data/local/tmp for data storage on Android by default. Closes ticket 40487. Patch from Hans-Christoph Steiner. o Minor features (directory authority): - Export unsigned consensus documents once we have seen a threshold of signatures, as a step toward the consensus transparency experiment. o Minor features (fallbackdir): - Regenerate fallback directories generated on February 12, 2026. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2026/02/12. o Minor features (windows): - Various compilation fixes for our Windows CI. Closes ticket 41214. o Minor bugfixes (exit relays): - Clip every returned DNS TTL to 60 (RESOLVED) in order to mitigate an exit DNS cache oracle. Fixes bug 40979; bugfix on 0.3.5.1-alpha. o Minor bugfixes (spec conformance): - Set the length field correctly on RELAY_COMMAND_CONFLUX_SWITCH messages. Previously, it was always set to the maximum value. Fixes bug 41056; bugfix on 0.4.8.1-alpha. - Do not treat "15" as a recognized remote END reason code. Formerly, we treated it as synonymous with a local ENTRYPOLICY, which isn't a valid remote code at all. Fixes bug 41171; bugfix on 0.2.0.8-alpha. o Minor bugfixes (tooling): - Fix a false positive valgrind related to inspecting a bitfield next to another uninitialized bitfield. Fixes bug 41182; bugfix on 0.3.3.2-alpha. - Fix minor warnings from newer versions of shellcheck and clang. Fixes bug 41166; bugfix on 0.4.3.1-alpha and several other versions. - Fix a warning when compiling with GCC 14.2. Closes 41032. o Minor bugfixes (threads): - Make thread control POSIX compliant. Fixes bug 41109; bugfix on 0.4.8.17. o Minor bugfix (client DNS): - Handle empty DNS reply without sending back an error and instead send back NOERROR (RFC1035 error code 0x0). Fixes bug 40248; bugfix on 0.3.5.1-alpha. o Minor bugfixes (directory authorities): - After we added layer-two vanguards, directory authorities wouldn't think any of their vanguards were suitable for circuits, leading to a "Failed to find node for hop #2 of our path. Discarding this circuit." log message once per second from startup until they made a fresh consensus. Now they look to their existing consensus on startup, letting them build circuits properly from the beginning. Fixes bug 40802; bugfix on 0.4.7.1-alpha. o Minor bugfixes (tests): - Fix a test failure with OpenSSL builds running at security level 1 or greater, which does not permit SHA-1 certificates. Fixes bug 41021; bugfix on 0.2.8.1-alpha. o Minor bugfixes (bridges): - Don't warn when BridgeRelay is 1 and ExitRelay is explicitly set to 0. Fixes bug 40884; bugfix on 0.4.8.3-rc. o Minor bugfixes (conflux, client): - Avoid a non fatal assert caused by data coming in on a conflux set that is being freed during shutdown. Fixes bug 40870; bugfix on 0.4.8.1-alpha. o Minor bugfixes (testing network): - Enabling TestingTorNetwork no longer forces fast hidden service intro point rotation. This reduces noise and errors when using hidden services with TestingTorNetwork enabled. Fixes bug 40922; bugfix on 0.3.2.1-alpha. o Minor bugfixes (relay): - Refuse to overwrite an existing *.secret_family_key when running tor --keygen-family. Fixes bug 41184; bugfix on 0.4.9.1-alpha. o New system requirements: - When built with LibreSSL, Tor now requires LibreSSL 3.7 or later. Part of ticket 41059. - When built with OpenSSL, Tor now requires OpenSSL 1.1.1 or later. (We strongly recommend 3.0 or later, but still build with 1.1.1, even though it is not supported by the OpenSSL team, due to its presence in Debian oldstable.) Part of ticket 41059. o Removed features (relays): - Relays no longer support clients that falsely advertise TLS ciphers they don't really support. (Clients have not done this since 0.2.3.17-beta). Part of ticket 41031. - Relays no longer support clients that require obsolete v1 and v2 link handshakes. (The v3 link handshake has been supported since 0.2.3.6-alpha). Part of ticket 41031. - Relays no longer support the obsolete TAP circuit extension protocol. (For backward compatibility, however, relays still continue to include TAP keys in their descriptors.) Implements part of proposal 350. - Relays no longer support the obsolete "RSA-SHA256-TLSSecret" authentication method, which used a dangerously short RSA key, and which required access TLS session internals. The current method ("Ed25519-SHA256-RFC5705") has been supported since 0.3.0.1-alpha. Closes ticket 41020. o Removed features (directory authorities): - Directory authorities no longer support consensus methods before method 32. Closes ticket 40835. - We include a new consensus method that removes support for computing "package" lines in consensus documents. This feature was never used, and support for including it in our votes was removed in 0.4.2.1-alpha. Finishes implementation of proposal 301. -- Ujvy1BFy+gzTuzkFTukHT4RrTnibOfMATpJQdf4zo7k=

1 0

New Release: Tor Browser 16.0a2 (Android, Windows, macOS, Linux)
by Giorgio Maone 04 Feb '26

04 Feb '26

Hi everyone, Tor Browser 16.0a2 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-160a2/ Changelog: Tor Browser 16.0a2 - February 04 2026 * ll Platforms o Updated NoScript to 13.5.11.90301984 o Updated Tor to 0.4.9.4-rc o Updated OpenSSL to 3.5.5 o Bug tor-browser#44303 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44303>: Extension update job might never work on Android o Bug tor-browser#44416 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44416>: Rebase alpha onto 147 o Bug tor-browser#44420 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44420>: Drop "rights" from components.conf o Bug tor-browser#44482 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44482>: Script execution in Safest mode via data URI navigation o Bug tor-browser#44492 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44492>: Fix python linting warnings in our test files o Bug tor-browser#44580 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44580>: Registers noscript to check for updates on first run o Bug tor-browser-build#41676 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update toolchains for Firefox 147 * Windows + macOS + Linux o Updated Firefox to 147.0a1 o Bug tor-browser#44289 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44289>: RFPHelper console error when |--toolbar-field-color| is set to |inherit| o Bug tor-browser#44343 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44343>: Hide the default browser settings again after MozBug 1969949 o Bug tor-browser#44460 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44460>: Payment methods and addresses setting headings are visible in settings o Bug tor-browser#44522 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44522>: Move common changes to about dialog to base-browser o Bug tor-browser#44535 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44535>: Letterboxing background colour is no longer used o Bug tor-browser#44554 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44554>: Unlabeled AI item in tab context menu in 147 * Linux o Bug tor-browser#44410 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44410>: Use system's size for UI font on Linux * Android o Updated GeckoView to 147.0a1 o Bug tor-browser#44398 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44398>: Unable to load websites after a short amount of time on Android o Bug tor-browser#44469 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44469>: Fix branding on Android RR o Bug tor-browser#44507 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44507>: Drop the dependency on Sentry o Bug tor-browser#44523 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44523>: New circuit seems to have disappeared from 147 on Android o Bug tor-browser#44532 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44532>: Backport Bug 1967968: Minify the pdf.js code in order to improve the loading performance o Bug tor-browser#44533 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44533>: Update NoScript to the version bundled with the browser on Android o Bug tor-browser#44591 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44591>: TBA Alpha fails to initialize WebExtensions * Build System o All Platforms + Bug tor-browser#44452 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44452>: Improve tb-dev range-diff and diff-diff + Bug tor-browser#44498 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44498>: Update translations CI to account for 1.0 version gap between alpha and stable + Bug tor-browser-build#41535 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update macOS and Windows containers to Debian trixie + Bug tor-browser-build#41664 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Investigate and fix issue with unexpected build_id changes + Bug tor-browser-build#41668 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Build mozharness.zip when building dev artifacts + Bug tor-browser-build#41671 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update tools/signing/linux-signer-sign-android-apks to check for v3 signatures instead of v1 + Bug tor-browser-build#41678 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Consider set -u and maybe set -o pipefail + Bug tor-browser-build#41682 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: relprep.py should fail when a GitHub release is not found + Bug tor-browser-build#41685 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add henry to list of taggers in relevant projects. + Bug tor-browser-build#41687 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add single |make list_toolchain_updates| command to list all toolchain updates + Bug tor-browser-build#41691 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update Lyrebird to v0.8.1 + Bug tor-browser-build#41705 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Remove unnecessary workaround in projects/go/build + Bug tor-browser-build#41707 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: firefox-l10n fails to build with |fetch_locale: 1: set: Illegal option -o pipefail| + Bug tor-browser-build#41708 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: relprep.py fails to update extensions when out/browser does not exist + Bug rbm#40095 <https://gitlab.torproject.org/tpo/applications/rbm/-/issues/40095>: cached checksums should not be used for input files when refresh_input is enabled + Bug rbm#40096 <https://gitlab.torproject.org/tpo/applications/rbm/-/issues/40096>: |container extract| is showing confusing error when target directory already exists + Bug rbm#40100 <https://gitlab.torproject.org/tpo/applications/rbm/-/issues/40100>: The GZIP variable makes set -u fail o Windows + macOS + Linux + Bug tor-browser-build#41427 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Drop the openURL property from the update o Windows + Linux + Android + Updated Go to 1.25.6 o Linux + Bug tor-browser-build#41706 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Bump glibc to v2.28 in the linux cross-toolchain (aarch64) o Android + Bug tor-browser#44508 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44508>: Drop clearkey also on Android + Bug tor-browser-build#32200 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/3…>: only include required bits of OpenSSL in Android builds + Bug tor-browser-build#41679 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Android tor-expert-bundle archives missing version in filename + Bug tor-browser-build#41684 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Use only the NDK as var/compiler on Android + Bug tor-browser-build#41688 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: 147 nightlies exceed the Play Store threshold + Bug tor-browser-build#41699 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Delete prefs specific to other architectures in omni.ja + Bug tor-browser-build#41702 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Replace uglifyjs with terser -- ma1

1 0

New Release: Tor Browser 15.0.5 (Android, Windows, macOS, Linux)
by Pier Angelo Vendrame 29 Jan '26

29 Jan '26

Hi everyone, Tor Browser 15.0.5 has now been published for all platforms. For details please see our blog post: https://blog.torproject.org/new-release-tor-browser-1505/ Changelog: * All Platforms * Updated Tor to 0.4.8.22 * Updated NoScript to 13.5.12.1984 * Updated OpenSSL to 3.5.5 * Android * Bug 44533: Update NoScript to the version bundled with the browser on Android [tor-browser] * Build System * All Platforms * Bug 41691: Update Lyrebird to v0.8.1 [tor-browser-build] * Windows + Linux + Android * Updated Go to 1.24.12 Best, Pier Angelo Vendrame

1 0

[RELEASE] Stable 0.4.8.22 and release candidate 0.4.9.4-rc
by David Goulet 29 Jan '26

29 Jan '26

Greetings, We have released 0.4.8.22 stable and 0.4.9.4-rc: https://forum.torproject.org/t/release-candidate-and-stable-release-0-4-8-2… Note that 0.4.8.22 will most likely be the final release of the 0.4.8.x series. Changelog below: Changes in version 0.4.9.4-rc - 2026-01-28 Finally, the release candidate for the 0.4.9.x series. It consists of minor features and several bugfixes. Nothing major has been added since the alpha. If everything goes well, the next version will be the first stable. o Minor features (security, reliability): - When KeepaliveIsolateSOCKSAuth is keeping a circuit alive, expire the circuit based on when it was last in use for any stream, not (as we did before) based on when a stream was last attached to it. Closes ticket 41157. Implements a minimal version of Proposal 368. o Minor feature (Exit): - Add Monero ports to the ReducedExitPolicy. Closes ticket 41168. o Minor features (HTTPTunnelPort): - Implement new HTTPTunnelPort features for interoperability with Arti's HTTP CONNECT proxy. This work adds new headers to requests to and replies from the HttpConnectPort, support for OPTIONS requests, tightens the expected syntax for Proxy-Authorization, and increases defense-in-depth against some kinds of cross-site HTTP attacks. Closes ticket 41156. Implements proposal 365. o Minor features (linux seccomp2 sandbox): - Allow the fstatat64 and statx syscalls on i386 architecture when glibc >= 2.33. On i386, glibc uses fstatat64 instead of newfstatat for stat operations, and statx for time64 support. Without this, SIGHUP configuration reload fails when using sandbox mode with %include directives on i386 with Debian Bookworm or newer. - Allow the lstat64 syscall on i386 architecture. This syscall is used by glob() in glibc 2.36+ when processing %include directives with directory patterns. o Minor bugfixes (DNS, exit): - Clip every returned DNS TTL to 60 (RESOLVED) in order to mitigate an exit DNS cache oracle. Fixes bug 40979; bugfix on 0.3.5.1-alpha. o Minor bugfixes (spec conformance): - Do not treat "15" as a recognized remote END reason code. Formerly, we treated it as synonymous with a local ENTRYPOLICY, which isn't a valid remote code at all. Fixes bug 41171; bugfix on 0.2.0.8-alpha. o Minor bugfixes (tooling): - Fix a false positive valgrind related to inspecting a bitfield next to another uninitialized bitfield. Fixes bug 41182; bugfix on 0.3.3.2-alpha. o Minor bugfixes (warnings): - Fix minor warnings from newer versions of shellcheck and clang. Fixes bug 41166; bugfix on 0.4.3.1-alpha and several other versions. Changes in version 0.4.8.22 - 2026-01-28 This is likely the very last release of the 0.4.8.x series. Three major bugfixes detailed below including two affecting directory servers (basically all relays). We strongly recommend upgrading as soon as possible. o Major bugfixes (security): - Avoid an out-of-bounds read error that could occur with V1-formatted EXTEND cells. Fixes bug 41180; bugfix on 0.4.8.1-alpha. This is tracked as TROVE-2025-016. o Major bugfixes (directory servers): - Allow old clients to fetch the consensus even if they use version 0 of the SENDME protocol. In mid 2025 we changed the required minimum version of the "FlowCtrl" protocol to 1, meaning directory caches hang up on clients that send a version 0 SENDME cell. Since old clients were no longer able to retrieve the consensus, they couldn't learn about this required minimum version -- meaning we've had many many old clients loading down directory servers for the past months. Fixes bug 41191; bugfix on 0.4.1.1-alpha. - Don't count networkstatus serves until they finish. When we started serving a consensus document but the client didn't receive all of it, we were still counting that as a success in our stats. This mistake, which can be triggered for example by obsolete clients or by DPI-based censorship, led to wildly inflated user counts because we estimate total users in the world based on successful consensus fetches. Fixes bug 41192; bugfix on 0.2.1.1-alpha. o Minor feature (testing, CI): - Bump the CI version of chutney to the current version as of 2026-01-21 (3338f5c). o Minor features (debugging, compression): - Do not check for compression bombs for buffers smaller than 5MB (increased from 64 KB). Fixes ticket 40739; bugfix on 0.2.1.29. o Minor features (directory servers): - Track how many times directory servers begin serving networkstatus documents, so we can compare it to the number of times we finish serving them. Motivated by the fixes in ticket 41192. o Minor features (fallbackdir): - Regenerate fallback directories generated on January 28, 2026. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2026/01/28. o Minor bugfixes (relay): - Downgrade "Error relaying cell across rendezvous" log warn to info as the error condition is possible under normal circumstances. Fixes bug 40951; bugfix on 0.3.5.1-alpha. o Code simplification and refactoring: - Simplify SOCKS4a parsing to avoid the (false) appearance of integer underflows, and to make the logic more obvious. Fixes bug 41190; bugfix on 0.3.5.1-alpha. Cheers! David -- FQ8KxEoJUblilD5txJNxMJu3JdzR1uWAsSdqDORyehI=

1 0