- tor-announce - lists.torproject.org

New Release: Tor Browser 14.5a3 (Android, Windows, macOS, Linux)
by Morgan 11 Feb '25

11 Feb '25

Hi everyone, Tor Browser 14.5a3 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-145a3/ Changelog: > Tor Browser 14.5a3 - February 10 2025 > * All Platforms > * Bug 41065: navigator.storage "best effort" + "persistent" leak partitionSize/totalSpace entropy [tor-browser] > * Bug 41921: Clean up initialisation and bridges conflict between TorSettings and TorConnect [tor-browser] > * Bug 43308: Only allow "about:" pages to have access to contentaccessible branding assets [tor-browser] > * Bug 43323: Expose a stable asset from chrome:// to identify Tor, Base, and Mullvad Browser [tor-browser] > * Bug 43449: Rebase Tor Browser alpha onto 128.7.0esr [tor-browser] > * Bug 43451: Backport security fixes from Firefox 135 [tor-browser] > * Bug 41362: Remove meek azure from the builtin bridges [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 128.7.0esr > * Bug 41831: Some .tor.onion sites are not displaying the underlying V3 onion address in alpha [tor-browser] > * Bug 43254: Cancel Moat requests when no longer needed [tor-browser] > * Bug 43386: Extension requests expose Firefox's minor version and custom app name [tor-browser] > * Bug 43398: tor-urlbar-button-plain hover styling is overwritten by tor-button rule [tor-browser] > * Bug 43406: 2 buttons displayed onion-available and connect when Tor daemon killed [tor-browser] > * Bug 43461: Drop our wordmark padding [tor-browser] > * Bug 43462: Use NetworkLinkService instead of Moat for the internet test [tor-browser] > * Bug 43466: Drop unnecessary CSS rules in branding aboutDialog.css [tor-browser] > * Windows > * Bug 43402: set browser.startup.blankWindow false [tor-browser] > * macOS > * Bug 43468: ScreenCaptureKit framework should be a weak link [tor-browser] > * Linux > * Bug 41297: Add video codecs dependencies (recommends) on the Debian package [tor-browser-build] > * Android > * Updated GeckoView to 128.7.0esr > * Bug 43198: Remove "Learn more" link from Android's no-internet error [tor-browser] > * Bug 43199: Bootstrapping bar needs a little TLC on Android (Part 1) [tor-browser] > * Bug 43222: All tor logs timestamps reset to current time when opening screen [tor-browser] > * Bug 43351: Don't force ALL CAPS for the fenix snackbar action button text [tor-browser] > * Bug 43359: [Android] Improper handling of TorBootstrapChangeListener with respect to system onDestroy() calls for HomeActivity [tor-browser] > * Bug 43360: [Android] Replace custom variable isBeingRecreated with built-in isFinishing function [tor-browser] > * Bug 43368: Add @Suppress for incorrect linting error "Overriding method should call super. onNewIntent" [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.22.12 > * Bug 41281: Better dev defaults for fetch variable [tor-browser-build] > * Bug 41324: Improve build signing ergonomics [tor-browser-build] > * Bug 41345: Go autoupdates in 1.23 so add env var to prevent it in any step that has network access [tor-browser-build] > * Bug 41357: keyring/anti-censorship.gpg is in `GPG keybox database version 1` format [tor-browser-build] > * Bug 41358: Update sign-tag script to handle rapid-release nightly branches [tor-browser-build] > * Bug 40079: Make `fetch: if_needed` fetch existing branches [rbm] > * Windows + macOS + Linux > * Bug 41356: Add redirects to make 14.0a4 a watershed [tor-browser-build] > * macOS > * Bug 41350: Increase timeout in rcodesign-notary-submit [tor-browser-build] best, -morgan

1 0

[RELEASE] Tor 0.4.8.14 stable
by David Goulet 05 Feb '25

05 Feb '25

Greetings, We just released tor 0.4.8.14. https://forum.torproject.org/t/stable-release-0-4-8-14/17242 Here is the ChangeLog: Changes in version 0.4.8.14 - 2025-02-05 Minor release fixing a major bug affecting onion service directory cache, also known as HSDir. Furthermore, the fallbackdir list had more than 25% of its entries unreachable or gone from the consensus. As usual, we strongly recommend to update to this version as soon as possible. o Major bugfixes (onion service directory cache): - When the OOM killer kicks in, cleanup the descriptor cache of an HSDir by looking at the lowest downloaded count instead of time in cache. Fixes bug 40996; bugfix on 0.3.5.1-alpha. o Minor feature (testing): - test-network now unconditionally includes IPv6 instead of trying to detect IPv6 support. o Minor features (fallbackdir): - Regenerate fallback directories generated on February 05, 2025. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2025/02/05. o Minor bugfixes (memory): - Fix a pointer free that wasn't set to NULL afterwards which could be reused by calling back in the free all function. Fixes bug 40989; bugfix on 0.4.8.13. Cheers! David -- hH04sdDF8KiEr2kW7K1NBEXCBQNcrSHad2ksrzivfJM=

1 0

New Releases: Tor Browser 14.0.5 (Android, Windows, macOS, Linux) and 13.5.12 (Windows, macOS)
by Pier Angelo Vendrame 04 Feb '25

04 Feb '25

Hi everyone, Tor Browser 14.0.5 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1405/ Changelog: > * All Platforms > * Bug 41065: navigator.storage "best effort" + "persistent" leak > partitionSize/totalSpace entropy [tor-browser] > * Bug 43386: Extension requests expose Firefox's minor version and > custom app name [tor-browser] > * Bug 43447: Backport stable and legacy: Some .tor.onion sites are > not displaying the underlying V3 onion address in alpha [tor-browser] > * Bug 43448: Rebase Tor Browser release onto 128.7.0esr [tor-browser] > * Bug 43451: Backport security fixes from Firefox 135 [tor-browser] > * Bug 41328: Exclude tor dependencies from LD_LIBRARY_PATH > [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 128.7.0esr > * Bug 43312: Download popup panel progress bar overflows [tor-browser] > * Linux > * Bug 43236: High refresh rate detectable by websites when Wayland > (MOZ_ENABLE_WAYLAND=1) is used [tor-browser] > * Bug 43326: Launching tor-browser on gentoo fails with "version > `OPENSSL_3.2.0' not found" [tor-browser] > * Android > * Updated GeckoView to 128.7.0esr > * Build System > * All Platforms > * Updated Go to 1.22.11 > * Bug 41324: Improve build signing ergonomics [tor-browser-build] > * Bug 41343: Add signing step to clean some files such as test > artifacts [tor-browser-build] > * Bug 41345: Go autoupdates in 1.23 so add env var to prevent it > in any step that has network access [tor-browser-build] > * Bug 41350: Increase timeout in rcodesign-notary-submit > [tor-browser-build] > * Bug 41357: keyring/anti-censorship.gpg is in `GPG keybox > database version 1` format [tor-browser-build] In addition to that, we published Tor Browser 13.5.12 for legacy platforms (Windows 7 and 8, macOS <= 10.14): - https://blog.torproject.org/new-release-tor-browser-13512/ Changelog: > * All Platforms > * Updated Firefox to 115.20.0esr > * Bug 43447: Backport stable and legacy: Some .tor.onion sites are > not displaying the underlying V3 onion address in alpha [tor-browser] > * Bug 43450: Rebase Tor Browser legacy onto 115.20.0esr [tor-browser] > * Bug 43451: Backport security fixes from Firefox 135 [tor-browser] > * Build System > * All Platforms > * Bug 41324: Improve build signing ergonomics [tor-browser-build] > * Bug 41350: Increase timeout in rcodesign-notary-submit > [tor-browser-build] > * Bug 41357: keyring/anti-censorship.gpg is in `GPG keybox > database version 1` format [tor-browser-build] Best, Pier Angelo Vendrame

1 0

New Release: Tor Browser 14.5a2 (Android, Windows, macOS, Linux)
by Giorgio Maone 15 Jan '25

15 Jan '25

Hi everyone, Tor Browser 14.5a2 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-alpha-release-tor-browser-145a2/>. Changelog: * All Platforms o Updated Tor to 0.4.9.1-alpha o Updated NoScript to 12.1.1 o Bug tor-browser#43176 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43176>: noscript-marker CSP warnings in the console o Bug tor-browser#43282 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43282>: Unable to click/tap/select anything adjacent the WebGL placeholders o Bug tor-browser#43296 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43296>: NoScript-blocked video content placeholder is not centered o Bug tor-browser#43334 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43334>: Developer Tools lacks data for Responsive Design Mode and Compatibility o Bug tor-browser#43336 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43336>: Move branding files out of torbutton o Bug tor-browser#43337 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43337>: Add branding files to translation CI o Bug tor-browser#43338 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43338>: Custom zoom + "Zoom text only" breaks pdfjs o Bug tor-browser#43343 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43343>: Remove YEC 2024 o Bug tor-browser#43345 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43345>: Translation CI: Exclude android strings from the legacy branch o Bug tor-browser#43352 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43352>: Failing connection attempts to multicast IPv6 ff00:::443 logged during NoScript updates o Bug tor-browser#43366 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43366>: Do not use system accent color in inputs o Bug tor-browser#43384 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43384>: Backport security fixes from Firefox 134 o Bug tor-browser#43387 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43387>: Rebase Tor Browser alpha onto 128.6.0esr o Bug tor-browser-build#41328 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Exclude tor dependencies from LD_LIBRARY_PATH o Bug tor-browser-build#41333 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update STUN servers in Snowflake builtin bridges o Bug tor-browser-build#41338 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add CDN77 meek bridge * Windows + macOS + Linux o Updated Firefox to 128.6.0esr o Bug tor-browser#43269 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43269>: NoScript localization issue o Bug tor-browser#43312 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43312>: Download popup panel progress bar overflows o Bug tor-browser#43320 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43320>: Improve how bridge settings appear in search results * Linux o Bug tor-browser#43236 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43236>: High refresh rate detectable by websites when Wayland (MOZ_ENABLE_WAYLAND=1) is used o Bug tor-browser#43326 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43326>: Launching tor-browser on gentoo fails with "version `OPENSSL_3.2.0' not found" o Bug tor-browser#43330 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43330>: System fonts leak when emptying the allow list on Linux o Bug tor-browser-build#41311 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: AppArmor profile fails on Debian stable * Android o Updated GeckoView to 128.6.0esr o Bug tor-browser#42651 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42651>: Finishing bootstrapping kicks the user out of settings, interupting whatever they were doing o Bug tor-browser#43024 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43024>: firefox-android 128.1 rebase TODOs and patchset health work o Bug tor-browser#43229 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43229>: Buttons that open links can be accessed before torbrowser is bootstrapped, leaving the app in a bad state o Bug tor-browser#43350 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43350>: Remove all caps comment from android string * Build System o All Platforms + Updated Go to 1.22.10 + Bug tor-browser#43373 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43373>: Do not run all CI jobs for scheduled jobs. + Bug tor-browser#43374 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43374>: Run the |update-translations| jobs independent of others + Bug tor-browser-build#41326 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Remove var/torbrowser_legacy_version from rbm.conf in alpha/nightly + Bug tor-browser-build#41340 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update kick_devmole_build script with Mullvad's new GitHub workflow endpoint + Bug tor-browser-build#41343 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add signing step to clean some files such as test artifacts + Bug rbm#40081 <https://gitlab.torproject.org/tpo/applications/rbm/-/issues/40081>: Support apt option for not installing recommended dependencies o Windows + macOS + Bug tor-browser-build#41349 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Wrong copyright year makes build non-reproducible o macOS + Bug tor-browser-build#41325 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Newer versions of 7z fail to extract our dmg files because of the /Applications symlink + Bug tor-browser-build#41327 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Print more logs when make_full_update.sh failed to generate mar file in dmg2mar o Linux + Bug tor-browser-build#41329 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Do not install python2.7-minimal in the linux-aarch64 firefox container + Bug tor-browser-build#41331 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Make update_responses find linux-aarch64 mar files o Android + Bug tor-browser#42690 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42690>: Add the commands to produce the APKs to tools/geckoview -- ma1

1 0

New Release: Tor Browser 13.5.11 (Windows Windows 7/8/8.1, macOS 10.12-10.14)
by Giorgio Maone 07 Jan '25

07 Jan '25

Hi everyone, Tor Browser 13.5.11 has now been published for legacy Windows and macOS platforms. For details please see our blog post <https://blog.torproject.org/new-release-tor-browser-13511/>. Changelog: * All Platforms o Updated Firefox to 115.19.0esr o Updated NoScript to 12.1.1 o Updated GeckoView to 115.19.0esr o Bug tor-browser#43176 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43176>: noscript-marker CSP warnings in the console o Bug tor-browser#43269 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43269>: NoScript localization issue o Bug tor-browser#43282 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43282>: Unable to click/tap/select anything adjacent the WebGL placeholders o Bug tor-browser#43296 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43296>: NoScript-blocked video content placeholder is not centered o Bug tor-browser#43313 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43313>: Backport security fixes from Firefox 133 o Bug tor-browser#43343 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43343>: Remove YEC 2024 o Bug tor-browser#43352 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43352>: Failing connection attempts to multicast IPv6 ff00:::443 logged during NoScript updates o Bug tor-browser#43383 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43383>: Rebase Tor Browser Legacy onto 115.19.0esr o Bug tor-browser#43384 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43384>: Backport security fixes from Firefox 134 o Bug tor-browser-build#41333 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update STUN servers in Snowflake builtin bridges o Bug tor-browser-build#41338 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add CDN77 meek bridge * Build System o All Platforms + Bug tor-browser-build#40996 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Do not version the .nobackup files + Bug tor-browser-build#41284 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update relprep.py script to not synchronise changelogs between channels + Bug tor-browser-build#41310 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update relprep.py in maint-13.5 + Bug tor-browser-build#41321 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update PieroV's expired keys + Bug tor-browser-build#41340 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update kick_devmole_build script with Mullvad's new GitHub workflow endpoint o macOS + Bug tor-browser-build#41325 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Newer versions of 7z fail to extract our dmg files because of the /Applications symlink + Bug tor-browser-build#41327 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Print more logs when make_full_update.sh failed to generate mar file in dmg2mar -- ma1

1 0

New Release: Tor Browser 14.5a1 (Android, Windows, macOS, Linux)
by Giorgio Maone 27 Nov '24

27 Nov '24

Hi everyone, Tor Browser 14.5a1 has now been published for all platforms. For details please see our blog post <https://blog.torproject.org/new-alpha-release-tor-browser-145a1/>. Changelog: * All Platforms o Updated NoScript to 11.5.2 o Updated Tor to 0.4.8.13 o Bug tor-browser#41710 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41710>: Refactor about:torconnects relation to TorConnectParent o Bug tor-browser#42125 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42125>: lock RFP part 2 o Bug tor-browser#43307 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43307>: Rebase Tor Browser alpha onto 128.5.0esr o Bug tor-browser#43313 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43313>: Backport security fixes from Firefox 133 * Windows + macOS + Linux o Updated Firefox to 128.5.0esr o Bug tor-browser#42186 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42186>: Drop about:tbupdate o Bug tor-browser#42597 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42597>: Lox.generateInvite does not convert JSON object to string o Bug tor-browser#42739 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42739>: Fix localization in the profile error dialog o Bug tor-browser#42802 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42802>: Make use of |:has| CSS selector o Bug tor-browser#43237 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43237>: Tweak Tor circuit display panel for screen readers o Bug tor-browser#43262 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43262>: Onion keys dialog. "Remove" removes all keys, "Remove all" does nothing. o Bug tor-browser#43263 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43263>: Onion site keys: add some alerts for screen readers o Bug tor-browser#43294 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43294>: Replace |Actor| |willDestroy| with |didDestroy| o Bug tor-browser#43314 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43314>: Tidy up connection preferences for screen readers and keyboard users * macOS o Bug MozBug 1768724#43165 <https://gitlab.torproject.org/tpo/applications/MozBug 1768724/-/issues/43165>: Disable Microsoft SSO on macOS [tor-browser] * Linux o Bug tor-browser#41786 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41786>: Remove old fontconfig stuff at the next watershed update o Bug tor-browser#41799 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41799>: Make lack of fonts.conf less of a footgun o Bug tor-browser-build#41298 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Remove |--detach| parameter from .desktop files o Bug tor-browser-build#41312 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Remove comment in start-browser about --class and --name parameters o Bug tor-browser-build#41313 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Show waiting cursor while app opens * Android o Updated GeckoView to 128.5.0esr o Bug tor-browser#43232 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43232>: Make the Android Meek transport easier to debug o Bug tor-browser#43241 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43241>: Improve hiding non-private tab features on Android o Bug tor-browser#43251 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43251>: Enable tab suggestions and autocomplete for private tabs on Android * Build System o All Platforms + Updated Go to 1.22.9 + Bug tor-browser#43272 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43272>: Fix git fetch in translation CI + Bug tor-browser#43295 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43295>: Update MR templates + Bug tor-browser-build#40996 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Do not version the .nobackup files + Bug tor-browser-build#41279 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add @pierov and @ma1 as new signers + Bug tor-browser-build#41284 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update relprep.py script to not synchronise changelogs between channels + Bug tor-browser-build#41288 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Use exec_noco option when using exec + Bug tor-browser-build#41289 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Fix single-browser in relprep.py + Bug tor-browser-build#41300 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add bea, clairehurst, and jwilde to tb_builders + Bug tor-browser-build#41304 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add a browser commit tag+signing script + Bug tor-browser-build#41306 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Container dependencies are sorted before resolving templates + Bug tor-browser-build#41307 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Container dependencies are not filtered for duplicates + Bug tor-browser-build#41321 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update PieroV's expired keys + Bug rbm#40006 <https://gitlab.torproject.org/tpo/applications/rbm/-/issues/40006>: Add option to avoid doing a git checkout when using the exec template function o Windows + macOS + Linux + Bug tor-browser-build#41286 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Update the deploy update scripts to optinally take an override hash o Linux + Bug tor-browser-build#41142 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Complete the toolchain for linux-aarch64 + Bug tor-browser-build#41266 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Build the Tor and Mullvad Browsers for aarch64 Linux + Bug tor-browser-build#41282 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4…>: Add SSL to our custom Python for MozBug 1924022 -- ma1

1 0

New Release: Tor Browser 14.0.3 (Android, Windows, macOS, Linux)
by Morgan 26 Nov '24

26 Nov '24

Hi everyone, Tor Browser 14.0.3 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1403/ Changelog: > Tor Browser 14.0.3 - November 25 2024 > * All Platforms > * Bug 43306: Rebase Tor Browser Stable onto 128.5.0esr [tor-browser] > * Bug 43313: Backport security fixes from Firefox 133 [tor-browser] > * Windows + macOS + Linux > * Updated Firefox to 128.5.0esr > * macOS > * Bug 43165: Disable Microsoft SSO on macOS [MozBug 1768724] [tor-browser] > * Android > * Updated GeckoView to 128.5.0esr > * Build System > * All Platforms > * Updated Go to 1.22.9 > * Bug 40996: Do not version the .nobackup files [tor-browser-build] > * Bug 41284: Update relprep.py script to not synchronise changelogs between channels [tor-browser-build] > * Bug 41300: Add bea, clairehurst, and jwilde to tb_builders [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 13.5.10 (Windows, macOS)
by Morgan 26 Nov '24

26 Nov '24

Hi everyone, Tor Browser 13.5.10 has now been published for legacy Windows and macOS platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-13510/ Changelog: > Tor Browser 13.5.10 - November 18 2024 > * All Platforms > * Updated Firefox to 115.18.0esr > * Updated NoScript to 11.5.2 > * Bug 32668: NoScript default whitelist re-appears on clicking NoScript Options / Reset [tor-browser] > * Bug 43257: NoScript-blocked content placeholders causing slow downs [tor-browser] > * Bug 43258: NoScript Lifecycle error on extension updates [tor-browser] > * Bug 43302: Rebase Tor Browser Legacy onto 115.18.0esr [tor-browser] > * Build System > * All Platforms > * Bug 41286: Update the deploy update scripts to optinally take an override hash [tor-browser-build] > * Bug 41289: Fix single-browser in relprep.py [tor-browser-build] > * Bug 41290: Remove android signing in maint-13.5 branch [tor-browser-build] > * Bug 41300: Add bea, clairehurst, and jwilde to tb_builders [tor-browser-build] > * Bug 41303: Remove Android and Linux targets from browser-all and browser-all-desktop targets in release project [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 14.0.2 (Android, Windows, macOS, Linux)
by Morgan 13 Nov '24

13 Nov '24

Hi everyone, Tor Browser 14.0.2 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1402/ Changelog: > Tor Browser 14.0.2 - November 12 2024 > * All Platforms > * Updated NoScript to 11.5.2 > * Bug 43257: NoScript-blocked content placeholders causing slow downs [tor-browser] > * Windows + macOS + Linux > * Bug 32668: NoScript default whitelist re-appears on clicking NoScript Options / Reset [tor-browser] > * Bug 43258: NoScript Lifecycle error on extension updates [tor-browser] > * Bug 43262: Onion keys dialog. "Remove" removes all keys, "Remove all" does nothing. [tor-browser] > * macOS > * Bug 43245: TB14 on macOS crashing when visiting some onionsites [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.22.9 > * Windows + macOS + Linux > * Bug 41286: Update the deploy update scripts to optinally take an override hash [tor-browser-build] best, -morgan

1 0

[tor-project] Reminder: mailman 3 upgrade imminent (TPA-RFC-71)
by Antoine Beaupré 29 Oct '24

29 Oct '24

Hi, As mentioned in early October, we're in the process of upgrading our main mail server, which includes upgrading to the shiny new Mailman 3 platform. We have, right now, a prototype mailman 3 server available at: https://lists-01.torproject.org/ It's hidden behind the usual "trivial" authentication (ask us on IRC if you don't remember what it is), but should otherwise work normally. I'm going to start by migrating the TPA mailing list and we'll be testing this for a couple of days, but, next week, I'll start migrating the other mailing lists (including this one!). If people want to jump in front of that train early and be part of the beta testers, then by all means I'm happy to have your mailing list be part of the early adopters. Be warned that Mailman 3 is a significant upgrade from Mailman 2. There are some great things (like unified authentication), and some less great things (like a more complex design and "shinier" web interface that might not be everyone's taste). As a reminder, we're doing this upgrade a little rushed because the main mail server is now unsupported for security upgrades. See the details of the proposal here: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/policy/tpa-rfc-71-emerge… ... with the milestone tracking actual work issues in: https://gitlab.torproject.org/groups/tpo/tpa/-/milestones/16 (Sorry for cross-posting this, but this seems like it warrants wider distribution. As a rule of thumb, I selected mailing lists with public archives that had posts in October 2024, removing duplicates like anti-censorship-team and -alerts. I also suspect many of those mailing lists will refuse my message because I'm not subscribed, but I will have tried. :)) Phew! a. -- Antoine Beaupré torproject.org system administration _______________________________________________ tor-project mailing list tor-project(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project

1 0