[tor-announce] New Release: Tor Browser 11.5.4 (Android, Windows, macOS, Linux)
Richard Pospesel
richard at torproject.org
Wed Oct 12 21:18:34 UTC 2022
Tor Browser 11.5.4 is now available from the Tor Browser download page and also
from our distribution directory.
Our Android release follows our alpha branch to the ESR 102 release train.
Please see the 12.0a2 blog post for details.
Tor Browser 11.5.4 backports the following security updates from Firefox ESR
102.3 to to Firefox ESR 91.13 on Windows, macOS and Linux:
CVE-2022-40959
CVE-2022-40960
CVE-2022-40958
CVE-2022-40956
CVE-2022-40962
Tor Browser 11.5.4 updates GeckoView on Android to 102.3.0esr. We also backport
the following Android-specific security updates from Firefox 104 and 105:
CVE-2022-36317
CVE-2022-38474
CVE-2022-40961
The full changelog since Tor Browser 11.5.3 is:
All Platforms
Bug tor-browser-build#40629: Bump snowflake version to 9ce1de4eee4e
Bug tor-browser-build#40633: Remove Team Cymru hard-coded bridges
Bug tor-browser#41326: Update preference for remoteRecipes
Windows + macOS + Linux
Bug tor-browser-build#40624: Change placeholder bridge addresses to
make snowflake and meek work with ReachableAddresses/FascistFirewall
Bug tor-browser#41303: YEC 2022 Takeover for Desktop Stable
Bug tor-browser#41310: Backport ESR 102.3 security fixes to 91.13-based
Tor Browser
Bug tor-browser#41323: Tor-ify notification bar gradient colors (branding)
Bug tor-browser#41338: The arrow on the search bar should be flipped
for RTL languages
Windows + macOS
Bug tor-browser#41307: font whitelist typos
Android
Updated GeckoView to 102.3.0esr
Bug tor-browser#41089: Add tor-browser build scripts + Makefile to
tor-browser
Bug tor-browser#41094: Enable HTTPS-Only Mode by default in Tor Browser
Android
Bug tor-browser#41159: Remove HTTPS-Everywhere extension from
esr102-based Tor Browser Android
Bug tor-browser#41166: Backport fix for CVE-2022-36317: Long URL would
hang Firefox for Android (Bug 1759951)
Bug tor-browser#41167: Backport fix for CVE-2022-38474: Recording
notification not shown when microphone was recording on Android (Bug 1719511)
Bug tor-browser#41302: YEC 2022 Takeover for Android Stable
Bug tor-browser#41312: Backport Firefox 105 Android security fixes to
102.3-based Tor Browser
Bug tor-browser#41314: Add YEC 2022 strings to torbutton and fenix
Build System
Android
Update Go to 1.18.7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xDE47360363F34B2C.asc
Type: application/pgp-keys
Size: 4816 bytes
Desc: OpenPGP public key
URL: <http://lists.torproject.org/pipermail/tor-announce/attachments/20221012/e290be32/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-announce/attachments/20221012/e290be32/attachment.sig>
More information about the tor-announce
mailing list