Tor Browser 13.0

Tor Browser 11.5.4 - October 11 2022

All Platforms
Bug 40580: Add support for uk (ukranian) locale [tor-browser-build]
Bug 40629: Bump snowflake version to 9ce1de4eee4e [tor-browser-build]
Bug 40633: Remove Team Cymru hard-coded bridges [tor-browser-build]
Bug 41326: Update preference for remoteRecipes [tor-browser]

Windows + macOS + Linux
Bug 40624: Change placeholder bridge addresses to make snowflake and meek work with ReachableAddresses/FascistFirewall [tor-browser-build]
Bug 41303: YEC 2022 Takeover for Desktop Stable [tor-browser]
Bug 41310: Backport ESR 102.3 security fixes to 91.13-based Tor Browser [tor-browser]
Bug 41323: Tor-ify notification bar gradient colors (branding) [tor-browser]
Bug 41338: The arrow on the search bar should be flipped for RTL languages [tor-browser]

Windows + macOS
Bug 41307: font whitelist typos [tor-browser]

Android
Updated GeckoView to 102.3.0esr
Bug 41089: Add tor-browser build scripts + Makefile to tor-browser [tor-browser]
Bug 41094: Enable HTTPS-Only Mode by default in Tor Browser Android [tor-browser]
Bug 41159: Remove HTTPS-Everywhere extension from esr102-based Tor Browser Android [tor-browser]
Bug 41166: Backport fix for CVE-2022-36317: Long URL would hang Firefox for Android (Bug 1759951) [tor-browser]
Bug 41167: Backport fix for CVE-2022-38474: Recording notification not shown when microphone was recording on Android (Bug 1719511) [tor-browser]
Bug 41302: YEC 2022 Takeover for Android Stable [tor-browser]
Bug 41312: Backport Firefox 105 Android security fixes to 102.3-based Tor Browser [tor-browser]
Bug 41314: Add YEC 2022 strings to torbutton and fenix [tor-browser]

Build System
Android

The full changelog since Tor Browser 11.0.15 is:

• All Platforms
  • Update OpenSSL to 1.1.1q
• Windows + OS X + Linux
  • Update Firefox to 91.11.0esr
  • Update Tor-Launcher to 0.2.37
  • Update Translations
  • Bug tor-browser#11698: Incorporate Tor Browser Manual pages into Tor Browser
  • Bug tor-browser#19850: Disable Plaintext HTTP Clearnet Connections
    • Bug tor-browser#30589: Allowed fonts to render a bunch of missing scripts
  • Bug tor-browser#40458: Implement about:rulesets https-everywhere replacement
  • Bug tor-browser-build#40527: Remove https-everywhere from tor-browser alpha desktop
  • Bug tor-browser#40562: Reorganize patchset
  • Bug tor-browser#40598: Remove legacy settings read from TorSettings module
  • Bug tor-browser#40645: Migrate Moat APIs to Moat.jsm module
  • Bug tor-browser#40684: Misc UI bug fixes
  • Bug tor-browser#40773: Update the about:torconnect frontend page to match additional UI flows
  • Bug tor-browser#40774: Update about: preferences page to match new UI designs
  • Bug tor-browser#40775: about:ion should not be labeled as a Tor Browser page
  • Bug tor-browser#40793: moved Tor configuration options from old-configure.in to moz.configure
  • Bug tor-browser#40825: Redirect HTTPS-Only error page when not connected
  • Bug tor-browser#40912: Hide screenshots menu since we don't support it
  • Bug tor-browser#40916: Remove the browser.download.panel.shown preference
  • Bug tor-browser#40923: Consume country code to improve error report
  • Bug tor-browser#40966: Render emojis in bridgemoji with SVG files, and added emojii descriptions
  • Bug tor-browser#41011: Make sure the Tor Connection status is shown only in about: preferences#connection
  • Bug tor-browser#41023: Update manual URLs
  • Bug tor-browser#41035: OnionAliasService should use threadsafe ISupports
  • Bug tor-browser#41036: Add a preference to disable Onion Aliases
  • Bug tor-browser#41037: Fixed the connection preferences on the onboarding
  • Bug tor-browser#41039: Set 'startHidden' flag on tor process in tor-launcher
• OS X
  • Bug tor-browser#40797: font-family: monospace renders incorrectly on macOS
  • Bug tor-browser#41004: Bundled fonts are not picked up on macOS
• Linux
  • Bug tor-browser#41015: Add --name parameter to correctly setup WM_CLASS when running as native Wayland client
  • Bug tor-browser#41043: Hardcode the UI font on Linux
• Android
  • Update Fenix to 99.0.0b3
• Build System
  • All Platforms
    • Bug tor-browser-build#40288: Bump mmdebstrap version to 0.8.6
    • Bug tor-browser-build#40426: Update Ubuntu base image to 22.04
    • Bug tor-browser-build#40519: Add Alexis' latest PGP key to https-everywhere key ring
  • Android
    • Update Go to 1.18.3
    • Bug tor-browser-build#40433: Bump LLVM to 13.0.1 for android builds
    • Bug tor-browser-build#40470: Fix zlib build issue for android
    • Bug tor-browser-build#40485: Resolve Android reproducibility issues
  • Windows + OS X + Linux
    • Bug tor-browser-build#34451: Include Tor Browser Manual in packages during build
    • Bug tor-browser-build#40525: Update the mozconfig for tor-browser-91.9-11.5-2

Tor Browser 11.0.15 - June 19 2022

* All Platforms
* Update Tor to 0.4.7.8

The full changelog since Tor Browser 11.0.13 is:

• All Platforms
  • Updated NoScript to 11.4.6
  • Bug tor-browser-build#40474: Bump version of pion/webrtc to v3.1.41
• Windows + OS X + Linux
  • Update Firefox to 91.10.0esr
• Build System
  • All Platforms
    • Update Go to 1.17.11
    • Bug tor-browser-build#40511: Changlog in stable is missing 11.5ax stanzas

• applications
• releases

The full changelog since Tor Browser 11.0.12 is:

• Android
  • Bug fenix#40212: Tor Browser crashing on launch
• All Platforms
  • Update Tor to 0.4.7.7
  • Bug tor-browser#40967: Integrate Mozilla fix for Bug 1770137
  • Bug tor-browser#40968: Integrate Mozilla fix for Bug 1770048
• Build System
  • All Platforms
    • Update Go to 1.17.10
    • Bug tor-browser-build#40319: Add build tag to downloads.json
    • Bug tor-browser-build#40486: Add tools/signing/do-all-signing script, and other signing scripts improvements

The full changelog since Tor Browser 11.0.10 is:

• Windows + OS X + Linux
  • Update Firefox to 91.9.0esr
  • Update NoScript to 11.4.5
  • Bug tor-browser#21484: Remove or hide "What's New" link from About dialog
  • Bug tor-browser#34366: The onion-location mechanism does not redirect to full URL
  • Bug tor-browser-build#40482: Remove smallerrichard builtin bridge
• Build System
  • Windows + OS X + Linux
    • Update Go to 1.17.9

The full changelog since Tor Browser 11.0.9 is:

• Windows + OS X + Linux
  • Update Firefox to 91.8.0esr
  • Update NoScript to 11.4.3
  • Bug tor-browser#14939: Support ipv6 address in Tor Circuit Display
  • Bug tor-browser-build#40469: Update zlib to 1.2.12 (CVE-2018-25032)
  • Bug tor-browser#40718: Application Menu items should be sentence case
  • Bug tor-browser#40725: about:torconnect missing identity block content on TB11
  • Bug tor-browser#40776: Capitalize the "T" in "Tor" in application menu
  • Bug tor-browser#40862: Backport 1760674

The full changelog since Tor Browser 11.0.7 is:

• Windows + OS X + Linux
  • Bug tor-browser#40802: Client Auth dialog is broken in Tor Browser 11.0.6, works in 11.0.4
  • Bug tor-browser#40831: Upgrade to OpenSSL 1.1.1n
  • Bug tor-browser#40830: cherry-pick fix for bugzilla 1758156
  • Build System
  • Windows + OS X + Linux
    • Update Go to 1.17.8
    • Bug tor-browser-build#40422: Remove projects/ed25519
    • Bug tor-browser-build#40431: added license info for edwards25519 and edwards25519-extra
    • Bug tor-browser-build#40436: Use intermediate files for default bridge lines
    • Bug tor-browser-build#40438: Use the same list of bridges for desktop and android

The full changelog since Tor Browser 11.0.6 is:

• Windows + OS X + Linux
  • Update Tor to 0.4.6.10
  • Update NoScript to 11.3.7
  • Bug tor-browser-build#40435: Remove default bridge "deusexmachina"
  • Bug tor-browser-build#40440: Bump version of snowflake to include PT LOG events
  • Bug tor-browser#40684: Misc UI bugs in 11.0a10
  • Bug tor-browser#40687: Update message bar styling in aboutreferences#tor
  • Bug tor-browser#40691: Make quickstart checkbox grey when "off" on about:torconnect
  • Bug tor-browser#40714: Next button closes "How do circuits work?" onboarding tour
  • Bug tor-browser#40824: Drop 16439 Patch (android screencasting disable)
  • Bug tor-browser#40826: Cherry-pick fixes for Mozilla bug 1758062
• Build System
  • Windows + OS X + Linux
    • Update Go to 1.16.14
    • Bug tor-browser-build#40441: Add Austin as valid git-tag signer

The full changelog since Tor Browser 11.0.4 is:

• Windows, macOS, & Linux
  • Update Firefox to 91.6.0esr
  • Update NoScript to 11.2.16
  • Update Tor Launcher to 0.2.33
  • Bug tor-browser#40795: Revert Deutsche Welle v2 redirect
  • Bug tor-browser#40679: Missing features on first-time launch in esr91
  • Added extensions.torlauncher.launch_delay debug pref to simulate slow tor daemon launch
• Build System
  • Windows + OS X + Linux + Android
    • Update Go to 1.16.13
    • Bug tor-browser-build#40413: Removed lsb_release from Python build script
    • Bug tor-browser-build#40416: Pick up obfsproxy 0.0.12