TOR Updates

Topic

New Reply

Tor Browser 11.5.4 all platforms

Release Notes

“Tor Browser 11.5.4 backports the following security updates from Firefox ESR 102.3 to to Firefox ESR 91.13 on Windows, macOS and Linux:

CVE-2022-40959
CVE-2022-40960
CVE-2022-40958
CVE-2022-40956
CVE-2022-40962
Tor Browser 11.5.4 updates GeckoView on Android to 102.3.0esr. We also backport the following Android-specific security updates from Firefox 104 and 105:

CVE-2022-36317
CVE-2022-38474
CVE-2022-40961”

Reply | Quote

Replies

Tor Browser 11.5.7

Windows + macOS + Linux

Bug tor-browser#41413: Backup intl.locale.requested in 11.5.x

Reply | Quote

Tor Browser 11.5.8 all platforms

Release notes

Tor Browser 11.5.8 backports the following security updates from Firefox ESR 102.5 to to Firefox ESR 91.13 on Windows, macOS and Linux:

CVE-2022-43680: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
CVE-2022-45403: Service Workers might have learned size of cross-origin media files
CVE-2022-45404: Fullscreen notification bypass
CVE-2022-45405: Use-after-free in InputStream implementation
CVE-2022-45406: Use-after-free of a JavaScript Realm
CVE-2022-45408: Fullscreen notification bypass via windowName
CVE-2022-45409: Use-after-free in Garbage Collection
CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy
CVE-2022-45411: Cross-Site Tracing was possible via non-standard override headers
CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers
CVE-2022-45416: Keystroke Side-Channel Leakage
CVE-2022-45420: Iframe contents could be rendered outside the iframe
CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5

Tor Browser 11.5.8 updates GeckoView on Android to Firefox ESR 102.5 and includes important security updates. Tor Browser 11.5.8 backports the following security updates from Firefox 107 to Firefox ESR 102.5 on Android:

CVE-2022-45413: SameSite=Strict cookies could have been sent cross-site via intent URLs….

Reply | Quote

Tor Browser 12.0

Release notes

Upgraded to Extended Support (Firefox) Release 102
Multi-locale support for desktop
Native Apple Silicon support
HTTPS-Only by default for Android
Prioritize .onion sites for Android…

Full changelog…

Reply | Quote

Tor Browser 12.0.1

Release Notes

Reply | Quote

Tor Browser 12.0.2

Release notes

Reply | Quote

Tor Browser 12.0.4

Release notes

Reply | Quote