New Release: Tor Browser Version 10.0a2 and 9.51
On June 30, the Tor Project announced updates to both the alpha and stable releases of the Tor Browser. The new releases include fixes for vulnerabilities discovered in FireFox (through an update to FireFox 68.10.0esr) as well as NoScript bug fixes (through an update to NoScript 11.0.32).
Complete changelog for 10.0a2 here and 9.51 here.
Both releases include minor tweaks to Onion Location links and settings. Onion Location is an easy way for site operators to advertise their onion service to visitors. Examples of sites with the Onion Location header include dark.fail (darkfailllnkf4vf.onion), the cryptocurrency exchange Xchange.me (xchangen24yn24b6.onion), njal.la (njalladnspotetti.onion), darkweblink (dwlonion3o3pjqsl.onion), ProPublica (p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion) and this site (this list is not meant to be inclusive and in the coming days other sites with something to gain from advertising their onion services will likely implement Onion Location as well).
The mainstream media sites with their own onion services are among those that could benefit from advertising their onion address in such a way. The discoverability of onions has always been an issue. Ever tried finding the onion address of the New York Times when visiting nytimes.com.
Tor Browser 10.0a2 Experimental/alpha
Tor Browser 10.0a2 is now available from the Tor Browser Alpha download page and also from our distribution directory.
Note: This is an alpha release, an experimental version for users who want to help us test new features. For everyone else, we recommend downloading the latest stable release instead.
This release updates Firefox to 68.10.0esr, Tor to 0.4.4.1-alpha, and NoScript 11.0.32.
This release also includes important security updates to Firefox.
The MacOS installer (.dmg) is now code signed using a different procedure. Please report any issues you encounter with this version.
The full changelog since Tor Browser 10.0a1 is:
- All Platforms
- Update Firefox to 68.10.0esr
- Update NoScript to 11.0.32
- Update Tor to 0.4.4.1-alpha
- Translations update
- Bug 34209: about:tor and about:tbupdate fail to load in debug build
- Bug 34250: Only listen to ‘started’ in noscript-control.js
- Bug 34383: Accept request if GetHost() in mixed content blocking check fails
- Windows + OS X + Linux
- Bug 34361: “Prioritize .onion sites when known” appears under General
- Bug 34362: Improve Onion Service Authentication prompt
- Bug 34369: Fix learn more link in Onion Auth prompt
- Bug 34379: Fix learn more for Onion-Location
- Android
- Bug 34372: Disable GeckoNetworkManager
Tor Browser 9.51
https://blog.torproject.org/new-release-tor-browser-951
Tor Browser 9.5.1 is now available from the Tor Browser download page and also from our distribution directory.
This release updates Firefox to 68.10.0esr and NoScript to 11.0.32.
Also, this release features important security updates to Firefox.
The Windows installer is now code signed with a new Authenticode certificate. Please report any issues you encounter with this version.
The full changelog since Tor Browser 9.5 is:
- All Platforms
- Update Firefox to 68.10.0esr
- Update NoScript to 11.0.32
- Translations update
- Bug 40009: Improve tor’s client auth stability
- Windows + OS X + Linux
- Bug 34361: “Prioritize .onion sites when known” appears under General
- Bug 34362: Improve Onion Service Authentication prompt
- Bug 34369: Fix learn more link in Onion Auth prompt
- Bug 34379: Fix learn more for Onion-Location
- Bug 34347: The Tor Network part on the onboarding is not new anymore