Tor Browser 12.5.4 is now available from the Tor Browser download page and also from our distribution directory.

This release updates Firefox and GeckoView to 102.15.1esr and fixes CVE-2023-4863: Heap buffer overflow in libwebp

Send us your feedback

If you find a bug or have a suggestion for how we could improve this release, please let us know.

Full changelog

The full changelog since Tor Browser 12.5.3 is:

• All Platforms
  • Updated Translations
  • Updated OpenSSL to 1.1.1w
  • Bug tor-browser#42084: Race condition with language preferences may make spoof_english ineffective
  • Bug tor-browser#42090: Rebase release onto 102.15.1esr
• Windows + macOS + Linux
  • Updated Firefox to 102.15.1esr
• Android
  • Updated GeckoView to 102.15.1esr
• Build System
  • All Platforms
    • Updated Go to 1.20.8