Tor Browser 13.0a6 is now available from the Tor Browser download page and also from our distribution directory.

This release backports important security fixes from Firefox 115.3.1. There were no Android-specific security backports from Firefox 115.3.0.

Major Changes

This is our sixth alpha release in the 13.0 series which represents a transition from Firefox 102-esr to Firefox 115-esr. It is also our first release-candidate build for 13.0 stable. If you find any issues, please report them on our gitlab or on the Tor Project forum.

We have completed our annual esr transition audit, and the final reports should be available in our tor-browser-spec repository in the audits directory. All of the interesting upstream patches have either been disabled or found to not be a problem for us on closer inspection.

Build Output Naming Updates

As a reminder from the 13.0a3 release post, we have made the naming scheme for all of our build outputs mutually consistent. If you are a downstream packager or in some other way download Tor Browser artifacts in scripts or automation, you will have a bit more work to do beyond bumping the version number once the 13.0 alpha stabilizes. All of our current build outputs can be found in the distribution directory

Full changelog

We would like to thank volunteer contributor guest475646844 for their fix for tor-browser#41165. If you would like to contribute, our issue tracker can be found here.

The full changelog since Tor Browser 13.0a5 is:

• All Platforms
  • Updated tor to 0.4.8.7
  • Updated Translations
  • Bug tor-browser#42139: Backport security fixes from Firefox 115.3.1 to 115.3.0
• Windows + macOS + Linux
  • Bug tor-browser#40899: Fix all of our usage of app.support.baseURL
  • Bug tor-browser#41165: Crash with debug assertions enabled
  • Bug tor-browser#41910: Support link regression in 115.1.0esr
  • Bug tor-browser#42100: Connect Assist dropdown text not centered
  • Bug tor-browser#42129: Disable the Tor restart prompt if shouldStartAndOwnTor is falses
  • Bug tor-browser#42131: Tor Browser 13.0a5 does not track circuits created before Tor Browser started
  • Bug tor-browser#42132: The new control port handling in Tor Browser 13 breaks a Tails security feature
• Windows
  • Bug tor-browser-build#40954: Implement Windows installer icons
  • Bug tor-browser#42087: Implement Windows application icons
• Android
  • Bug tor-browser#42023: TB13.0a2 android: remove FF what's new
  • Bug tor-browser#42114: Disable Allow sharing current tab URL from Android's Recents screen in private browsing mode
  • Bug tor-browser#42115: Enhanced Tracking Protection can still be enabled
  • Bug tor-browser#42133: Remove "Total Cookie Protection" popup
  • Bug tor-browser#42134: Remove Android icon shortcuts
• Build System
  • All Platforms
    • Bug tor-browser-build#40741: Update browser and tor-android-service projects to pull data from pt_config.json
    • Bug tor-browser-build#40957: Expired subkey warning on Tor Browser GPG verification
    • Bug tor-browser#42130: Add support for specifying the branch in tb-dev rebase-on-default
  • Android
    • Bug tor-browser-build#40963: Tor Browesr 13.0 torbrowser-testbuild-android* targets fail to build