Tor Browser 13.5a5 is now available from the Tor Browser download page and also from our distribution directory.

This version includes important security updates to Firefox.

We would like to thank the folowing community members for their contributions this release:

• ppisar for their fixup to rbm#40072

We would also like to bring attention to a work-in-progress merge request from community members NoisyCoil, tor-browser-build!920. This work is the first step toward potentially supporting aarch64 Linux builds of Tor Browser in an official capacity. If you've any interest in the work behind cross-compiled Tor Browser builds, this MR is the one keep an eye on!

Thank you both for your contributions! If you would like to contribute, our contributor guide can be found here.

Native Android Connect Assist UX

As discussed in the 13.5a3 and 13.5a4 release posts, we have been working on bringing the connect-assist feature from Desktop to Android. The work continues, and we now have an initial implementation of this feature exposed via native Android interface.

You can access the native Android interface by navigating to Settings > Tor Network and selecting Enable beta connection features. From there, select Native Android UI. The HTML UI option is still available for debugging purposes, but will be removed once this feature stabilises in 13.5.

Please give this feature a go! The native UI is not yet feature complete but regardless, if you run into problems please open an issue on our gitlab or on our forum.

Send us your feedback

If you find a bug or have a suggestion for how we could improve this release, please let us know.

Full changelog

The full changelog since Tor Browser 13.5a4 is:

• All Platforms
  • Updated OpenSSL to 3.0.13
  • Updated Snowflake to 2.9.0
  • Bug tor-browser#42376: The placeholder of datetime inputs keeps being localized when spoof English is on
  • Bug tor-browser#42378: spoof english + htmlform <details> can leak app language
  • Bug tor-browser#42390: Betterboxing: make the decorator border disappear when the corners are flat
  • Bug tor-browser#42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one
  • Bug tor-browser#42412: Rebase Tor Browser Alpha onto 115.8.0esr
  • Bug tor-browser-build#41079: Bump version of Snowflake to v2.9.0
• Windows + macOS + Linux
  • Updated Firefox to 115.8.0esr
  • Bug tor-browser#41814: Change "vanilla bridge:" to "Tor bridge:" in bridge cards
  • Bug tor-browser#42270: Implement design changes to QR code dialog
  • Bug tor-browser#42389: Betterboxing: gradient is never shown
  • Bug tor-browser#42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places)
  • Bug tor-browser#42414: Show ellipsis when the tor bridge address overflows
  • Bug tor-browser#42415: Improve focus styling for forced focus in bridge settings
  • Bug tor-browser#42421: Remove bridge option should be hidden for Lox bridges
  • Bug tor-browser#42423: Move temporary Lox Fluent strings to new file
  • Bug tor-browser#42425: Improve accessibility of the bridge emoji cells
• Android
  • Updated GeckoView to 115.8.0esr
  • Bug tor-browser#42253: Remove "New private tab" action and widget
  • Bug tor-browser#42402: Remove Android YEC strings
  • Bug tor-browser#42407: TTP-03-010 WP3: Potential phishing
  • Bug tor-browser#42416: Backport Android security fixes from Firefox 123
• macOS
  • Bug tor-browser-build#40569: Create build-specific installer for macOS
• Build System
  • All Platforms
    • Updated Go to 1.20.14 and 1.21.7
    • Bug tor-browser-build#41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml
    • Bug tor-browser-build#41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes
    • Bug rbm#40068: Switch from IO::CaptureOutput to Capture::Tiny
    • Bug rbm#40069: Make stdout and stderr utf8
    • Bug rbm#40071: Add an option to create zip files using 7z
    • Bug rbm#40072: Move capture_exec to a separate module
  • Windows
    • Bug tor-browser-build#41076: Include the ShellLink plugin in NSIS
  • macOS
    • Bug tor-browser-build#41084: $app_bundle is missing the final .app in projects/firefox/build
  • Android
    • Bug tor-browser#42399: Re-enable minimization of JS for Android
    • Bug tor-browser-build#41080: Re-pack omni.ja with 7-zip on Android
    • Bug tor-browser-build#41092: Use an uncompressed omni.ja to improve final apk compression.
    • Bug tor-browser-build#41093: Sign unsigned APKs instead of the QA-signed ones