Download Tor Browser 13.0.7

Version 13.0.7 of Tor Browser has been released. Tor stands for The Onion Router and is a network that can be used to surf the Internet fairly anonymously. All users' TCP traffic is routed through different Tor routers, after which it is virtually impossible for the recipient to find out who the original sender was. That information is still present within the Tor network, so that answers, of course also via the system of routers, ultimately arrive at the right place. The changelog for this release can be found below.

New Release: Tor Browser 13.0.7 (Desktop)

This version includes important security updates to Firefox. This release updates Firefox to 115.6.0esr, tor to 0.4.8.10 and NoScript to 11.4.29. In addition, it also includes some bug fixes. The full changelog since Tor Browser 13.0.6 is:

All Platforms

• Updated to 0.4.8.10
• Updated NoScript to 11.4.29
• Bug tor browser#42042:view source:http://ip-address does not work because of HTTPS Only
• Bug tor browser#42261: Update the icon of Startpage search engine
• Bug tor browser#42330: Rebase stable browsers to 115.6.0esr
• Bug tor browser#42334: Keep returning ERROR_ONION_WITH_SELF_SIGNED_CERT only for .onion sites whose cert throws ERROR_UNKNOWN_ISSUER
• Windows + macOS + Linux
  • Updated Firefox to 115.6.0esr
  • Bug tor browser#42283: Tor Browser shouldn't ship blockchair by default

Android

• Updated GekcoView to 115.6.0esr
• Bug tor browser#42285: Update the gitignore to use the correct paths for tor stuff
• Bug tor browser#42339: Backport Android security fixes from Firefox 121 to 115.6 – based Tor Browser

BuildSystem

• All Platforms
  • Update Go to 1.21.5
  • Bug tor-browser-build#40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be
  • Bug tor-browser-build#41026: Do not use ~ when uploading the signed hashes
  • Bug tor-browser-build#41036: Remove go_vendor-lyrebird-nightly makefile target, and rename go_vendor-$project-alpha makefile targets to go_vendor-$project
  • Bug tor-browser-build#41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them
• macOS
  • Bug tor-browser-build#40990: Remove old macos signing scripts