Download Tor Browser 12.0.2

Version 12.0.2 of Tor Browser has been released. Tor stands for The Onion Router and is a network that can be used to surf the Internet fairly anonymously. All users’ TCP traffic is routed through different Tor routers, after which it is virtually impossible for the recipient to find out who the original sender was. That information is still present within the Tor network, so that answers, of course also via the system of routers, ultimately arrive at the right place. Version 12 is based on Firefox ESR 102, while version 11 was still ESR 91. The release notes for this release look like this:

Tor Browser 12.0.2

This release updates Firefox to 102.7, including bug fixes, stability improvements and important security updates. There were no Android-specific security updates to backport from the Firefox 109 release. We use this opportunity to update various components of Tor Browser as well:

• tor 0.4.7.13
• NoScript 11.4.14
• go 1.19.5

We would like to thank user ryotak for identifying a script blocking bypass on local file:// resources. The full changelog since Tor Browser 12.0.1 is:

All Platforms

• Updated to 0.4.7.13
• Updated NoScript to 11.4.14
• Bug tor browser#40565: do something with security.tls.version.enable-deprecated
• Bug tor-browser-build#40713: Use the new tor-browser l10n branch in Firefox
• Bug tor-browser-build#40727: Update list of Snowflake STUN servers in default bridge line
• Bug tor browser#41506: Remove TrustCor root certificates
• Bug tor browser#41525: Drop locales from torbutton, since we will inject them into tor-browser-build

Windows + macOS + Linux

• Updated Firefox to 102.7esr
• Bug tor browser#26504: Browser version in about:preferences showing the Firefox ESR version
• Bug tor browser#32308: Stop inner letterbox jiggling as border is dragged
• Bug tor browser#41375: Clean unused strings
• Bug tor browser#41393: about:tbupdate semantic and accessibility problems
• Bug tor browser#41522: Backport torbutton -> tor-browser migration to 12.0 series
• Bug tor browser#41524: about:tbupdate needs UTF-8
• Bug tor browser#41539: Crypto warning weaknesses
• Bug tor browser#41549:tor freeze when receiving to many http proxy requests on socks port
• Bug tor browser#41561: Maximize warning is broken (regression)
• Bug tor browser#41563: Old placeholders used in TorStrings.jsm

macOS

• Bug tor-browser-build#40716: Unable to update to 12.0.1 on Apple Silicon-based Mac

Android

• Updated GeckoView to 102.7esr
• Bug tor browser#41571: Backport Android-specific Firefox 109 to ESR 102.7-based Tor Browser

BuildSystem

• All Platforms
  • Updated Go to 1.19.5
  • Bug tor-browser-build#40735: Add command to list which translation components need to be updated
  • Bug tor-browser-build#40739: tor-expert-bundle should include ClientTransportPlugin torrc lines for each pluggable transport
• Windows + macOS + Linux
  • Bug tor-browser-build#40734: Backport the translation project
• macOS
  • Bug tor-browser-build#40706: macos-signer-stapler should wait for user interaction before attempting stapling