Software-update: Tor Browser 12.0.2

Versie 12.0.2 van Tor Browser is uitgekomen. Tor staat voor The Onion Router en is een netwerk dat gebruikt kan worden om redelijk anoniem over internet te surfen. Al het tcp-verkeer van gebruikers wordt langs verschillende Tor-routers geleid, waarna het voor de ontvanger vrijwel niet meer mogelijk is om te achterhalen wie de oorspronkelijke verzender was. Binnen het Tor-netwerk is die informatie nog wel aanwezig, zodat antwoorden, uiteraard ook weer via het stelsel van routers, uiteindelijk weer op de juiste plek aankomen. Versie 12 is gebaseerd op Firefox ESR 102, waar dat bij versie 11 nog ESR 91 was. De releasenotes voor deze uitgave zien er als volgt uit:

Tor Browser 12.0.2

This release updates Firefox to 102.7, including bug fixes, stability improvements and important security updates. There were no Android-specific security updates to backport from the Firefox 109 release. We use this opportunity to update various components of Tor Browser as well:

• tor 0.4.7.13
• NoScript 11.4.14
• go 1.19.5

We would like to thank user ryotak for identifying a script blocking bypass on local file:// resources. The full changelog since Tor Browser 12.0.1 is:

All Platforms

• Updated tor to 0.4.7.13
• Updated NoScript to 11.4.14
• Bug tor-browser#40565: do something with security.tls.version.enable-deprecated
• Bug tor-browser-build#40713: Use the new tor-browser l10n branch in Firefox
• Bug tor-browser-build#40727: Update list of Snowflake STUN servers in default bridge line
• Bug tor-browser#41506: Remove TrustCor root certificates
• Bug tor-browser#41525: Drop locales from torbutton, since we will inject them in tor-browser-build

Windows + macOS + Linux

• Updated Firefox to 102.7esr
• Bug tor-browser#26504: Browser version in about:preferences showing the Firefox ESR version
• Bug tor-browser#32308: Stop inner letterbox jiggling as border is dragged
• Bug tor-browser#41375: Clean unused strings
• Bug tor-browser#41393: about:tbupdate semantic and accessibility problems
• Bug tor-browser#41522: Backport torbutton -> tor-browser migration to 12.0 series
• Bug tor-browser#41524: about:tbupdate needs UTF-8
• Bug tor-browser#41539: Crypto warning weaknesses
• Bug tor-browser#41549: tor freeze when receiving to many http proxy requests on socks port
• Bug tor-browser#41561: Maximize warning is broken (regression)
• Bug tor-browser#41563: Old placeholders used in TorStrings.jsm

macOS

• Bug tor-browser-build#40716: Unable to update to 12.0.1 on Apple Silicon-based Mac

Android

• Updated GeckoView to 102.7esr
• Bug tor-browser#41571: Backport Android-specific Firefox 109 to ESR 102.7-based Tor Browser

Build System

• All Platforms
  • Updated Go to 1.19.5
  • Bug tor-browser-build#40735: Add command to list which translation components need to be updated
  • Bug tor-browser-build#40739: tor-expert-bundle should include ClientTransportPlugin torrc lines for each pluggable transport
• Windows + macOS + Linux
  • Bug tor-browser-build#40734: Backport the translation project
• macOS
  • Bug tor-browser-build#40706: macos-signer-stapler should wait for user interaction before attempting stapling

Versienummer	12.0.2
Releasestatus	Final
Besturingssystemen	Windows 7, Android, Linux, macOS, Windows 8, Windows 10, Windows 11
Website	The Tor Project
Download	https://www.torproject.org/download/languages
Licentietype	GPL