New packages with OpenSSL updates

The Tor Browser Bundles and other packages have been updated to OpenSSL 1.0.0f and 0.9.8s. All users are encouraged to update.

https://www.torproject.org/download

Tor Browser Bundle (2.2.35-4)

  • Update OpenSSL to 1.0.0f
  • Update NoScript to 2.2.5

Thanks for updating this so quickly to match the OpenSSL vuln.

Since the update, while using the new version of TBB/Linux, I notice it doesn't mention the OpenSSL version anymore, is this a bug or a feature? It used to mention in the Vidalia logs the OpenSSL version upon start.

BTW, why does my torrc have this entry:

ReachableAddresses reject *:*

After I've selected the option to use ports 40,443 only in Vidalia? It connects to Tor and there are no errors, why does it add that *:* line and continue to work, especially when I'm not using bridges? I take the *:* to mean reject all IP traffic, but it's working... I'm at a loss to explain this.

When would the tbb be bundled along with the latest Aurora?
I've seen lots of new bug fixes included.

Why aren't you approving any comments on the blog posts??? This is becoming VERY frustrating!!!!

Thank you very much for the informative post

Hi! I need help about Freedom Hosting, I don't entry in my .onion site , I entered my username with different passwords (which may be placed on my account)
I have introduced Captchas:
8MR7UC84 / DGA8VNVT / ZAPAMV3Z ....
40 captchas in 1 hour and 60 captchas...
If someone wants to invite me back to Freedom Hosting or solve the problem
Will be grateful

Why do you not have any information anywhere on how to UPGRADE a browser bundle installation?

If you make it difficult to move settings/bookmarks over, people will hesitate to upgrade...

Ditto this comment.

The problem with simply replacing the 'profile' folder (sub-folder of 'data') with one's old one (containing all personal customizations) is that this also replaces any add-ons that have been updated with the outdated versions.

Are you aware that
https://check.torproject.org/?lang=en-US&small=1&uptodate=1
is not working?, it just times out.

I noticed the same. Thought it was a bug in the config, but couldn't figure it out. Especially since it happened straight out of the box both for the windows 32-bit version and a linux 64-version at a different box.

I am finding that the Aurora browser is whiting out and not responding after using the tor button to change identity, I noticed this on earlier versions as well, it does this quite often, although changing identity via the Vidalia control panel seems to work fine, I'm not sure what the difference is doing it that way?.

Other problem which has been going on for a long time now is that after going two clicks deep in to a website the back button in the browser fails to work anymore when you click on it, the only way around this is to right click on the back arrow then choose the page that you want to go back to, however if you choose the last page that you were on this also fails to work, but it will happily take you back to the 1st page that you were on!.. odd.

The only addon that I have installed other than those that came with the tor browser bundle is refcontrol.

The version available on the torproject website is still the older 2.2.35-3.

Another issue: when opening the tor browser bundle, aurora (firefox) doesn't start up. Only vidalia starts up but Aurora browser doesn't open as it should. I know my friend is also having this issue.

I would also like to make a request that you allow for download of earlier versions of tor browser bundle

I wish there were more stable alternatives available to Tor for anonymous browsing. Tor is like LINUX and I'm looking for something like OpenBSD in terms of stability and security

Tor Browser Bundle (2.2.35-4) is not working. Vidalia opens, but Aurora browser does not! When I hit "Stop Tor" from Vidalia Control Panel then Aurora "wakes up" saying that there is still some script running and when I cancel that script running, Aurora opens, but is completely blank.
https://check.torproject.org/?lang=en-US&small=1&uptodate=1 is not loading either.

the tor browser is opening soooo slow, vidalia quickly establishing connection but not same for tbb-firefox.exe. waiting at least 1-2 minutes

Don't you TOR devs realize we need a forums?? So many people have so many questions, the blog posts are being flooded and nobody is responding. IT also takes several days for comments to just get approved and appear on the blog, then another several days to get a response (if a response is received at all..). Please install a forum within a few days!

latest version tor-browser-2.2.35-4_en-US.exe still has the missing min/max/close windows buttons. This is a fairly fundamental issue is it not? Last version to work was tor-browser-2.2.35-1_en-US which is what I just went back to. This needs to be fixed in the next release, a lot of people are complaining about this issue.

Is there a reason why the new version of TAILS has not been announced on this blog? (as past TAILS releases have been)

According to
https://tails.boum.org
version 0.10 of TAILS was released on January 4th.

Also note that the boum.org domain now has an SSL cert from "GANDI SAS", which was recognized by my Firefox 9.0.1 (unlike the previous Root CA cert).

To fix the min/max/close problem:

1) right click on the gray background on the tabs or buttons area of the Aurora window, just to one side or the other of the cute little green onion button is convenient for me

2) a dialog box popup appears

3) in the dialog box, left click next to "Menu Bar"

4) your min/max/close buttons reappear

Ta-da!

But..... you're then stuck with the menu. The non-TOR version of Firefox doesn't have this problem, and earlier versions of the TOR bundle also didn't suffer from this. It needs to be fixed, it really is quite serious as cosmetic bugs go.

The latest version of the Vidalia/Aurora package (2.2.35-4). Reports that "Vidiala exited abnormally. Exit code:127" Is there something I am doing wrong???

Download the 64-bit (beta) version instead, I used to get the same error, but now I don't

tried in openbsd 5.0
downloaded 32 bit version, extracted and got

Abort trap
Vidalia exited abnormally. Exit code: 134

???? Googled exit code 134 found nothing

Some problem here.. any one knows a solution?

I am loving the Tor browser bundle and use it daily.

If I may make two small suggestions, very easy to incorporate:

* Support the DuckDuckGo official hidden service as one of the search engines, ideally the default search engine (better privacy policy than Google, and without the hassles of using Google via Tor) - http://3g2upl4pq6kufc4m.onion/

* Include OnionBookmark in the bookmarks bar by default to help people keep their bookmarks inside of the onion and not anywhere on their computer. http://x7yxqg5v4j6yzhti.onion

For me, OnionBookmark isn't loading: Unable to connect

Firefox can't establish a connection to the server at x7yxqg5v4j6yzhti.onion.

Seems URL (in Tor's hidden service, is a URL still called a URL?) is down? Anyone know of a new link..?

I do agree, however, that these two would be good. I find that DuckDuckGo is more faster then Scroogle (for some reason, I dunno..), anyone know if DuckDuckGo also uses Google search index, as Scroogle etc? Thx,

Ok, so it seems OnionBookmark was down for a bit, but is back up now.

Clicked on my Tor shortcut today and after it started up a dialog box popped up which said Firefox is now running in safe mode.
Did I accidentally hit a shortcut key on my keyboard which did this?.

Syndicate content Syndicate content