New Tor Browser Bundles with Firefox 17.0.9esr

The stable and beta Tor Browser Bundles have been updated with Firefox 17.0.9esr. This release of Firefox has many important security updates and all users are strongly encouraged to upgrade.

The beta version includes an updated HTTPS Everywhere which fixes the problems many users were having with the google.com OCSP meltdown.

https://www.torproject.org/projects/torbrowser.html.en#downloads

Tor Browser Bundle (2.3.25-13)

Update Firefox to 17.0.9esr
https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#…
Update HTTPS Everywhere to 3.4.1
Update NoScript to 2.6.7.1
Remove extraneous libevent libraries (closes: #9727)
Enable GCC hardening for Tor
Firefox patch changes:

- Disable filtered results in Startpage omnibox (closes: #8839)

Tor Browser Bundle (2.4.17-beta-2)

Update Firefox to 17.0.9esr
https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#…
Update LibPNG to 1.6.3
Update HTTPS Everywhere to 4.0development.12
Update NoScript to 2.6.7.1
Remove extraneous libevent libraries (closes: #9727)
Enable GCC hardening for Tor
Firefox patch changes:

- Disable filtered results in Startpage omnibox (closes: #8839)

Add missing geoip file to Linux bundle

(entry missing from regular changelog)

I'm running the most current

I'm running the most current version of the browser, when interacting with one particular website tour browser keeps becoming unresponsive. it only happens at this website: topix.com it happens even if tour is the only application running. I'm running under Windows 7 Home Premium. Any suggestions?

ERROR: Compiled with an old

ERROR: Compiled with an old OpenSSL Version 1.0.0k
I am using Version 1.0.1e of OpenSSL

Error? What gives you the

Error? What gives you the error?

And you're asking this on a TBB anounce thread, so I assume it's TBB. So what do you mean "I am using"?

Hi guys sorry for even

Hi guys sorry for even having to ask this. but i had no problem updating from 17.0.7 to 17.0.8 but i just cant seem to get the next 1. even when i go to TorBrowser and check for updates it in the help section it saysi am up to date but it still says 17.0.8.
any help would be great thanks

Don't "check for updates".

Don't "check for updates". Go download the new one and use that.

I am sorry if I am

I am sorry if I am intruding. There is going to be a beta version of Stack Exchange questions and answers site about Tor. I am one of community supporters. If you are interested and think you can contribute to the site by asking questions or answering them you can subscibe after following this link: [geshifilter-code]http://area51.stackexchange.com/proposals/56447/tor?referrer=s1OII2Y7Wv…] Thank you, pabouk

Some websites are still

Some websites are still unresponsive, is this due to botnet?

Thanks, guys

Is the Tor 3.0 alpha version

Is the Tor 3.0 alpha version going to be updated to this?

Real soon now, I hear.

Hi, probably half off-topic

Hi,
probably half off-topic but Tails have no simple open request.

With old Tails0.20 on .onion-sites i see in Vidalia a lot of 4-circles connections.
With 0.20.1 only the normal 3-circles.
Whats the difference?

Second, on lower memory PCs with new Tails0.20.1 the DVD-ROM/Writer(TAILS on DVD) is more often spinning(reading ?) as with Tails0.20.Therefore new TAILS -sometimes,e.g. Browser functions- reacts a little bit slower.The cause for this is the new Tor version(0.2.4.17-rc)? Tor0.2.4.17-rc needs more memory?

Thanks for reading.And answering(-:

the changelog i think it's

the changelog i think it's bad write i download tor browser on monday and noscript was update in 2.6.8.1

Whys is pdfjs.disabled set

Whys is pdfjs.disabled set to be true?

Good question!

Anyone having problem with

Anyone having problem with using webmail?
I often get a message saying "Our security have detected a supsicious use of your account - chnge password immidiately or with i.e. hotmail - verify your account to continue.
I assume that the proxy is the main problem? or is it du to hackers on some of the end-nodes?
Its annoying to change mailprovider og password so often?
Another issue:
When using i.e Gmx.com's webmail I very often is disconnected and the page says that the connection is lost?
Any suggestions?

And not to forget: Tor is an awesome step into allowing people some privacy on the net - Thanx :-)

My understanding is that

My understanding is that it's mostly the website getting a list of "scary" IP addresses from somewhere and hassling you if you show up from one.

When testing Tor proxy

When testing Tor proxy settings (default settings) via the Tor button I keep getting the following errors, mostly the first error:

Local HTTP Proxy is unreachable. Is Polipo running properly?

Tor proxy test:TorDNSEL failure. Results unknown

Tor proxy test: HTTP error for check.torproject.org:500

What could be causing this?.

Also on startup https://check.torproject.org/?lang=en-US&small=1&uptodate=1 fails to load, I presume it's just overloaded or down though.

Using Tor Browser Bundle for Windows Version 2.3.25-13

Why http referer is not

Why http referer is not blocked by default in TBB?

http://www.whatsmyuseragent.com/

I have installed Tor Browser

I have installed Tor Browser Bundle (2.3.25-13) in kubuntu and Vidalia gives me error "can not initiate firefox".
I test with the 2.4.17 beta and the same.
I have had to go back to the 2.3.25.12 that goes me well,without problems.
Notes:
1) I Delete all the 12 and put the 13 complete. (tor-browser_es-ES)
2) In /App/tor It is not executable,is library 1,7 Mb
Sorry By my badly english.

Sounds like you should try

Sounds like you should try TBB 3.x:
https://blog.torproject.org/category/tags/tbb-30

I had a very similar

I had a very similar experience to "ATTENTION! ALERT!" (9/21, above). I downloaded 2.4.17-beta-2 and NIS (Norton Internet Security 2012) immediately quarantined it with a WS.Reputation.1. Here are the relevant details from the quarantine history:
____________________________
On computers as of 10/20/2013 at 11:20:28 AM
Last Used 10/20/2013 at 11:13:50 AM
Startup Item No
Launched No
____________________________
____________________________
Few Users
Hundreds of users in the Norton Community have used this file.
____________________________
New
This file was released 29 days ago.
____________________________
Medium
This file risk is medium.
____________________________
Threat Details
Threat type: Insight Network Threat. There are many indications that this file is untrustworthy and therefore not safe
____________________________

Source File:
tor-browser-2.4.17-beta-2_en-us.exe
____________________________

[Me again:] I restored it from quarantine, but it begs the question: Norton had no problem with beta-1, what's up with beta-2? The signature was valid, by the way.

See the rest of the thread

See the rest of the thread above. The only problem it had with the new version was simply that -- it was new.

What crummy software this norton stuff is.

vidalia-relay-bundle-0.2.3.25

vidalia-relay-bundle-0.2.3.25-0.2.21-2.exe -- Today, the downloaded file does not have a valid signature.

"gpg: BAD signature from "Erinn Clark "

Using https://www.virustotal.com/, TrendMicro-HouseCall identifies this executable as containing "TROJ_GEN.F47V0801."

Can I get a confirmation on the signature and a second opinion?