New Release: Tor Browser 12.0.2

Tor Browser 12.0.2 is now available from the Tor Browser download page and also from our distribution directory.

This release updates Firefox to 102.7, including bug fixes, stability improvements and important security updates. There were no Android-specific security updates to backport from the Firefox 109 release.

We use this opportunity to update various components of Tor Browser as well:

• tor 0.4.7.13
• NoScript 11.4.14
• go 1.19.5

We would like to thank user ryotak for identifying a script blocking bypass on local file:// resources.

Send us your feedback

If you find a bug or have a suggestion for how we could improve this release, please let us know.

Full changelog

The full changelog since Tor Browser 12.0.1 is:

• All Platforms
  • Updated tor to 0.4.7.13
  • Updated NoScript to 11.4.14
  • Bug tor-browser#40565: do something with security.tls.version.enable-deprecated
  • Bug tor-browser-build#40713: Use the new tor-browser l10n branch in Firefox
  • Bug tor-browser-build#40727: Update list of Snowflake STUN servers in default bridge line
  • Bug tor-browser#41506: Remove TrustCor root certificates
  • Bug tor-browser#41525: Drop locales from torbutton, since we will inject them in tor-browser-build
• Windows + macOS + Linux
  • Updated Firefox to 102.7esr
  • Bug tor-browser#26504: Browser version in about:preferences showing the Firefox ESR version
  • Bug tor-browser#32308: Stop inner letterbox jiggling as border is dragged
  • Bug tor-browser#41375: Clean unused strings
  • Bug tor-browser#41393: about:tbupdate semantic and accessibility problems
  • Bug tor-browser#41522: Backport torbutton -> tor-browser migration to 12.0 series
  • Bug tor-browser#41524: about:tbupdate needs UTF-8
  • Bug tor-browser#41539: Crypto warning weaknesses
  • Bug tor-browser#41549: tor freeze when receiving to many http proxy requests on socks port
  • Bug tor-browser#41561: Maximize warning is broken (regression)
  • Bug tor-browser#41563: Old placeholders used in TorStrings.jsm
• macOS
  • Bug tor-browser-build#40716: Unable to update to 12.0.1 on Apple Silicon-based Mac
• Android
  • Updated GeckoView to 102.7esr
  • Bug tor-browser#41571: Backport Android-specific Firefox 109 to ESR 102.7-based Tor Browser
• Build System
  • All Platforms
    • Updated Go to 1.19.5
    • Bug tor-browser-build#40735: Add command to list which translation components need to be updated
    • Bug tor-browser-build#40739: tor-expert-bundle should include ClientTransportPlugin torrc lines for each pluggable transport
  • Windows + macOS + Linux
    • Bug tor-browser-build#40734: Backport the translation project
  • macOS
    • Bug tor-browser-build#40706: macos-signer-stapler should wait for user interaction before attempting stapling