New packages with OpenSSL updates

by erinn | January 5, 2012

The Tor Browser Bundles and other packages have been updated to OpenSSL 1.0.0f and 0.9.8s. All users are encouraged to update.

https://www.torproject.org/download

Tor Browser Bundle (2.2.35-4)

  • Update OpenSSL to 1.0.0f
  • Update NoScript to 2.2.5

Comments

Please note that the comment area below has been archived.

January 05, 2012

Permalink

Thanks for updating this so quickly to match the OpenSSL vuln.

Since the update, while using the new version of TBB/Linux, I notice it doesn't mention the OpenSSL version anymore, is this a bug or a feature? It used to mention in the Vidalia logs the OpenSSL version upon start.

BTW, why does my torrc have this entry:

ReachableAddresses reject *:*

After I've selected the option to use ports 40,443 only in Vidalia? It connects to Tor and there are no errors, why does it add that *:* line and continue to work, especially when I'm not using bridges? I take the *:* to mean reject all IP traffic, but it's working... I'm at a loss to explain this.

January 06, 2012

Permalink

When would the tbb be bundled along with the latest Aurora?
I've seen lots of new bug fixes included.

January 06, 2012

Permalink

Why aren't you approving any comments on the blog posts??? This is becoming VERY frustrating!!!!

January 06, 2012

Permalink

Hi! I need help about Freedom Hosting, I don't entry in my .onion site , I entered my username with different passwords (which may be placed on my account)
I have introduced Captchas:
8MR7UC84 / DGA8VNVT / ZAPAMV3Z ....
40 captchas in 1 hour and 60 captchas...
If someone wants to invite me back to Freedom Hosting or solve the problem
Will be grateful

January 07, 2012

Permalink

Why do you not have any information anywhere on how to UPGRADE a browser bundle installation?

If you make it difficult to move settings/bookmarks over, people will hesitate to upgrade...

Ditto this comment.

The problem with simply replacing the 'profile' folder (sub-folder of 'data') with one's old one (containing all personal customizations) is that this also replaces any add-ons that have been updated with the outdated versions.

January 08, 2012

In reply to by Anonymous (not verified)

Permalink

I noticed the same. Thought it was a bug in the config, but couldn't figure it out. Especially since it happened straight out of the box both for the windows 32-bit version and a linux 64-version at a different box.

January 08, 2012

Permalink

I am finding that the Aurora browser is whiting out and not responding after using the tor button to change identity, I noticed this on earlier versions as well, it does this quite often, although changing identity via the Vidalia control panel seems to work fine, I'm not sure what the difference is doing it that way?.

Other problem which has been going on for a long time now is that after going two clicks deep in to a website the back button in the browser fails to work anymore when you click on it, the only way around this is to right click on the back arrow then choose the page that you want to go back to, however if you choose the last page that you were on this also fails to work, but it will happily take you back to the 1st page that you were on!.. odd.

The only addon that I have installed other than those that came with the tor browser bundle is refcontrol.

January 08, 2012

Permalink

The version available on the torproject website is still the older 2.2.35-3.

Another issue: when opening the tor browser bundle, aurora (firefox) doesn't start up. Only vidalia starts up but Aurora browser doesn't open as it should. I know my friend is also having this issue.

I would also like to make a request that you allow for download of earlier versions of tor browser bundle

January 08, 2012

Permalink

I wish there were more stable alternatives available to Tor for anonymous browsing. Tor is like LINUX and I'm looking for something like OpenBSD in terms of stability and security

January 08, 2012

Permalink

Tor Browser Bundle (2.2.35-4) is not working. Vidalia opens, but Aurora browser does not! When I hit "Stop Tor" from Vidalia Control Panel then Aurora "wakes up" saying that there is still some script running and when I cancel that script running, Aurora opens, but is completely blank.
https://check.torproject.org/?lang=en-US&small=1&uptodate=1 is not loading either.

January 08, 2012

Permalink

the tor browser is opening soooo slow, vidalia quickly establishing connection but not same for tbb-firefox.exe. waiting at least 1-2 minutes

January 09, 2012

Permalink

Don't you TOR devs realize we need a forums?? So many people have so many questions, the blog posts are being flooded and nobody is responding. IT also takes several days for comments to just get approved and appear on the blog, then another several days to get a response (if a response is received at all..). Please install a forum within a few days!

January 09, 2012

Permalink

latest version tor-browser-2.2.35-4_en-US.exe still has the missing min/max/close windows buttons. This is a fairly fundamental issue is it not? Last version to work was tor-browser-2.2.35-1_en-US which is what I just went back to. This needs to be fixed in the next release, a lot of people are complaining about this issue.

January 09, 2012

Permalink

Is there a reason why the new version of TAILS has not been announced on this blog? (as past TAILS releases have been)

According to
https://tails.boum.org
version 0.10 of TAILS was released on January 4th.

Also note that the boum.org domain now has an SSL cert from "GANDI SAS", which was recognized by my Firefox 9.0.1 (unlike the previous Root CA cert).

January 10, 2012

Permalink

To fix the min/max/close problem:

1) right click on the gray background on the tabs or buttons area of the Aurora window, just to one side or the other of the cute little green onion button is convenient for me

2) a dialog box popup appears

3) in the dialog box, left click next to "Menu Bar"

4) your min/max/close buttons reappear

Ta-da!

January 11, 2012

Permalink

But..... you're then stuck with the menu. The non-TOR version of Firefox doesn't have this problem, and earlier versions of the TOR bundle also didn't suffer from this. It needs to be fixed, it really is quite serious as cosmetic bugs go.

January 12, 2012

Permalink

The latest version of the Vidalia/Aurora package (2.2.35-4). Reports that "Vidiala exited abnormally. Exit code:127" Is there something I am doing wrong???

January 14, 2012

Permalink

tried in openbsd 5.0
downloaded 32 bit version, extracted and got

Abort trap
Vidalia exited abnormally. Exit code: 134

???? Googled exit code 134 found nothing

January 17, 2012

Permalink

I am loving the Tor browser bundle and use it daily.

If I may make two small suggestions, very easy to incorporate:

* Support the DuckDuckGo official hidden service as one of the search engines, ideally the default search engine (better privacy policy than Google, and without the hassles of using Google via Tor) - http://3g2upl4pq6kufc4m.onion/

* Include OnionBookmark in the bookmarks bar by default to help people keep their bookmarks inside of the onion and not anywhere on their computer. http://x7yxqg5v4j6yzhti.onion

For me, OnionBookmark isn't loading: Unable to connect

Firefox can't establish a connection to the server at x7yxqg5v4j6yzhti.onion.

Seems URL (in Tor's hidden service, is a URL still called a URL?) is down? Anyone know of a new link..?

I do agree, however, that these two would be good. I find that DuckDuckGo is more faster then Scroogle (for some reason, I dunno..), anyone know if DuckDuckGo also uses Google search index, as Scroogle etc? Thx,

January 19, 2012

Permalink

Clicked on my Tor shortcut today and after it started up a dialog box popped up which said Firefox is now running in safe mode.
Did I accidentally hit a shortcut key on my keyboard which did this?.