New Release: Tor Browser 10.5.6 (Windows, macOS, Linux)

by sysrqb | September 8, 2021

Tor Browser 10.5.6 is now available from the Tor Browser download page and also from our distribution directory.

This version updates Firefox to 78.14.0esr. This version includes important security updates to Firefox.

Warning:
Tor Browser will stop supporting version 2 onion services very soon. Please see the previously published deprecation timeline. Migrate your services and update your bookmarks to version 3 onion services as soon as possible.

The full changelog since Tor Browser 10.5.5:

  • Windows + OS X + Linux
    • Update Firefox to 78.14.0esr
    • Update Openssl to 1.1.1l
  • Build System
    • OS X
      • Bug 40358: Make OpenSSL 1.1.1l buildable for macOS

Comments

Please note that the comment area below has been archived.

Mr nox (not verified) said:

September 08, 2021

Permalink

Getting a message from Little Snitch on the Mac that this version of Tor Browser is no longer signed by Apple's certificate. Can you can explicitly confirm if you have abandoned whatever code signing Apple require ? thanks

Yes, version 2 onion services are usable in Tor Browser 10.5.6. The changelog of this release written above says, "Update Tor to 0.4.5.10".

"v2 onion services will be completely unreachable once Tor Browser moves to Tor 0.4.6.x in October 2021." I am not sure if it will be Tor Browser version 11.0.
https://blog.torproject.org/new-release-tor-browser-105#what-s-new?

Which OS version? Which device? Have you found posts by other people reporting the same problem who may be able to provide other information? Are you using snowflake that is known to lag? Could you give specific instructions so we can reproduce your crashes to troubleshoot them?

https://support.torproject.org/misc/bug-or-feedback/
https://www.chiark.greenend.org.uk/~sgtatham/bugs.html

Brad (not verified) said:

September 08, 2021

Permalink

FYI, my Little Snitch says a valid code signature by The Tor Project, Inc, US (MADPSAYN6T) is not included in this update like it always used to be and flags it as a security risk.

ToridaToridaTorida (not verified) said:

September 08, 2021

Permalink

The 10.5.6 update does not have a code signature and my OS and security software are throwing out mad warnings and shutting it all down.

ToridaToridaTorida (not verified) said:

September 08, 2021

Permalink

The 10.5.6 OSX update is not signed. My OS and security software put a lid on Tor and I cannot run it. The 10.5.6 update for Win64 and Linux look OK.

Noone (not verified) said:

September 09, 2021

Permalink

This update misses digital signature on the executable (the one that launches the browser, not the installer!), the previous 10.5.5 version did have digital signature on both the executable and the installer. Is that intended?

JavaScript is blocked by NoScript in Safest mode if you did not customize the options. NoScript allows advanced users to enable JavaScript for individual hostnames if they wish. Bookmarking is possible on Linux 64-bit. What OS are you using?

Time... Because there is something horribly broken in these last version's they released. It has completely stopped me from using anything TOR related, at this point. I'd get faster replies with smoke-signals.

Friendly Otter (not verified) said:

September 18, 2021

Permalink

For developers,

Thanks for the work you do. Take care of yourselves. You can do it! Thanks for the browser even if there's release issues! It's very important.

Yes, it's due to connection failures and people trying to constantly reconnect. Apparently, something in these versions is horribly broken and everyone's, futile solution, is to try and reload, and restart and refresh... Then they just stop trying and go away... In hopes that the next time they try, it will actually start working again.

These last versions are slower than MSIE on windows 3.1, using a 133Mhz processor!

none (not verified) said:

September 25, 2021

Permalink

Installed browser. All user-related dotfiles now stored in ~/.tor-browser instead of ~/.local/torbrowser. Why is XDG base directory specification not followed here?
Using Artix GNU/Linux.