New Tor Browser Bundles and Tor 0.2.4.7-alpha packages available

by erinn | January 6, 2013

All of the Tor Browser Bundles have been updated to Firefox 10.0.12esr in order to address the recent problems with TurkTrust certificates. From Mozilla's post:

TURKTRUST, a certificate authority in Mozilla’s root program, mis-issued two intermediate certificates to customers. TURKTRUST has scanned their certificate database and log files and confirmed that the mistake was made for only two certificates.

This is not a Firefox-specific issue. Nevertheless, we are concerned that at least one of the mis-issued intermediate certificates was used for man-in-the-middle (MITM) traffic management of domain names that the customer did not legitimately own or control. We are also concerned that the private keys for these certificates were not kept as secure as would be expected for intermediate certificates.

All users are strongly encouraged to upgrade.

There was also a new Tor 0.2.4.7-alpha release and all alpha packages have been updated with that.

A note about the Vidalia bundles:

The plain Vidalia bundles have been discontinued. We apologize for any confusion or inconvenience that this has caused for our users. In order to continue to use the Vidalia bundle as a client, download one of the available bundles, go into the Vidalia "Settings" menu and click "Run as a client only".

https://www.torproject.org/download/download-easy

Tor Browser Bundle (2.3.25-2)

  • Update Firefox to 10.0.12esr
  • Update Libevent to 2.0.21-stable
  • Update HTTPS Everywhere to 3.1.2
  • Update NoScript to 2.6.4.2

Tor Browser Bundle (2.4.7-alpha-1)

  • Update Firefox to 10.0.12esr
  • Update Tor to 0.2.4.7-alpha
  • Update Libevent to 2.0.21-stable
  • Update HTTPS Everywhere to 4.0development.4
  • Update NoScript to 2.6.4.2

    Comments

    Please note that the comment area below has been archived.

    Anonymous (not verified) said:

    January 07, 2013

    Permalink

    Just started old TBB and there was no notice about updating. I thought it checks at startup to see if any updates are available.

    Anonymous (not verified) said:

    January 07, 2013

    Permalink

    i live in iran and before that i sent my report to googleonlinesecurity weblog.i mentioned some suspect activity in certificate and ssl i have found.i sent them the detail and i hope that be this case that they found.

    Anonymous (not verified) said:

    January 07, 2013

    Permalink

    my tor keeps crashing within 5 mins and certain areas of the window i click, as well as sites completely exiting from the entire program, any thoughts using windows 7

    Anonymous (not verified) said:

    January 07, 2013

    Permalink

    This problem is on Windows XP Pro.

    I have downloaded the new Tor Browser Bundle 2.3.25-2. I run it and install it on a USB drive (as I have with every previous TBB). When I double-click "Start Tor Browser.exe", it begins to launch and quickly crashes with an error. This happens repeatedly. It never even reaches the point of trying to launch the Tor Browser tbb-firefox.exe.

    When I launch the last previous working TBB (2.2.39.-5), I can check the Settings in the Vidalia menu. Under "Sharing" the radio button for "Run as client only" is selected.

    Am I doing something wrong? Is there a bug in the 2.3.25-2 or an incompatibility with XP Pro?

    Please help!

    And thank you for Tor!

    Anonymous (not verified) said:

    January 08, 2013

    Permalink

    How come, the latest TBB uses Firefox 10.0.12esr, a version that isn't even available on the Mozilla website days after TBB came out? Is the Tor project now creating its on variants of Firefox?

    Anonymous (not verified) said:

    January 08, 2013

    Permalink

    Is there hope, that you are able and willing to develope a TBB version for PPC- (PowerPC-)Macs too?

    And please be so nice and give (me) now a d e f i n i t i v e answer, because I never read anything about this …

    Anonymous (not verified) said:

    January 08, 2013

    Permalink

    Downloaded TorBrowser-2.3.25-2-osx-x86_64-en-US.zip on Jan6th 2013.

    Instalation works, Vidalia and Tor network works, but TOR BROWSER worked 12 hours with Firefox opened. Now Torbrowser quits, message: "A copy of Firefox is already open". If firefox is off, it gets started when Torbrowser starts and then Torbrowser's quits.

    Please can someone direct me to the relevant help page, I couldn't find it. Thanks.

    Anonymous (not verified) said:

    January 08, 2013

    Permalink

    Same person with the XP Pro problem above.

    I launch "Start Tor Browser.exe" and the Vidalia Panel opens but then crashes. These are in the Vidalia log: [date time 50:24] The Tor Software is Running - You are currently running version "0.2.3.25 (git-17c24b3118224d65)" of the Tor software.
    [date time 50:39 2013] The Tor Software is not Running - Click "Start Tor" in the Vidalia Control Panel to restart the Tor software. If Tor exited unexpectedly, select the "Advanced" tab above for details about any errors encountered.

    I click "Start Tor" in the Control Panel and I get the same crash and log entries.

    I check the Vidalia Settings / Sharing and the radio button for "Run as client only" is selected.

    PLEASE HELP!!

    Anonymous (not verified) said:

    January 08, 2013

    Permalink

    What alternatives do Mac OS X 10.4 users have, since Vidalia for PPC is no longer available?

    Anonymous (not verified) said:

    January 09, 2013

    Permalink

    I have the Qt: Session management error in this TBB too.
    Centos after seeming in good shape and :
    "Launching Tor Browser for Linu in /home....."
    does not start Firefox.

    Instead three times the following error:

    Gecko:3387 Authentication....

    I was connected to the Internet. Checked with an unprotected browser.

    Perhaps I am asking too much of Tor. I use Centos 5.5. livecd and have troubles already with trying to install a new Firefox. I let yum remove the old one and try to install from a tar.gz file. I land in the same sort of place.
    I get
    Qt: Session management error
    and
    Gecko:3387

    No wonder tor does something like that?

    Anonymous (not verified) said:

    January 09, 2013

    Permalink

    Hi, I am new to TOR, could someone tell me the best TOR download to use? I have Chrome and Firefox browsers..........thanks

    Anonymous (not verified) said:

    January 10, 2013

    Permalink

    Can we finally run this one in Firefox's safe mode? If you install a bad extension you're screwed. TBB breaks too many useful Firefox features.

    Anonymous (not verified) said:

    January 10, 2013

    Permalink

    Alright, noobish question:

    It's been a while since I've run Tor, and I see that the old Vidalia Bundles have been done away with. Now, I want to run a relay node, so I get the Vidalia Relay Bundle. All well and good. But I also want to use Tor for browsing, and the Browser Bundle automatically tries to start up its own Vidalia/Tor combo. Is there any way I can get and use just the TorBrowser with the Relay Bundle, or do I need to go the very unsafe route of configuring my Firefox manually? I tried to run just tbb-firefox.exe in the Browser Bundle directory, but it attempted to load my Firefox 18 profile and then crashed. Figured I would ask here before delving into the greasy depths of the Internet for answers.

    Anonymous (not verified) said:

    January 13, 2013

    Permalink

    I'm the same person who reported "This problem is on Windows XP Pro. I have downloaded the new Tor Browser Bundle 2.3.25-2. I run it and install it on a USB drive (as I have with every previous TBB). When I double-click "Start Tor Browser.exe", it begins to launch and quickly crashes with an error. [...]"

    After the latest MS Update, TBB 2.3.25-2 now works OK. I have no idea what caused the problem nor what solved it, but it's working OK.

    Thanks for TOR!

    Anonymous (not verified) said:

    January 20, 2013

    Permalink

    mac x64 version is giving signature error (unsigned?) on os x 10.8.2. what's going on?

    Anonymous (not verified) said:

    February 03, 2013

    Permalink

    Tor stop with problem bootstraping at 10% with last Bundle 2.3.25-2

    Anonymous (not verified) said:

    February 19, 2013

    Permalink

    I have an Hp and for some reason I cant download torproject.org, and I have windows 7. It continues to stop and say retry. Iv'e tried multiple times and it does the same thing over. Can somone please give me advice. Thanks

    Anonymous (not verified) said:

    April 04, 2013

    Permalink

    I'm using the latest TOR v. tor-browser-2.3.25-5_en-US.exe with XP Pro SP3.

    When I go to PhotoBucket the browser crashes right after uploading one picture and getting the direct link. Then a restart is needed to do the next pic and so on.

    Very annoying to say the least and was wondering if there is a fix or work-around to stop this?

    Never had a problem before the update from FireFox 10.

    Thanks, LabRat

    Anonymous (not verified) said:

    April 14, 2013

    Permalink

    THIS HAS NEVER BENN ANSWERED :
    ----------------------------------------------------------
    Tor is becoming with every patch a honeypot! this update is fail!!!
    ipcheck.info
    Signature: medium! (not standard tor browser signature!)
    Charset: medium! wtf
    HTTP_ACCEPT Headers: allowed! (why not block this???) in the past updates it was blocked!

    https://panopticlick.eff.org/
    12.41 bits way too big with configuration, first it was around 8 with configuration! now with configuration in the default settings it is around 18

    The bigest fail is this:
    during any tor start up u connect again and again with the same relays/ips in the united states!!! again with same relays and IP.

    the default settings are a total farce! i think it is time let the people know that tor browser is not connecting to random relays/ip. but connect to companys in the united states! and this companys are analysing our trafic!!!

    ----------------------------------------------------------------------------------------

    Anonymous (not verified) said:

    June 22, 2013

    Permalink

    Used to work like a dream now firefox crashes if i try to make a post anywhere and just hangs looked for answers played around with certain settings no joy crashes and hangs