[tor-announce] New Release: Tor Browser 13.5a6 (Android, Windows, macOS, Linux)

Hi everyone,

Tor Browser 13.5a6 has now been published for all platforms. For details please see our blog post: - $(BLOG_POST_URL)

Changelog:

Tor Browser 13.5a6 - March 28 2024

• All Platforms
  • Bug 41114: Fix no-async-promise-executor on TorConnect [tor-browser]
  • Bug 41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
  • Bug 42336: Review the relationship between TorSettings and the TorProvider [tor-browser]
  • Bug 42428: Timezone offset leak via document.lastModified [tor-browser]
  • Bug 42435: Update moat domain fronting configuration [tor-browser]
  • Bug 42437: Drop "torbrowser.version" preference [tor-browser]
  • Bug 42444: Remove the "Prioritize .onion sites when known" option [tor-browser]
  • Bug 42449: Rebase Tor Browser alpha onto Firefox 115.9.0esr [tor-browser]
  • Bug 42459: Add startpage onion service to list of search providers [tor-browser]
  • Bug 42466: Drop the "Onion Logo" from trademark statement [tor-browser]
  • Bug 42472: Timezone May leak from XSLT Date function [tor-browser]
  • Bug 42473: ESR 115.9.1 fixes [tor-browser]
  • Bug 42481: Modularize SecurityLevel [tor-browser]
  • Bug 41105: Bump version of snowflake to v2.9.2 [tor-browser-build]
• Windows + macOS + Linux
  • Updated Firefox to 115.9.0esr
  • Bug 41916: Letterboxing preferences UI [tor-browser]
  • Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser]
  • Bug 42203: Fluent migration: about dialog [tor-browser]
  • Bug 42209: Fluent migration: tor circuit [tor-browser]
  • Bug 42211: Fluent migration: new identity [tor-browser]
  • Bug 42214: Fluent migration: security level [tor-browser]
  • Bug 42236: Let users decide whether to load their home page on new identity. [tor-browser]
  • Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser]
  • Bug 42446: Improve accessible descriptions in built-in dialog [tor-browser]
  • Bug 42458: Update the "Submit Feedback" link in "About Tor Browser" [tor-browser]
• Windows
  • Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser]
• Linux
  • Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser]
  • Bug 41110: Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]
• Android
  • Updated GeckoView to 115.9.0esr
  • Bug 41187: Improve Android's bridge settings UI [tor-browser]
  • Bug 42427: Do not ship bridges as prefences anymore [tor-browser]
• Build System
  • All Platforms
    • Updated Go to 1.21.8
    • Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build]
    • Bug 41107: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo for new type of URL [tor-browser-build]
    • Bug 40073: We should remove ./ when using 7-zip for zip files [rbm]
  • Windows + macOS + Linux
    • Bug 42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop) [tor-browser]
    • Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build]
  • Windows
    • Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build]
  • Android
    • Bug 40502: Do not recommend addons on Tor Browser [tor-browser]
    • Bug 41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap [tor-browser-build]

best, -richard