Tor Browser 6.0.3 is now available from the Tor Browser Project page [1] and also from our distribution directory [2].

1: https://www.torproject.org/download/download-easy.html 2: https://www.torproject.org/dist/torbrowser/6.0.3/

This release features important security updates [3] to Firefox.

3: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#fi...

This release updates firefox to 45.3.0esr. Additionally, it bumps NoScript to 2.9.0.12, HTTPS-Everywhere to 5.2.1, disables asmjs, removes meek-google and contains a few other bug fixes.

Note: Due to bug 19410 [4], on OSX the incremental update will not be working for users who installed the previous version using the .dmg file. The internal updater should still work, though, doing a complete update.

4: https://trac.torproject.org/projects/tor/ticket/19410

Here is the full changelog since 6.0.2:

* All Platforms * Update Firefox to 45.3.0esr * Update Torbutton to 1.9.5.6 * Bug 19417: Disable asmjs for now * Bug 19689: Use proper parent window for plugin prompt * Update HTTPS-Everywhere to 5.2.1 * Update NoScript to 2.9.0.12 * Bug 19715: Disable the meek-google pluggable transport option * Bug 19714: Remove mercurius4 obfs4 bridge * Bug 19585: Fix regression test for keyboard layout fingerprinting * Bug 19515: Tor Browser is crashing in graphics code * Bug 18513: Favicon requests can bypass New Identity * OS X * Bug 19269: Icon doesn't appear in Applications folder or Dock * Android * Bug 19484: Avoid compilation error when MOZ_UPDATER is not defined