New Release: Tor Browser 15.0.5

Tor Browser 15.0.5 is now available from the Tor Browser download page and also from our distribution directory.

Vietnamese Text Vandalism

A few days ago, one of our community members reported that some of the Vietnamese text translations in Tor Browser Android had been vandalised by a malicious contributor. Unfortunately, this mis-translated text ended up shipping in Tor Browser 15.0.4. These changes did not affect the browser's functionality or security properties in any way.

In addition to shipping an unscheduled release to fix this problem, we are also reviewing the processes around accepting translation updates so that something like this does not again make it into Tor Browser Stable. Our goal is to keep community contributions open and welcome, while adding safeguards where needed.

Finally, we want to thank our community of volunteer translators and in particular user SweetSea for reporting this issue to our localisation developer channel (#tor-l10n). If you would like to help improve translations and join the community, please consider becoming a Tor translator!

Send us your feedback

If you find a bug or have a suggestion for how we could improve this release, please let us know.

Full changelog

The full changelog since Tor Browser 15.0.3 is:

• All Platforms
  • Bug tor-browser#44418: Update built-in obfs4 bridges
  • Bug tor-browser#44433: Weird §:domain.com label in the Blocked Objects window
  • Bug tor-browser#44470: Rebase Tor Browser stable onto 140.7.0esr
  • Bug tor-browser#44474: Backport Security Fixes from Firefox 147
  • Bug tor-browser#44482: (H1) Script execution in Safest mode via data URI navigation
• Windows + macOS + Linux
  • Updated Firefox to 140.7.0esr
• Android
  • Updated GeckoView to 140.7.0esr
  • Bug tor-browser-build#41681: Keep public suffixes up-to-date on 140esr-based Tor Browser for Android
• Build System
  • All Platforms
    • Bug tor-browser-build#41654: Make relprep.py update Moat settings
    • Bug tor-browser-build#41682: relprep.py should fail when a GitHub release is not found
    • Bug rbm#40090: Make the cleanup faster
    • Bug rbm#40095: cached checksums should not be used for input files when refresh_input is enabled
  • Android
    • Bug tor-browser-build#41679: Android tor-expert-bundle archives missing version in filename