[tor-announce] New Release: Tor Browser 13.5a6 (Android, Windows, macOS, Linux)

[Richard Pospesel]

Hi everyone,

Tor Browser 13.5a6 has now been published for all platforms. For details 
please see our blog post:
- $(BLOG_POST_URL)

Changelog:

> Tor Browser 13.5a6 - March 28 2024
>  * All Platforms
>    * Bug 41114: Fix no-async-promise-executor on TorConnect [tor-browser]
>    * Bug 41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
>    * Bug 42336: Review the relationship between TorSettings and the TorProvider [tor-browser]
>    * Bug 42428: Timezone offset leak via document.lastModified [tor-browser]
>    * Bug 42435: Update moat domain fronting configuration [tor-browser]
>    * Bug 42437: Drop "torbrowser.version" preference [tor-browser]
>    * Bug 42444: Remove the "Prioritize .onion sites when known" option [tor-browser]
>    * Bug 42449: Rebase Tor Browser alpha onto Firefox 115.9.0esr [tor-browser]
>    * Bug 42459: Add startpage onion service to list of search providers [tor-browser]
>    * Bug 42466: Drop the "Onion Logo" from trademark statement [tor-browser]
>    * Bug 42472: Timezone May leak from XSLT Date function [tor-browser]
>    * Bug 42473: ESR 115.9.1 fixes [tor-browser]
>    * Bug 42481: Modularize SecurityLevel [tor-browser]
>    * Bug 41105: Bump version of snowflake to v2.9.2 [tor-browser-build]
>  * Windows + macOS + Linux
>    * Updated Firefox to 115.9.0esr
>    * Bug 41916: Letterboxing preferences UI [tor-browser]
>    * Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser]
>    * Bug 42203: Fluent migration: about dialog [tor-browser]
>    * Bug 42209: Fluent migration: tor circuit [tor-browser]
>    * Bug 42211: Fluent migration: new identity [tor-browser]
>    * Bug 42214: Fluent migration: security level [tor-browser]
>    * Bug 42236: Let users decide whether to load their home page on new identity. [tor-browser]
>    * Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser]
>    * Bug 42446: Improve accessible descriptions in built-in dialog [tor-browser]
>    * Bug 42458: Update the "Submit Feedback" link in "About Tor Browser" [tor-browser]
>  * Windows
>    * Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser]
>  * Linux
>    * Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser]
>    * Bug 41110: Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]
>  * Android
>    * Updated GeckoView to 115.9.0esr
>    * Bug 41187: Improve Android's bridge settings UI [tor-browser]
>    * Bug 42427: Do not ship bridges as prefences anymore [tor-browser]
>  * Build System
>    * All Platforms
>      * Updated Go to 1.21.8
>      * Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build]
>      * Bug 41107: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo for new type of URL [tor-browser-build]
>      * Bug 40073: We should remove ./ when using 7-zip for zip files [rbm]
>    * Windows + macOS + Linux
>      * Bug 42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop) [tor-browser]
>      * Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build]
>    * Windows
>      * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build]
>    * Android
>      * Bug 40502: Do not recommend addons on Tor Browser [tor-browser]
>      * Bug 41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap [tor-browser-build]

best,
-richard
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xDE47360363F34B2C.asc
Type: application/pgp-keys
Size: 8030 bytes
Desc: OpenPGP public key
URL: <http://lists.torproject.org/pipermail/tor-announce/attachments/20240328/0982bfc9/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-announce/attachments/20240328/0982bfc9/attachment.sig>