# New Alpha Release: Tor Browser 12.5a4 (Android, Windows, macOS, Linux)

**URL:** https://forum.torproject.org/t/new-alpha-release-tor-browser-12-5a4-android-windows-macos-linux/6997
**Category:** Tor Browser Alpha Feedback
**Tags:** tor-browser
**Created:** [March 22, 2023, 1:42pm UTC](https://forum.torproject.org/t/new-alpha-release-tor-browser-12-5a4-android-windows-macos-linux/6997 "2023-03-22T13:42:23Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![system](https://forum.torproject.org/uploads/default/original/2X/d/d3424bed34f4ec18b2e99178c2801ba6dfb655d6.png) [@system](https://forum.torproject.org/u/system)
#### Post date: [March 22, 2023, 1:42pm UTC](https://forum.torproject.org/t/new-alpha-release-tor-browser-12-5a4-android-windows-macos-linux/6997/1 "2023-03-22T13:42:23Z")

</div>

by [richard](https://blog.torproject.org/author/richard) | March 22, 2023

 ![](https://forum.torproject.org/uploads/default/original/2X/d/df8d63cba31bfa26b5e62bcc29ddfc0929a43ca2.png)

Tor Browser 12.5a4 is now available from the [Tor Browser download page](https://www.torproject.org/download/alpha/) and also from our [distribution directory](https://www.torproject.org/dist/torbrowser/12.5a4/).

This release updates Firefox 102.9.0esr, including bug fixes, stability improvements and important [security updates](https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/). We also backported the Android-specific [security updates](https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/) from Firefox 111.

We use this opportunity to update various other components of Tor Browser as well:

- NoScript 11.4.20

Tor Browser 12.5a4 also adds support the Finnish language on all platforms. We would like to thank volunteer olavinto for making this possible!

## Full changelog

The full changelog since [Tor Browser 12.5a3](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/main/projects/browser/Bundle-Data/Docs/ChangeLog.txt) is:

- All Platforms
  - Updated Translations
  - Updated NoScript to 11.4.20
  - [Bug tor-browser-build#40353](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40353): Re-enable rlbox
  - [Bug tor-browser-build#40810](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40810): Enable Finnish (fi) in alpha builds
  - [Bug tor-browser-build#40817](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40817): Add basebrowser-incrementals-nightly makefile target
  - [Bug tor-browser#41599](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41599): about:networking#networkid should be normalized
  - [Bug tor-browser#41635](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41635): Disable the Normandy component at compile time
  - [Bug tor-browser#41636](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41636): Disable back webextension.storage.sync after ensuring NoScript settings won't be lost
  - [Bug tor-browser#41646](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41646): Regression in 12.5a3: the system font patch should also set a font-size
  - [Bug tor-browser#41647](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41647): Turn --enable-base-browser in --with-base-browser-version
  - [Bug tor-browser#41659](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41659): Add canonical color definitions to base-browser
  - [Bug tor-browser#41662](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41662): Disable about:sync-logs
  - [Bug tor-browser#41670](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41670): Rebase Tor Browser Alpha to 102.9.0esr
  - [Bug tor-browser#41671](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41671): Turn media.peerconnection.ice.relay\_only to true as defense in depth against WebRTC ICE leaks

- Windows + macOS + Linux
  - Updated Firefox to 102.9esr
  - [Bug tor-browser#40144](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40144): about:privatebrowsing Firefox branding
  - [Bug tor-browser-build#40788](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40788): Remove all languages but en-US for privacy-browser build target
  - [Bug tor-browser-build#40808](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40808): Set update URL for nightly base-browser
  - [Bug tor-browser#41085](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41085): Refactor the UI to remove all bridges
  - [Bug tor-browser#41093](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41093): Users don't understand the purpose of bridge-moji
  - [Bug tor-browser#41574](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41574): Use --warning-color variable for the "Custom" label in the security level popup.
  - [Bug tor-browser#41657](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41657): Remove --enable-tor-browser-data-outside-app-dir

- Windows
  - [Bug tor-browser-build#40793](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40793): Add some metadata also to the Windows installer
  - [Bug tor-browser-build#40801](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40801): Correct the ExecShell for system-wide installs in the NSIS script

- Android
  - Updated GeckoView to 102.9esr
  - [Bug tor-browser-build#40800](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40800): WebTunnel Integration in Tor Browser mobile
  - [Bug tor-browser#41667](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41667): Enable media.peerconnection.ice.obfuscate\_host\_addresses on Android for defense-in-depth
  - [Bug tor-browser#41677](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41677): Remove the --disable-tor-browser-update flag on Android

- Build System
  - All Platforms
    - Updated Go to 1.19.7
    - [Bug tor-browser-build#40750](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40750): Find why rlbox hurts reproducibility
    - [Bug tor-browser-build#40763](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40763): Add support for signing multiple browsers in tools/signing/nightly
    - [Bug tor-browser-build#40794](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40794): Include the build-id in firefox-l10n output name
    - [Bug tor-browser-build#40795](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40795): Trim down tor-browser-build release prep issue templates
    - [Bug tor-browser-build#40796](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40796): Bad UX for the changelogs script when using the issue number
    - [Bug tor-browser-build#40805](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40805): Define the version flag for all browsers
    - [Bug tor-browser-build#40807](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40807): Add config for signing base-browser nightly in tools/signing/nightly
    - [Bug tor-browser-build#40812](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40812): Make var/rezip in projects/firefox/config quiet
    - [Bug tor-browser#41649](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41649): Create rebase and security backport gitlab issue templates
    - [Bug tor-browser#41682](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41682): Add base-browser nightly mar signing key

  - Windows + macOS + Linux
    - [Bug tor-browser-build#40809](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40809): Remove --enable-tor-browser-update and --enable-verify-mar from projects/firefox/mozconfig
    - [Bug tor-browser-build#40813](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40813): Enable var/updater\_enabled for basebrowser nightly

  - macOS
    - [Bug tor-browser-build#40790](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40790): Fix dmg2mar after dmg changes from #28124
    - [Bug tor-browser-build#40791](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40791): tools/dmg2mar should exit with an error when there is an error creating the mar file
    - [Bug tor-browser-build#40792](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40792): signing scripts missing project name prefix to make rule
    - [Bug tor-browser-build#40798](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40798): dmg2mar step also takes care of copying the signed+stabled dmg to the signed directory
    - [Bug tor-browser-build#40806](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40806): Update the reference to the macOS mozconfig
    - [Bug tor-browser#41453](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41453): Rename mozconfig-macos-x86\_64 to mozconfig-macos

  - Android
    - [Bug tor-browser-build#40789](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40789): Broken mirror links for glean: link 404 for version 5.0.1 hosted at aguestuser's tor people storage

* * *
This is a companion discussion topic for the original entry at [https://blog.torproject.org/new-alpha-release-tor-browser-125a4/](https://blog.torproject.org/new-alpha-release-tor-browser-125a4/)

---

<div class="post-metadata">

### Author: ![piers.nicolai](https://forum.torproject.org/letter_avatar_proxy/v4/letter/p/49beb7/32.png) [@piers.nicolai](https://forum.torproject.org/u/piers.nicolai)
#### Post date: [March 22, 2023, 3:30pm UTC](https://forum.torproject.org/t/new-alpha-release-tor-browser-12-5a4-android-windows-macos-linux/6997/2 "2023-03-22T15:30:19Z")

</div>

What do turn `media.peerconnection.ice.relay_only` to `True` meaning?  
Is turn `media.peerconnection.enabled`to `False` not enough to defense WebRTC leak?(Are “WebRTC leak” and “WebRTC ICE leak” mean the same thing?)

---

<div class="post-metadata">

### Author: ![championquizzer](https://forum.torproject.org/letter_avatar_proxy/v4/letter/c/94ad74/32.png) [@championquizzer](https://forum.torproject.org/u/championquizzer)
#### Post date: [April 11, 2023, 9:35am UTC](https://forum.torproject.org/t/new-alpha-release-tor-browser-12-5a4-android-windows-macos-linux/6997/3 "2023-04-11T09:35:09Z")

</div>

2 posts were split to a new topic: [Cannot connect to Tor (Tor Browser Alpha 12.5a4)](https://forum.torproject.org/t/cannot-connect-to-tor-tor-browser-alpha-12-5a4/7255)

---

<div class="post-metadata">

### Author: ![piers.nicolai](https://forum.torproject.org/letter_avatar_proxy/v4/letter/p/49beb7/32.png) [@piers.nicolai](https://forum.torproject.org/u/piers.nicolai)
#### Post date: [September 25, 2023, 10:36am UTC](https://forum.torproject.org/t/new-alpha-release-tor-browser-12-5a4-android-windows-macos-linux/6997/4 "2023-09-25T10:36:09Z")

</div>

Seem the word “in depth” meaning just in case for people who want enabled WebRTC and also prevent leak(although unlikely success and riskful)?  
Sorry for bump this old thread, but I think my new reply content can a bit help people who with same confusion.
