# New Release: Tor Browser 12.5.6
**URL:** https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451
**Category:** News
**Tags:** tor-browser
**Created:** [September 29, 2023, 7:00pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451 "2023-09-29T19:00:35Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@system](https://forum.torproject.org/u/system)
#### Post date: [September 29, 2023, 7:00pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/1 "2023-09-29T19:00:35Z")
by [boklm](https://blog.torproject.org/author/boklm) | September 29, 2023
Tor Browser 12.5.6 is now available from the [Tor Browser download page](https://www.torproject.org/download/) and also from our [distribution directory](https://www.torproject.org/dist/torbrowser/12.5.6/).
This release backports important [security updates](https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/) from Firefox 115.3.1.0esr.
## Send us your feedback
If you find a bug or have a suggestion for how we could improve this release, [please let us know](https://support.torproject.org/misc/bug-or-feedback/).
## Full changelog
The full changelog since [Tor Browser 12.5.5](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/maint-12.5/projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt) is:
- All Platforms
- [Bug tor-browser#42135](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42135): Backport security fixes from Firefox 115.3.1 to 102.15.1
- Build System
- All Platforms
- [Bug tor-browser-build#40957](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40957): Update subkey expiration date for Tor Browser gpg key
* * *
This is a companion discussion topic for the original entry at [https://blog.torproject.org/new-release-tor-browser-1256](https://blog.torproject.org/new-release-tor-browser-1256)
---
### Author:  [@Saltyslug](https://forum.torproject.org/u/Saltyslug)
#### Post date: [September 29, 2023, 9:10pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/2 "2023-09-29T21:10:41Z")
How come there is another update so soon after 12.5.5?
---
### Author:  [@thorin](https://forum.torproject.org/u/thorin)
#### Post date: [September 29, 2023, 9:11pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/3 "2023-09-29T21:11:46Z")
> How come there is another update so soon after 12.5.5
security updates: [Security Vulnerability fixed in Firefox 118.0.1, Firefox ESR 115.3.1, Firefox for Android 118.1.0, Firefox Focus for Android 118.1.0, and Thunderbird 115.3.1. — Mozilla](https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/)
---
### Author:  [@Saltyslug](https://forum.torproject.org/u/Saltyslug)
#### Post date: [September 29, 2023, 9:34pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/4 "2023-09-29T21:34:13Z")
Ah that makes sense, I tried clicking the link in the original post ([https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42135](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42135)) but it gave 404. Many thanks
---
### Author:  [@thorin](https://forum.torproject.org/u/thorin)
#### Post date: [September 30, 2023, 8:37am UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/5 "2023-09-30T08:37:02Z")
worksforme: [https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42135](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42135) - issue is not confidential
---
### Author:  [@NeoMateo](https://forum.torproject.org/u/NeoMateo)
#### Post date: [September 30, 2023, 3:41pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/6 "2023-09-30T15:41:38Z")
After new update, antivirus see: Trojan:Win32/Malgent!MTB
When its delete Tor not working
---
### Author:  [@DmitryStrakhov](https://forum.torproject.org/u/DmitryStrakhov)
#### Post date: [September 30, 2023, 3:56pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/7 "2023-09-30T15:56:11Z")
Yes, I’ve got that problem too.
Windows defender treats new version of tor.exe as troyan and deletes it.
Here is a screenshot:
@Dev guys, could you please look at that?
---
### Author:  [@Icifra](https://forum.torproject.org/u/Icifra)
#### Post date: [September 30, 2023, 8:09pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/8 "2023-09-30T20:09:09Z")
Yes, there is a problem with tor.exe (0.4.7.15) - Microsoft has flagged this as a Trojan (Win32/Malgent!MTB) and is mercilessly removing tor from both the service and the browser on their windows systems
The incident happened today
Results: [VirusTotal](https://www.virustotal.com/gui/file/3807d96998a15aed25ec9a95c3183385c6c73f6dde811ef2452c30f5f7df2810)
---
### Author:  [@Plastic5970](https://forum.torproject.org/u/Plastic5970)
#### Post date: [October 1, 2023, 9:25am UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/9 "2023-10-01T09:25:00Z")
You’ve got a _platform_ antivirus program removing a needed part to run Tor. I think it is in the project’s interest to get Microsoft to fix this if this truly isn’t a trojan. Otherwise, most Windows users wouldn’t want to (or even can’t) be running this version. The things that people do to get Tor to run now is to 1) reinstall the previous version and pause on update (maybe a dangerous activity for most people in itself) and 2) use Tor.exe from the previous release.
This could be a false positive, but it does effect most Windows users. OTH, if this is a true positive, nobody can evaluate it better than the project and Microsoft. 3CX supply-chain attack started off this way too.
---
### Author:  [@kimbosky](https://forum.torproject.org/u/kimbosky)
#### Post date: [October 1, 2023, 2:08pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/10 "2023-10-01T14:08:30Z")
Im receiving the same results as well! Even not connecting to tor is a problem.
---
### Author:  [@toruser3355](https://forum.torproject.org/u/toruser3355)
#### Post date: [October 1, 2023, 2:08pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/11 "2023-10-01T14:08:38Z")
Same problem as above, after upgrading to 12.5.6, Windows 10 Defender reported a “Trojan:Win32/Malgent!MTB” on “…Tor Browser\Browser\TorBrowser\Tor\tor.exe”.
For now, I replaced the `tor.exe` with on older version of the exe file but the Tor Project should avoid such problem because novice user will likely panic because of such message (namely a Virus threat, especially when it is a false positive) which cannot be fixed by “normal” means.
I’m not sure what heuristics Windows Defender uses to determine a “Trojan:Win32/Malgent!MTB” but running an upgrade and being greeted with such threat message isn’t helpful for either the project nor the user.
I’m assuming that the 12.5.6 release doesn’t contain a `Trojan:Win32/Malgent!MTB` but an official verification about the non-existence would be much appreciated.
---
### Author:  [@Ralph1806](https://forum.torproject.org/u/Ralph1806)
#### Post date: [October 1, 2023, 2:08pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/12 "2023-10-01T14:08:53Z")
Is there any update regarding the Trojan issue? I would really like to get back to using the TOR Browser soon…waiting for a proper update.
Also, somehow the Mullvad Browser did not have a corresponding update and is still on 12.5.5. Seemed a bit out of place to me.
---
### Author:  [@alphagoo](https://forum.torproject.org/u/alphagoo)
#### Post date: [October 1, 2023, 3:34pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/13 "2023-10-01T15:34:53Z")
Looks like there will be Tor Browser 12.5.7 soon enough because they have discovered yet another vulnerability in libvpx (CVE-2023-44488). Looking at the commit log for libvpx, it’s an absolute mine field. I wonder if TB should just set “media.mediasource.vp9.enabled” to false for the time being.
---
### Author:  [@BobbyB](https://forum.torproject.org/u/BobbyB)
#### Post date: [October 1, 2023, 4:33pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/14 "2023-10-01T16:33:40Z")
Here is what I learnt when I had this type of problem with Norton.
This is for Windows and assumes a typical standard install onto the desktop.
First the whole Tor browser is just a drop-in folder onto the desktop.
Set the option to NOT auto-update but only give a notice.
When a notice comes in, copy the whole folder to somewhere else like a USB stick.
Do the update.
If your AV thinks it is a malware just delete the whole folder from the desktop then drop the backup folder back on to the desktop.
Problem solved.
---
### Author:  [@boldsuck](https://forum.torproject.org/u/boldsuck)
#### Post date: [October 1, 2023, 10:39pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/15 "2023-10-01T22:39:19Z")
The most effective thing is: send the binary to the manufacturer of the antivirus software and write that it is recognized incorrectly.
This is how I do it with preinstalled Avast shit on my Android phone.
---
### Author:  [@BobbyB](https://forum.torproject.org/u/BobbyB)
#### Post date: [October 2, 2023, 3:31pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/16 "2023-10-02T15:31:08Z")
Yes that is the ultimate solution unless the AV vendor deletes it. (Norton put it in a “quarantine” box.)
But in the meantime you are without Tor. My “trick” is an immediate solution while you wait for the green light from the AV.
Off topic: If Avast is such a shit why not replace it?
---
### Author:  [@n7ekg](https://forum.torproject.org/u/n7ekg)
#### Post date: [October 4, 2023, 12:49am UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/17 "2023-10-04T00:49:42Z")
Easy fix:
Tor Browser 12.5.6 under Windows triggers firewall block
The solution is to go into Windows Firewall and disable the rule that blocks outbound Firefox connections.
---
### Author:  [@Saltyslug](https://forum.torproject.org/u/Saltyslug)
#### Post date: [October 5, 2023, 1:32am UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/18 "2023-10-05T01:32:52Z")
> [@alphagoo](#):
>
> Looks like there will be Tor Browser 12.5.7 soon enough because they have discovered yet another vulnerability in libvpx (CVE-2023-44488)
Its certainly looking that way seeing as it has a severity score of 7.5/10 from the first analysis and its been modified again since then.
[https://nvd.nist.gov/vuln/detail/CVE-2023-44488](https://nvd.nist.gov/vuln/detail/CVE-2023-44488)
---
### Author:  [@alphagoo](https://forum.torproject.org/u/alphagoo)
#### Post date: [October 5, 2023, 1:30pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/19 "2023-10-05T13:30:37Z")
As far as I understand Tor Browser 13.0 is scheduled to be released today, but there has not been a Firefox release with the fix for CVE-2023-44488 yet. In fact, it hasn’t been cherry picked to their repository either (they don’t seem to use the stock libvpx version). I’m kind of confused here, Firefox devs are usually very fast at fixing things. Maybe Firefox is not affected due to its specific usage of libvpx? Who knows, all of the bug reports are private/restricted.
---
### Author:  [@PieroV](https://forum.torproject.org/u/PieroV)
#### Post date: [October 5, 2023, 1:56pm UTC](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451/20 "2023-10-05T13:56:16Z")
> [@alphagoo](#):
>
> As far as I understand Tor Browser 13.0 is scheduled to be released today
We had some last minute fixes for which we decided to push the 13.0 release of a few days.
We want to publish before Firefox 115.4.0 for sure.
> [@alphagoo](#):
>
> there has not been a Firefox release with the fix for CVE-2023-44488 yet. In fact, it hasn’t been cherry picked to their repository either (they don’t seem to use the stock libvpx version). I’m kind of confused here, Firefox devs are usually very fast at fixing things. Maybe Firefox is not affected due to its specific usage of libvpx? Who knows, all of the bug reports are private/restricted.
We haven’t heard of scheduled releases from Mozilla, yet. So, 12.5.7 is not scheduled on our side either.
From what I know, earlier fixes weren’t used against Firefox, but only against “other products” (from what Mozilla’s advisories say).
[Next page](https://forum.torproject.org/t/new-release-tor-browser-12-5-6/9451.md?page=2)