New Release: Tor Browser 13.0.12

[system]

by boklm | March 19, 2024

Tor Browser 13.0.12 is now available from the Tor Browser download page and also from our distribution directory.

This version includes important security updates to Firefox.

Removal of automatic .onion site prioritization

The Tor Project has recently been notified of a potential fingerprinting vulnerability with automatic Onion-Location redirects. In an abundance of caution, we have removed the 'prioritize .onion sites when known' option from Tor Browser. We are looking further into this issue and will provide timely updates as more research and additional recommendations become available.

Send us your feedback

If you find a bug or have a suggestion for how we could improve this release, please let us know.

Full changelog

The full changelog since Tor Browser 13.0.11 is:

---

This is a companion discussion topic for the original entry at https://blog.torproject.org/new-release-tor-browser-13012

[panino]

@system

Removal of automatic .onion site prioritization

The Tor Project has recently been notified of a potential fingerprinting vulnerability with automatic Onion-Location redirects. In an abundance of caution, we have removed the ‘prioritize .onion sites when known’ option from Tor Browser. We are looking further into this issue and will provide timely updates as more research and additional recommendations become available.

Can you please expand on this issue? Considering how changes to TB are often scrutinized to the most minuscule detail before going live, the sudden and complete removal of this feature makes me think this was a very serious problem?

[pavel]

The feature was deactivated preemptively to allow us to investigate its potential for exploits. We are conducting more research and will continue to update our recommendations as more information becomes available.