Mullvad Browser Changelog

What's new in Mullvad Browser 13.0.14

Apr 18, 2024
  • ALL PLATFORMS:
  • Updated Firefox to 115.10.0esr
  • Updated uBlock Origin to 1.57.2
  • After update, don't open the release page on Github. Instead link it in the startpage, like in Tor Browser [mullvad-browser]
  • New identity complains about about:mullvad-browser [mullvad-browser]
  • Rebase Mullvad Browser stable onto 115.10.0esr [mullvad-browser]
  • Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
  • Let users decide whether to load their home page on new identity. [tor-browser]
  • Do not localize the order of locales for app lang [tor-browser]
  • Timezone offset leak via document.lastModified [tor-browser]
  • App languages not sorted correctly in stable [tor-browser]
  • Timezone May leak from XSLT Date function [tor-browser]
  • LINUX:
  • Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]

New in Mullvad Browser 13.0.13 (Mar 25, 2024)

  • Updated Firefox to 115.9.1esr
  • ESR 115.9.1 fixes [tor-browser]
  • Rebase Mullvad Browser stable onto Firefox 115.9.1esr [mullvad-browser]

New in Mullvad Browser 13.5 Alpha 5 (Feb 28, 2024)

  • ALL PLATFORMS:
  • Updated Firefox to 115.8.0esr
  • Updated uBlock Origin to 1.56.0
  • Updated mullvad-browser-extension to 0.8.5
  • Bug 262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser]
  • Bug 268: Rebase Mullvad Browser Alpha onto 115.8.0esr [mullvad-browser]
  • Bug 42376: The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser]
  • Bug 42378: spoof english + htmlform can leak app language [tor-browser]
  • Bug 42387: Visual noise in 13.5a4 letterboxing [tor-browser]
  • Bug 42389: Betterboxing: gradient is never shown [tor-browser]
  • Bug 42390: Betterboxing: make the decorator border disappear when the corners are flat [tor-browser]
  • Bug 42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser]
  • Bug 42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser]
  • Bug 42423: Move temporary Lox Fluent strings to new file [tor-browser]
  • macOS
  • Bug 40569: Create build-specific installer for macOS [tor-browser-build]
  • Build System
  • ALL PLATFORMS:
  • Bug 41038: Add RPM dependencies to README [tor-browser-build]
  • Bug 41067: Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build]
  • Bug 41072: Set correct updater_url for Mullvad Browser nightly builds [tor-browser-build]
  • Bug 41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build]
  • Bug 41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build]
  • Bug 40068: Switch from IO::CaptureOutput to Capture::Tiny [rbm]
  • Bug 40069: Make stdout and stderr utf8 [rbm]
  • Bug 40071: Add an option to create zip files using 7z [rbm]
  • Bug 40072: Move capture_exec to a separate module [rbm]
  • Windows
  • Bug 41076: Include the ShellLink plugin in NSIS [tor-browser-build]
  • Bug 41077: Draft the new installer for Mullvad Browser [tor-browser-build]
  • macOS
  • Bug 41084: $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build]

New in Mullvad Browser 13.0.10 (Feb 20, 2024)

  • ALL PLATFORMS:
  • Updated Firefox to 115.8.0esr
  • Updated mullvad-browser-extension to 0.8.5
  • Rebase Mullvad Browser Stable onto Firefox 115.8.0esr [mullvad-browser]
  • Spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn) [tor-browser]
  • BUILD SYSTEM:
  • All Platforms:
  • Set time on signing machine before starting signing [tor-browser-build]
  • Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build]
  • Switch from IO::CaptureOutput to Capture::Tiny [rbm]
  • Make stdout and stderr utf8 [rbm]

New in Mullvad Browser 13.5 Alpha 4 (Jan 31, 2024)

  • ALL PLATFORMS:
  • Updated Firefox to 115.7.0esr
  • Updated uBlock Origin to 1.55.0
  • Bug 261: Rebase Mullvad Browser Alpha onto Firefox 115.7.0esr
  • Bug 41917: Make the appearance of letterboxing look more intentional
  • Bug 42374: spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn)
  • BUILD SYSTEM:
  • All Platforms
  • Bug 42337: Enable GeckoDriver for all desktop platforms
  • Bug 41037: Set time on signing machine before starting signing
  • Bug 41045: Dump more information about build times on Firefox
  • Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from
  • Bug 41057: make fetch is not fetching mullvad repo
  • Bug 41059: Update keyring/torbrowser.gpg with updated key
  • Windows
  • Bug 40606: Use Clang to compile NSIS
  • Bug 40900: Update NSIS to 3.09
  • Bug 41065: Do a cleanup of the NSIS script
  • Linux
  • Bug 41046: Use the final path for Linux debug symbols

New in Mullvad Browser 13.0.9 (Jan 23, 2024)

  • All platforms:
  • Updated Firefox to 115.7.0esr
  • Updated uBlock Origin to 1.55.0
  • Bug 249: BrowserHost has null mRoot when applying initial window size in debug
  • Bug 260: Rebase Mullvad Browser Stable onto Firefox 115.7.0esr
  • Bug 42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same!
  • Bug 41044: Add tbb_version.json-like file for Mullvad Browser
  • Linux:
  • Bug 41050: Improve the disk leak sanitization on start-$browser
  • BUILD SYSTEM:
  • All Platforms:
  • Bug 41042: Add options to include updates in the changelog
  • Bug 41043: Create script to push build requests to Mullvad build servers
  • Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from
  • Bug 41059: Update keyring/torbrowser.gpg with updated key
  • Windows + macOS:
  • Bug 41016: Switch from bullseye to bookworm for desktop platforms
  • Windows:
  • Bug 41015: Enable std::filesystem on libc++ on Windows

New in Mullvad Browser 13.5 Alpha 3 (Dec 21, 2023)

  • BROWSER:
  • All Platforms:
  • Updated Firefox to 115.6.0esr
  • Updated NoScript to 11.4.29
  • Bug 249: BrowserHost has null mRoot when applying initial window size in debug [mullvad-browser]
  • Bug 256: Update nightly mar signing key [mullvad-browser]
  • Bug 258: Rebase Mullvad Browser alpha onto 115.6.0esr [mullvad-browser]
  • Bug 42042: view-source:http://ip-address does not work because of HTTPS Only [tor-browser]
  • Bug 42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same! [tor-browser]
  • Bug 42335: Do not localize the order of locales for app lang [tor-browser]
  • Bug 41044: Add tbb_version.json-like file for Mullvad Browser [tor-browser-build]
  • Windows:
  • Bug 42163: Make the 3rd party DLL blocklist obey portable mode [tor-browser]
  • Linux:
  • Bug 41050: Improve disk leak sanitization on startup [tor-browser]
  • BUILD SYSTEM:
  • All Platforms:
  • Bug 40995: Use cdn.stagemole.eu instead of cdn.devmole.eu in download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
  • Bug 41026: Do not use ~ when uploading the signed hashes [tor-browser-build]
  • Bug 41027: Remove tb-build-04 and tb-build-05 from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
  • Bug 41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build]
  • Bug 41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them [tor-browser-build]
  • Bug 41041: Sign mullvad-browser nightly updates [tor-browser-build]
  • Bug 41042: Add options to include updates in the changelog scripts [tor-browser-build]
  • Bug 41043: Create script to push build requests to Mullvad build servers [tor-browser-build]
  • Windows + macOS:
  • Bug 41016: Switch from bullseye to bookworm for desktop platforms [tor-browser-build]
  • Windows:
  • Bug 41015: Enable std::filesystem on libc++ on Windows [tor-browser-build]
  • Bug 41030: Add command to unsign .exe files and compare with sha256sums-unsigned-build.txt [tor-browser-build]
  • macOS:
  • Bug 40990: Remove old macos signing scripts [tor-browser-build]

New in Mullvad Browser 13.0.6 (Dec 9, 2023)

  • ALL PLATFORMS:
  • Bug 42288: Allow language spoofing in status messages [tor-browser]
  • Updated uBlock Origin to 1.54.0
  • Linux:
  • Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
  • Bug 42306: Tor Browser crashes when extensions popups are opened with Wayland enabled [tor-browser]
  • Bug 41017: Disable Nvidia shader cache [tor-browser-build]
  • BUILD SYSTEM:
  • All Platforms:
  • Bug 41027: Remove tb-build-04 and tb-build-05 from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
  • Bug 40936: Revert tor-browser-build#40933 [tor-browser-build]
  • Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
  • Bug 40995: Use cdn.stagemole.eu instead of cdn.devmole.eu in download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
  • Bug 40063: RBM's chroot fails in Fedora [rbm]
  • Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]
  • Windows + macOS + Linux
  • Bug 41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build]
  • Windows:
  • Bug 41030: Add command to unsign .exe files and compare with sha256sums-unsigned-build.txt [tor-browser-build]

New in Mullvad Browser 13.5 Alpha 2 (Dec 2, 2023)

  • ALL PLATFORMS:
  • Updated Firefox to 115.5.0esr
  • Updated uBlock Origin to 1.54.0
  • Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
  • Bug 254: Rebase Mullvad Browser Alpha to 115.5.0esr [mullvad-browser]
  • Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser]
  • Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
  • Bug 42276: Rebase Browsers Alpha to 115.5.0esr [tor-browser]
  • Bug 42288: Allow language spoofing in status messages [tor-browser]
  • LINUX:
  • Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
  • Bug 41017: Disable Nvidia shader cache [tor-browser-build]
  • BUILD SYSTEMS:
  • All Platforms:
  • Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
  • Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
  • Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
  • Bug 40063: RBM's chroot fails in Fedora [rbm]
  • Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]
  • macOS:
  • Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
  • Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
  • Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
  • Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]

New in Mullvad Browser 13.0.4 (Nov 27, 2023)

  • ALL PLATFORMS:
  • Updated Firefox to 115.5.0esr
  • Updated uBlock Origin to 1.53.0
  • Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
  • Bug 253: Rebase Mullvad Browser Stable to 115.5.0esr [mullvad-browser]
  • Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
  • Windows + macOS:
  • Bug 42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows [tor-browser]
  • BUILD:
  • All platforms:
  • Bug 40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything [tor-browser-build]
  • Bug 40982: Fix logging in tools/signing/do-all-signing [tor-browser-build]
  • Bug 40989: Add .nobackup files to reproducible and disposable directores [tor-browser-build]
  • Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
  • macOS:
  • Bug 29815: Sign our macOS bundles on Linux [tor-browser-build]
  • Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
  • Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
  • Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
  • Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]

New in Mullvad Browser 13.5 Alpha 1 (Nov 6, 2023)

  • ALL PLATFORMS:
  • Updated Firefox to 115.4.0esr
  • Updated NoScript to 11.4.28
  • Bug 246: Add the last Mullvad Browser Extension (0.8.4) to 13.0 [mullvad-browser]
  • Bug 42182: Default Search Engine Does Not Persist Through Shift to New Identity [tor-browser]
  • Bug 42191: Backport security fixes (Android & wontfix) from Firefox 119 to 115.4 - based Tor Browser [tor-browser]
  • Windows + macOS:
  • Bug 42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows [tor-browser]
  • BUILD SYSTEM:
  • ALL PLATFORMS:
  • Bug 40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything [tor-browser-build]
  • Bug 40982: Fix logging in tools/signing/do-all-signing [tor-browser-build]
  • Bug 40983: Bump the various branches to 13.5 on main [tor-browser-build]
  • Bug 40989: Add .nobackup files to reproducible and disposable directores [tor-browser-build]
  • Windows:
  • Bug 40984: The PDBs for .exe are not included [tor-browser-build]
  • macOS:
  • Bug 29815: Sign our macOS bundles on Linux [tor-browser-build]

New in Mullvad Browser 13.0.1 (Oct 29, 2023)

  • ALL PLATFORMS:
  • Updated Firefox to 115.4.0esr
  • Bug 42182: Default Search Engine Does Not Persist Through Shift to New Identity [tor-browser]
  • Bug 42185: Rebase stable browsers on top of 115.4.0esr [tor-browser]
  • Bug 42191: Backport security fixes (Android & wontfix) from Firefox 119 to 115.4 - based Tor Browser [tor-browser]
  • BUILD SYSTEM:
  • Windows + Linux:
  • Bug 40991: Fix creation of downloads-windows-x86_64.json and downloads-linux-x86_64.json [tor-browser-build]
  • Windows:
  • Bug 40984: The PDBs for .exe are not included [tor-browser-build]

New in Mullvad Browser 13.0 (Oct 13, 2023)

  • CHANGELOG:
  • Updated Firefox to 115.3.1esr
  • Bug 40050: FF103 Audit [tor-browser-spec]
  • Bug 40051: FF104 Audit [tor-browser-spec]
  • Bug 40052: FF105 Audit [tor-browser-spec]
  • Bug 40053: FF106 Audit [tor-browser-spec]
  • Bug 40054: FF107 Audit [tor-browser-spec]
  • Bug 40055: FF108 Audit [tor-browser-spec]
  • Bug 40056: FF109 Audit [tor-browser-spec]
  • Bug 40057: FF110 Audit [tor-browser-spec]
  • Bug 40058: FF111 Audit [tor-browser-spec]
  • Bug 40059: FF112 Audit [tor-browser-spec]
  • Bug 40060: FF113 Audit [tor-browser-spec]
  • Bug 40061: FF114 Audit [tor-browser-spec]
  • Bug 40062: FF115 Audit [tor-browser-spec]
  • Bug 66: Localize Mullvad Browser [mullvad-browser]
  • Bug 166: Enable built-in URL anti-tracking query parameters stripping [mullvad-browser]
  • Bug 175: Change the default start window size from 1000x1000 [mullvad-browser]
  • Bug 177: Change help links in about:preferences and menu [mullvad-browser]
  • Bug 183: Rebase Mullvad Browser to Firefox 115 [mullvad-browser]
  • Bug 195: Choose which locales to translate Mullvad Browser to [mullvad-browser]
  • Bug 196: Enumerate Mullvad Browser-specific strings for localization [mullvad-browser]
  • Bug 199: Mullvad Browser changes required to use Mullvad Browser-specific localization strings [mullvad-browser]
  • Bug 208: Improve letterboxing's dimensions [mullvad-browser]
  • Bug 211: Change "Mullvad Browser Home" to "New tab" [mullvad-browser]
  • Bug 213: Add search engines to the default list [mullvad-browser]
  • Bug 214: Enable cross-tab identity leak protection in "quiet" mode [mullvad-browser]
  • Bug 215: Update re-adds manually removed default toolbar buttons [mullvad-browser]
  • Bug 218: uBO and Mullvad Browser Extension hidden in unified extensions panel [mullvad-browser]
  • Bug 220: "Firefox Suggest" string appears when search matches a bookmark [mullvad-browser]
  • Bug 223: Trademarks in the about popup are not translated [mullvad-browser]
  • Bug 226: First window after update should go to the user-friendly release page on GitHub [mullvad-browser]
  • Bug 228: Remove popup asking for preferred language on websites [mullvad-browser]
  • Bug 231: Fix the Security Level "read more" link in popup/settings panel [mullvad-browser]
  • Bug 243: Make sure about:mullvadbrowser is treated as a new tab page [mullvad-browser]
  • Bug 26277: When "Safest" setting is enabled searching using duckduckgo should always use the Non-Javascript site for searches [tor-browser]
  • Bug 30556: Re-evaluate letterboxing dimension choices [tor-browser]
  • Bug 33282: Increase the max width of new windows [tor-browser]
  • Bug 33955: Selecting "Copy image" from menu leaks the source URL to the clipboard. This data is often dereferenced by other applications. [tor-browser]
  • Bug 41327: Disable UrlbarProviderInterventions [tor-browser]
  • Bug 41477: Review some extensions.- preferences [tor-browser]
  • Bug 41496: Review 000-tor-browser.js and 001-base-profile.js for 115 [tor-browser]
  • Bug 41528: Hard-coded English "based on Mozilla Firefox" appears in version in "About" dialog [tor-browser]
  • Bug 41576: ESR115: ensure no remote calls for weather & addon suggestions [tor-browser]
  • Bug 41581: ESR115: figure out extension pinning / unified Extensions [tor-browser]
  • Bug 41642: Do not hide new PBM in the hamburger menu if auto PBM is not enabled [tor-browser]
  • Bug 41675: Remove javascript.options.large_arraybuffers [tor-browser]
  • Bug 41691: "Firefox Suggest" text appearing in UI [tor-browser]
  • Bug 41727: WebRTC privacy-hardening settings [tor-browser]
  • Bug 41739: Remove "Website appearance" [tor-browser]
  • Bug 41740: ESR115: change devicePixelRatio spoof to 2 in alpha for testing [tor-browser]
  • Bug 41752: Review changes done by Bug 41565 [tor-browser]
  • Bug 41765: TTP-02-006 WP1: Information leaks via custom homepage (Low) [tor-browser]
  • Bug 41774: Hide the new "Switching to a new device" help menu item [tor-browser]
  • Bug 41791: Copying page contents also puts the source URL on the clipboard [tor-browser]
  • Bug 41797: Lock RFP in release builds [tor-browser]
  • Bug 41833: Reload extensions on new identity [tor-browser]
  • Bug 41834: Hide "Can't Be Removed - learn more" menu line for uninstallable add-ons [tor-browser]
  • Bug 41874: Visual & A11 regressions in add-on badges [tor-browser]
  • Bug 41876: Remove Firefox View from title bar [tor-browser]
  • Bug 41877: NoScript seems to be blocking by default in the first 115-based testbuild [tor-browser]
  • Bug 41881: Developer tools/Network/New Request remembers requests [tor-browser]
  • Bug 41903: The info icon on the language change prompt is not shown [tor-browser]
  • Bug 41936: Review Mozilla 1770158: Use double-conversion library instead of dtoa for string-to-double conversion [tor-browser]
  • Bug 41937: Review Mozilla 1780014: Add specific telemetry for conservative and first-try handshakes [tor-browser]
  • Bug 41938: Review Mozilla 1769994: On systems with IPv6 preferred DNS resolution clients will fail to connect when "localhost" is used as host for the WebSocket server [tor-browser]
  • Bug 41939: Review Mozilla 1728871: Support fetching data from Remote Setting [tor-browser]
  • Bug 41940: Review Mozilla 1739348: When a filetype is set to "always ask" and the user makes a save/open choice in the dialog, we should not also open the downloads panel [tor-browser]
  • Bug 41941: Review Mozilla 1775254: Improve Math.pow accuracy for large exponents [tor-browser]
  • Bug 41943: Lock javascript.options.spectre.disable_for_isolated_content to false [tor-browser]
  • Bug 41945: Review Mozilla 1783019: Add a cookie banner service to automatically handle website cookie banners [tor-browser]
  • Bug 41946: Review Mozilla 1782579: Add a locale parameter to the text recognition API [tor-browser]
  • Bug 41947: Review Mozilla 1779005: Broken since Firefox 102.0: no instant fallback to direct connection when proxy became unreachable while runtime [tor-browser]
  • Bug 41949: Review Mozilla 1782578: Implement a context menu modal for text recognition [tor-browser]
  • Bug 41950: Review Mozilla 1788668: Add the possibility to check that the clipboard contains some pdfjs stuff [tor-browser]
  • Bug 41951: Review Mozilla 1790681: Enable separatePrivateDefault by default [tor-browser]
  • Bug 41959: Review Mozilla 1795944: Remove descriptionheightworkaround [tor-browser]
  • Bug 41961: Review Mozilla 1798868: Hide cookie banner handling UI by default [tor-browser]
  • Bug 41969: Review Mozilla 1746983: Re-enable pingsender2 [tor-browser]
  • Bug 41970: Review Mozilla 17909270: WebRTC bypasses Network settings & proxy.onRequest [tor-browser]
  • Bug 41973: Custom wingpanels don't line up with their toolbar icons in 13.0 alpha [tor-browser]
  • Bug 41981: Review Mozilla 1800675: Add about:preferences entry for cookie banner handling [tor-browser]
  • Bug 41983: Review Mozilla 1770447: Create a reusable "support-link" widget [tor-browser]
  • Bug 41984: Rename languageNotification.ftl to base-browser.ftl [tor-browser]
  • Bug 42013: Review Mozilla 1834374: Do not call EmptyClipboard() in nsBaseClipboard destructor [tor-browser]
  • Bug 42014: Review Mozilla 1832791: Implement a Remote Settings for the Quarantined Domains pref [tor-browser]
  • Bug 42015: Review Mozilla 1830890: Keep a history window of WebRTC stats for about:webrtc [tor-browser]
  • Bug 42019: Empty browser's clipboard on browser shutdown [tor-browser]
  • Bug 42022: Prevent extension search engines from breaking the whole search system [tor-browser]
  • Bug 42026: Disable cookie banner service and UI. [tor-browser]
  • Bug 42027: Create a Base Browser version of migrateUI [tor-browser]
  • Bug 42029: Defense-in-depth: disable non-proxied UDP WebRTC [tor-browser]
  • Bug 42037: Disable about:firefoxview [tor-browser]
  • Bug 42043: Disable gUM: media.devices.enumerate.legacy.enabled [tor-browser]
  • Bug 42046: Remove XUL layout hacks from base browser [tor-browser]
  • Bug 42050: Bring back Save As... dialog as default [tor-browser]
  • Bug 42061: Move the alpha update channel creation to a commit on its own [tor-browser]
  • Bug 42083: RemoteSecuritySettings.init throws error in console [tor-browser]
  • Bug 42084: Race condition with language preferences may make spoof_english ineffective [tor-browser]
  • Bug 42094: Disable media.aboutwebrtc.hist.enabled as security in-depth [tor-browser]
  • Bug 42138: Disable apz.overscroll.enabled pref [tor-browser]
  • Bug 42159: Responsive Design Mode not working correctly [tor-browser]
  • Bug 42166: New identity dialog missing accessible name [tor-browser]
  • Bug 42167: Make the preference auto-focus more reliable [tor-browser]
  • Bug 40893: Update (Noto) fonts for 13.0 [tor-browser-build]
  • Bug 40924: Customize MOZ_APP_REMOTINGNAME instead of passing --name and --class [tor-browser-build]
  • Bug 40937: First window after update should go to the user-friendly release page on GitHub [tor-browser-build]
  • WINDOWS:
  • Bug 40737: Revert backout of Mozilla's fix for bug 1724777 [tor-browser]
  • Bug 41798: Stop building private_browsing.exe on Windows [tor-browser]
  • Bug 41806: Prevent Private Browsing start menu item to be added automatically [tor-browser]
  • Bug 41942: Review Mozilla 1682520: Use the WER runtime exception module to catch early crashes [tor-browser]
  • Bug 41944: Review Mozilla 1774083: Add Surrogate COM Server to handle native Windows notifications when Firefox is closed. [tor-browser]
  • Bug 42008: Review Mozilla 1808146: Copying images from Pixiv and pasting them in certain programs is broken [tor-browser]
  • Bug 42010: Review Mozilla 1810641: Enable overscroll on Windows on all channels [tor-browser]
  • Bug 40930: Upate zlib to 1.3 after 13.0a3 [tor-browser-build]
  • macOS:
  • Bug 41948: Review Mozilla 1782981: Hide the text recognition context menu if the macOS version doesn't support APIs [tor-browser]
  • Bug 41982: Review Mozilla 1762392: Add Cocoa platform support for paste files [tor-browser]
  • Bug 42057: Disable Platform text-recognition functionality [tor-browser]
  • Bug 42147: Add browser.helperApps.deleteTempFileOnExit to our profile [tor-browser]
  • LINUX:
  • Bug 225: Right Click - New Tab on link does nothing [mullvad-browser]
  • Bug 41884: Linux: set browser.tabs.searchclipboardfor.middleclick to false [tor-browser]
  • Bug 40576: Fontconfig warning: remove 'blank' configuration [tor-browser-build]
  • BUILD SYSTEM:
  • All Platforms:
  • Bug 180: Change the naming scheme of the installers at build time [mullvad-browser]
  • Bug 197: Develop Crowdin to Gitlab translations repo pipeline [mullvad-browser]
  • Bug 198: Enable localization for Mullvad Browser builds [mullvad-browser]
  • Bug 31588: Be smarter about vendoring for Rust projects [tor-browser-build]
  • Bug 40089: Clean up usage of get-moz-build-date script [tor-browser-build]
  • Bug 40149: Remove patching of nightly update URL [tor-browser-build]
  • Bug 40410: Get rid of python2 [tor-browser-build]
  • Bug 40487: Bump Python version [tor-browser-build]
  • Bug 40615: Consider adding a readme to the fonts directory [tor-browser-build]
  • Bug 40802: Drop the patch for making WASI reproducible [tor-browser-build]
  • Bug 40829: Review and standardize naming scheme for browser installer/package artifacts [tor-browser-build]
  • Bug 40855: Update toolchains for Mozilla 115 [tor-browser-build]
  • Bug 40868: Bump Rust to 1.69.0 [tor-browser-build]
  • Bug 40880: The README doesn't include some dependencies needed for building incrementals [tor-browser-build]
  • Bug 40886: Update README with instructions for Arch linux [tor-browser-build]
  • Bug 40898: Add doc from tor-browser-spec/processes/ReleaseProcess to gitlab issue templates [tor-browser-build]
  • Bug 40907: Sometimes debug information are not deterministic with Clang 16.0.4 [tor-browser-build]
  • Bug 40916: Update updated_responses_config.yml to pull Mullvad incrementals from archive.torproject.org [tor-browser-build]
  • Bug 40922: Use base-browser.ftl instead of languageNotification.ftl [tor-browser-build]
  • Bug 40931: Fix incrementals after tor-browser-build#40829 [tor-browser-build]
  • Bug 40932: Remove appname_bundle_android, appname_bundle_macos, appname_bundle_linux, appname_bundle_win32, appname_bundle_win64 from projects/release/update_responses_config.yml [tor-browser-build]
  • Bug 40933: Fix generating incrementals between 12.5.x and 13.0 [tor-browser-build]
  • Bug 40935: Fix fallout from build target rename in signing scripts [tor-browser-build]
  • Bug 40942: Use the branch to build Base Browser [tor-browser-build]
  • Bug 40944: After #40931, updates_responses is using incremental.mar files as if they were non-incremental mar files [tor-browser-build]
  • Bug 40946: override_updater_url does not work for Mullvad Browser [tor-browser-build]
  • Bug 40947: Remove migrate_langs from tools/signing/nightly/update-responses-base-config.yml [tor-browser-build]
  • Bug 40956: Allow testing the updater also with release and alpha channel [tor-browser-build]
  • Bug 40957: Expired subkey warning on Tor Browser GPG verification [tor-browser-build]
  • Bug 40972: Handle Mullvad Browser in the changelog script and group entries by project [tor-browser-build]
  • Windows:
  • Bug 41995: Generated headers on Windows aren't reproducible [tor-browser]
  • Bug 40832: Unify mingw-w64-clang 32+64 bits [tor-browser-build]
  • Bug 40940: Change position of the install|portable in the builds filenames [tor-browser-build]
  • macOS:
  • Bug 40943: Update libdmg-hfsplus to include our uplifted patch [tor-browser-build]
  • Linux:
  • Bug 40102: Move from Debian Jessie to Debian Stretch for our Linux builds [tor-browser-build]

New in Mullvad Browser 12.5.6 (Oct 3, 2023)

  • ALL PLATFORMS:
  • Bug 42135: Backport security fixes from Firefox 115.3.1 to
  • BUILD SYSTEM:
  • All Platforms
  • Bug 40957: Update subkey expiration date for Tor Browser gpg key

New in Mullvad Browser 13.0a5 Alpha (Sep 27, 2023)

  • Updated Translations:
  • Updated Firefox to 115.3.0esr
  • Bug 228: Remove popup asking for preferred language on websites [mullvad-browser]
  • Bug 238: Rebase Mullvad Browser to 115.3.0esr [mullvad-browser]
  • Bug 40893: Update (Noto) fonts for 13.0 [tor-browser-build]
  • Bug 41327: Disable UrlbarProviderInterventions [tor-browser]
  • Bug 41581: ESR115: figure out extension pinning / unified Extensions [tor-browser]
  • Bug 41903: The info icon on the language change prompt is not shown [tor-browser]
  • Bug 42026: Disable cookie banner service and UI. [tor-browser]
  • Bug 42037: Disable about:firefoxview [tor-browser]
  • Bug 42083: RemoteSecuritySettings.init throws error in console [tor-browser]
  • Bug 42094: Disable media.aboutwebrtc.hist.enabled as security in-depth [tor-browser]
  • Windows:
  • Bug 41798: Stop building private_browsing.exe on Windows [tor-browser]
  • Build System:
  • All Platforms:
  • Bug 40956: Allow testing the updater also with release and alpha channel [tor-browser-build]
  • Windows:
  • Bug 41995: Generated headers on Windows aren't reproducible [tor-browser]

New in Mullvad Browser 12.5.5 (Sep 27, 2023)

  • All Platforms:
  • Updated NoScript to 11.4.27
  • Upated uBlock Origin to 1.52.2
  • Bug 42123: Backport security fixes from Firefox 118 to ESR 102.15 / 115.3 - based Tor Browser [tor-browser]

New in Mullvad Browser 12.5.4 (Sep 14, 2023)

  • Updated Firefox to 102.15.1esr
  • Updated Translations
  • Bug 235: Rebase release onto 102.15.1 ESR [mullvad-browser]
  • Bug 42084: Race condition with language preferences may make spoof_english ineffective [tor-browser]

New in Mullvad Browser 12.5.3 (Sep 1, 2023)

  • All Platforms:
  • Updated Translations
  • Updated Firefox to 102.15.0esr
  • Bug 232: Rebase Mullvad Browser stable onto 102.15 [mullvad-browser]
  • Bug 42053: Backport security fixes from Firefox 117 to ESR 102.15 - based Tor Browser [tor-browser]
  • Bug 40937: First window after update should go to the user-friendly release page on GitHub [tor-browser-build]
  • Build System:
  • Bug 40857: Mullvad Browser generated downloads.json references tbb-* build tag rather than mb-* [tor-browser-build]
  • Bug 40913: add boklm back to list of taggers in relevant projects [tor-browser-build]
  • Bug 40921: staticiforme-prepare-cdn-dist-upload uses hardcoded torbrowser path for .htacess file generation [tor-browser-build]

New in Mullvad Browser 13.0a3 Alpha (Aug 25, 2023)

  • ALL PLATFORMS:
  • Updated NoScript to 11.4.26
  • Upated uBlock Origin to 1.51.0
  • Updated Firefox to 115.1.0esr
  • Bug 195: Choose which locales to translate Mullvad Browser to [mullvad-browser]
  • Bug 216: Rebase Mullvad Browser onto 115.1.0esr [mullvad-browser]
  • Bug 30556: Re-evaluate letterboxing dimension choices [tor-browser]
  • Bug 33282: Increase the max width of new windows [tor-browser]
  • Bug 40916: Update updated_responses_config.yml to pull Mullvad incrementals from archive.torproject.org [tor-browser-build]
  • BUILD SYSTEM:
  • All Platforms:
  • Bug 198: Enable localization for Mullvad Browser builds [mullvad-browser]
  • Bug 199: Mullvad Browser changes required to use Mullvad Browser-specific localization strings [mullvad-browser]
  • Bug 40615: Consider adding a readme to the fonts directory [tor-browser-build]
  • Bug 40880: The README doesn't include some dependencies needed for building incrementals [tor-browser-build]
  • Bug 40907: Mar-tools aren't deterministic on 13.0a1 [tor-browser-build]
  • Bug 40909: Add dan_b and ma1 to list of taggers in relevant projects [tor-browser-build]
  • Bug 40913: add boklm back to list of taggers in relevant projects [tor-browser-build]

New in Mullvad Browser 12.5.2 (Aug 7, 2023)

  • ALL PLATFORMS:
  • Updated NoScript to 11.4.26
  • Updated uBlock Origin to 1.51.0
  • Updated Firefox to 102.14.0esr
  • Bug 217: Rebase Mullvad Browser 12.5 stable on top of 102.14esr
  • BUILD SYSTEM:
  • All Platforms:
  • Bug 40889: Add mullvad sha256sums URL to tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
  • Bug 40894: Fix format of keyring/boklm.gpg [tor-browser-build]
  • Bug 40909: Add dan_b and ma1 to list of taggers in relevant projects
  • Windows:
  • Bug 31546: Create and expose PDB files for Tor Browser debugging on Windows [tor-browser-build]

New in Mullvad Browser 12.5.1 (Jul 6, 2023)

  • All Platforms:
  • Updated Firefox to 102.13.0esr
  • Bug 192: Rebase Mullvad Browser 12.5 stable on top of 102.13esr [mullvad-browser]
  • Bug 41854: Download Spam Protection cannot be overridden to allow legitimate downloads [tor-browser]

New in Mullvad Browser 12.5 (Jun 28, 2023)

  • ALL PLATFORMS:
  • Updated uBlock Origin to 1.50.0
  • Updated mullvad-browser-extension to version 0.8.3
  • WINDOWS + MACOS + LINUX:
  • Bug 41577: Disable profile migration [tor-browser]
  • Bug 41595: Disable pagethumbnails capturing [tor-browser]
  • Bug 41609: Move the disabling of Firefox Home (Activity Stream) to base-browser [tor-browser]
  • Bug 41668: Move part of the updater patches to base browser [tor-browser]
  • Bug 41686: Move the 'Bug 11641: Disable remoting by default' commit from base-browser to tor-browser [tor-browser]
  • Bug 41695: Port warning on maximized windows without letterboxing from torbutton [tor-browser]
  • Bug 41701: Reporting an extension does not work [tor-browser]
  • Bug 41711: Race condition when opening a new window in New Identity [tor-browser]
  • Bug 41736: Customize the default CustomizableUI toolbar using CustomizableUI.jsm [tor-browser]
  • Bug 41738: Replace the patch to disable live reload with its preference [tor-browser]
  • Bug 41775: Avoid re-defining some macros in nsUpdateDriver.cpp [tor-browser]
  • WINDOWS + LINUX:
  • Bug 41654: UpdateInfo jumped into Data [tor-browser]
  • LINUX:
  • Bug 40860: Improve the transition from the old fontconfig file to the new one [tor-browser-build]
  • Bug 41163: Many bundled fonts are blocked in Ubuntu/Fedora because of RFP [tor-browser]
  • Bug 41732: implement linux font whitelist as defense-in-depth [tor-browser]
  • BUILD SYSTEMS:
  • All Platforms:
  • Bug 40837: Rebase mullvad-browser build changes onto main [tor-browser-build]
  • Bug 40870: Remove url without browser name from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
  • Windows + macOS + Linux:
  • Bug 40826: Correctly set appname_marfile for basebrowser in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build]
  • Bug 40866: Remove Using ansible to set up a nightly build machine from README [tor-browser-build]
  • macOS:
  • Bug 40858: Create script to assist testers self sign Mac builds to allow running on Arm processors [tor-browser-build]

New in Mullvad Browser 12.5 Alpha 7 Pre-release (Jun 19, 2023)

  • Updated NoScript to 11.4.22
  • Bug 41795: Rebase Tor Browser and Base Browser alpha to 102.12esr

New in Mullvad Browser 12.0.7 (Jun 10, 2023)

  • All Platforms:
  • Rebase Mullvad Browser Stable to 102.12.0esr
  • BTTP-02-004 OOS: No user-activation required to download files
  • warning Please note that there are no Mullvad Browser 12.0.7 installers for Windows, as there's been an issue with the renewal of the certificate used for the code-signing.

New in Mullvad Browser 12.0.6 (May 17, 2023)

  • Bug 176: Rebase Mullvad Browser Stable to 102.11.0esr
  • Please note that there are no Mullvad Browser 12.0.6 installers for Windows, as there's been an issue with the renewal of the certificate used for the code-signing.
  • Windows users will need to do an automatic update from 12.0.4 to 12.0.6.

New in Mullvad Browser 12.0.5 (May 5, 2023)

  • All Platforms:
  • Updated Firefox to 102.10esr
  • Updated NoScript to 11.4.21
  • Updated Go to 11.9.8
  • Bug 109: Update pre-configured DoH URLs
  • Bug 158: Enable Adguard URL Tracking Protection and EasyList Cookie by default #8
  • Bug 163: Prevent uBlock Origin from being removed/disabled
  • Bug 155: Fix the Security Level "read more" link in popup/settings panel #9
  • Bug 160: Disable the cookie exceptions button in Private Browsing Mode
  • Bug 165: Fix maximization warning x button and preference #44
  • Build System update
  • macOS:
  • Bug 40844: Fix DMG reproducibility problem on 12.0.5
  • WARNING: Please note that there are no Mullvad Browser 12.0.5 builds for Windows, as there's been an issue with the renewal of the certificate used for the code-signing.
  • Windows users will need to do an automatic update from 12.0.4 to 12.0.5.