Tor Browser 3.6.4 and 4.0-alpha-1 are released

The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked.

The Tor Browser lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is self-contained.

Here is the complete changelog for 3.6.4:

Tor Browser 3.6.4 -- All Platforms

Update Tor to 0.2.4.23
Update Tor launcher to 0.2.5.6
Update OpenSSL to 1.0.1i
Backported Tor Patches:

Bug 11654: Properly apply the fix for malformed bug11156 log message
Bug 11200: Fix a hang during bootstrap introduced in the initial
bug11200 patch.

Update NoScript to 2.6.8.36

Bug 9516: Send Tor Launcher log messages to Browser Console

Update Torbutton to 1.6.11.1

Bug 11472: Adjust about:tor font and logo positioning to avoid overlap
Bug 12680: Fix Torbutton about url.

In addition, we are also releasing the first alpha of the 4.0 series.

This alpha paves the way to our upcoming autoupdater by reorganizing the directory structure of the browser. This means that in-place upgrades from Tor Browser 3.6 (by extracting/copying over the old directory) will not work.

This release also features Tor 0.2.5.6, and some new defaults for NoScript to make the script permissions for a given url bar domain automatically cascade to all third parties by default (though this may be changed in the NoScript configuration).

Tor Browser 4.0-alpha-1 -- All Platforms

Ticket 10935: Include the Meek Pluggable Transport (version 0.10)

Two modes of Meek are provided: Meek over Google and Meek over Amazon

Update Firefox to 24.7.0esr
Update Tor to 0.2.5.6-alpha
Update OpenSSL to 1.0.1i
Update NoScript to 2.6.8.36

Script permissions now apply based on URL bar

Update HTTPS Everywhere to 5.0development.0
Update Torbutton to 1.6.12.0
- Bug 12221: Remove obsolete Javascript components from the toggle era
- Bug 10819: Bind new third party isolation pref to Torbutton security UI
- Bug 9268: Fix some window resizing corner cases with DPI and taskbar size.
- Bug 12680: Change Torbutton URL in about dialog.
- Bug 11472: Adjust about:tor font and logo positioning to avoid overlap
- Bug 9531: Workaround to avoid rare hangs during New Identity
Update Tor Launcher to 0.2.6.2

Bug 11199: Improve behavior if tor exits
Bug 12451: Add option to hide TBB's logo
Bug 11193: Change "Tor Browser Bundle" to "Tor Browser"
Bug 11471: Ensure text fits the initial configuration dialog
Bug 9516: Send Tor Launcher log messages to Browser Console