Skip to content

Software Changelog

Release-by-release summaries of the anonymity tools our community follows, plus the operating systems people run them on. Routine point releases accumulate here as compact entries. Major events (security audits, architectural shifts, region-specific implications) get full posts in Updates.

Recent updates

Data as of 2026-09-27, refreshed each time the site is rebuilt

RSS: Subscribe to "All"Subscribe to "iPhone and iPad"Subscribe to "Mac"Subscribe to "Windows"Subscribe to "Linux"Subscribe to "Android"Subscribe to "Tails"Subscribe to "Running relays or onion services"Subscribe to "Censorship measurement" · Subscribe to Now and Soon only

Needs action

The latest entry from each page with urgency ratings (one per product where a page covers two), listing only Now and Soon. Each page rates urgency on a different basis, noted after the date on every item.

Last 45 days

Every entry from all pages in this period, newest first.

Where to start

Most people need three pages: the Tor changelog, browser security updates, plus whichever one matches their device (iOS for iPhone, macOS for Mac, Windows for a PC, Android for an Android phone). The rest serve specific needs, such as running your own relay, switching transports when blocked, or doing censorship measurement.

Pages marked "with urgency ratings" use three-colour tags to answer how fast to act. The basis for those ratings is not identical across pages and is explained at the top of each one. Pages without tags track progress or features, and ask no update decision of you.

Most of our release translations begin life in zh-TW and reach English on a rolling basis, so these English pages carry fewer entries than the Chinese versions. Every entry links back to the upstream announcement.

Security contacts in organisations

In NGOs, newsrooms, community groups and small teams, one person often ends up reminding everyone to update. Upstream announcements are scattered across a dozen places, each with its own vocabulary. This page puts them on one rating scale, so that person can turn them into reminders the team understands in a few minutes a month.

Start by listing the devices and tools your team actually uses. Find the matching options under Recent updates, subscribe to those RSS feeds, and add "Subscribe to Now and Soon only". A feed reader or a subscription bot in your team chat will both work, and new entries arrive as soon as they are published. The inventory only needs device types and system versions. Do not record who uses Tor or other anonymity tools; a leak of that list does more harm than a missed reminder.

When something is rated Now, pass it on to the people affected the same day. Say which devices and versions are affected, which version to update to and where to check the installed version, and include the link to the entry (every entry heading has its own URL). Linking beats restating numbers: Microsoft and Apple keep revising their advisories after release, and the entries here are updated to match. Before forwarding, check the basis and audience after each item. A Now on tor daemon, for example, only concerns people running relays and onion services, and sending it to the whole team will make everyone think their own computer has a problem.

Soon ratings and untagged updates can wait for a regular slot, such as a weekly meeting or a monthly internal newsletter. Tor Browser stable now ships roughly every two weeks, so asking people to accept the update prompt whenever it appears works better than relaying each release.

To confirm updates are done, ask members to check their own version numbers rather than report to a central spreadsheet. Where to look is covered in Which release line is your device on for iOS, Three maintenance lines for macOS and First, check how far behind your device is for Android. Flag devices that no longer receive security updates during the inventory and plan to replace them, as no future Now update will cover them.

When briefing managers or partner organisations, cite the upstream announcement each entry links to. The content here is a summary, and upstream numbers take precedence.

Browsers and messaging apps

The two kinds of software that handle unfamiliar content all day, summarised by month or by advisory and focused on whether anything is being exploited and which version to update to.

  • Browser security updates — Chrome and Firefox, with urgency ratings Latest: Chrome September 2026 · 2026-09-22Latest: Firefox September 2026 · 2026-09-15
  • Messaging app security updates — WhatsApp and Signal, with urgency ratings Latest: WhatsApp May 2026 · 2026-05-01

Anonymity tools

Condensed release-by-release from upstream changelogs, keeping version numbers and issue references.

  • Tor changelog — Tor Browser stable and alpha channels Latest: Tor Browser 15.0.23 · 2026-09-15
  • tor daemon changelog — c-tor security releases, for relay and onion service operators (with urgency ratings) Latest: tor 0.4.9.13 · 2026-09-23
  • anti-censorship transports changelog — Snowflake, WebTunnel, obfs4: what to switch to when Tor is blocked Latest: WebTunnel 0.0.7 · 2026-09-15
  • Arti changelog — Tor Project's Rust implementation, still in development and not yet something general readers use Latest: Arti 2.6.0 · 2026-09-01
  • OONI changelog — OONI Probe and the measurement engine, for people doing censorship measurement Latest: OONI Probe 6.2.0 · 2026-08-13
  • OnionShare changelog — OnionShare file sharing and onion sites (with urgency ratings) Latest: OnionShare 2.6.5 · 2026-07-28

Operating systems

Your device is part of the attack surface. This group skips the line-by-line translation and answers "do you need to update now" instead. Android and GrapheneOS are the exceptions: upstream detail is unavailable for the former and the latter updates automatically, as each page explains.

  • Tails changelog — Tails operating system (with urgency ratings) Latest: Tails 7.13 · 2026-09-16
  • iOS security updates — iPhone and iPad, with urgency ratings and older-model support Latest: iOS 27, iPadOS 27 (26.7 shipped the same day) · 2026-09-14
  • macOS security updates — Mac, with urgency ratings and the state of the three maintenance lines Latest: macOS Golden Gate 27 (Tahoe 26.7 and Sequoia 15.8 shipped the same day) · 2026-09-14
  • Windows security updates — monthly Patch Tuesday with urgency ratings, sorted by desktop versus server impact Latest: September 2026 · 2026-09-08
  • GrapheneOS monthly summary — hardened Android on Pixel, aggregated by month Latest: September 2026 · 2026-09-19
  • Android security patch levels — monthly patch levels and CVE counts, and how to check how far behind your device is Latest: September 2026 · 2026-09-05