Here is Mozilla on the vulnerability: [1] https://blog.mozilla.org/security/2013/08/04/investigating-security-vulnerability-report/ https://blog.mozilla.org/sec

Here is Mozilla on the vulnerability: [1] https://blog.mozilla.org/security/2013/08/04/investigating-security-vulnerability-report/ https://blog.mozilla.org/security/2013/08/04/investigating-s... It would seem that Tor released Tor Browser Bundle (TBB) with 17.0.7 on the 26th of June: [2] https://blog.torproject.org/blog/new-tor-browser-bundles-and-tor-02414-alpha-packages https://blog.torproject.org/blog/new-tor-browser-bundles-and... (note: lack of an Obfsproxy bundle!) 17.0.7 is the Firefox with the patch for the JS bug that was exploited, assuming [1] is correct. IF this was what is exploited, then it would seem that the latest non-obfsproxy Tor Broswer Bundle [2] will be ok. It seems that Tor released a new TBB the day after upstream Firefox vulnerability was patched. Double check though. Here's what seems to be the original security advisory [3] http://www.mozilla.org/security/announce/2013/mfsa2013-53.html http://www.mozilla.org/security/announce/2013/mfsa2013-53.ht... Also, Tor have responded here: [4] https://blog.torproject.org/blog/hidden-services-current-events-and-freedom-hosting https://blog.torproject.org/blog/hidden-services-current-eve...