Decentralized & P2P

Tor Browser 16.0.2 for Android fixes zlib dynamic linking regression

Key Takeaway

The Android-only Tor Browser 16.0.2 resolves a platform-specific breakage where the bundled tor daemon incorrectly linked against the system's dynamic zlib library instead of the expected static build.

Summary

Tor Browser 16.0.2 has been released exclusively for Android, addressing a regression introduced in version 16.0.1 where the tor daemon was built against the system's dynamic zlib rather than statically linking the intended version. This caused functional breakage on the Android platform. The fix, tracked as tor-browser-build#41919, restores proper zlib linkage behavior. Desktop platforms were unaffected by this issue and do not require this update.

The release is available through the Tor Browser download page and the project's distribution directory. No security vulnerabilities or CVEs are associated with this fix; it is purely a build-system correction for Android packaging.

Android build system fix

  • Dynamic vs. static zlib linkage: Tor Browser 16.0.1 for Android inadvertently picked up dynamic zlib linking for the tor daemon, deviating from the intended static build configuration.
  • Platform scope: The regression was strictly limited to Android; all other platforms maintained correct zlib linkage and are unaffected.
  • Build tracking: The fix is documented under tor-browser-build#41919 in the project's issue tracker.
  • No security classification: This release addresses a functional breakage, not a security vulnerability or privilege escalation vector.

Why it matters

For Android users relying on Tor Browser for anonymous browsing, this release restores expected functionality without requiring manual workarounds. The incident highlights the fragility of cross-platform build systems when system library detection behaves differently across target platforms, a concern relevant to distributors packaging tor or similar network tools for mobile Linux environments.

Original reference: blog.torproject.org →