Greetings,
We have just put out a security release of C-tor:
https://forum.torproject.org/t/security-release-0-4-8-9/10155
Here is the changelog.
Cheers!
Changes in version 0.4.8.9 - 2023-11-09
This is another security release fixing a high severity bug affecting onion
services which is tracked by TROVE-2023-006. We are also releasing a guard
major bugfix as well. If you are an onion service operator, we strongly
recommend to update as soon as possible.
o Major bugfixes (guard usage):
- When Tor excluded a guard due to temporary circuit restrictions,
it considered *additional* primary guards for potential usage by
that circuit. This could result in more than the specified number
of guards (currently 2) being used, long-term, by the tor client.
This could happen when a Guard was also selected as an Exit node,
but it was exacerbated by the Conflux guard restrictions. Both
instances have been fixed. Fixes bug 40876; bugfix
on 0.3.0.1-alpha.
o Major bugfixes (onion service, TROVE-2023-006):
- Fix a possible hard assert on a NULL pointer when recording a
failed rendezvous circuit on the service side for the MetricsPort.
Fixes bug 40883; bugfix on 0.4.8.1-alpha
o Minor features (fallbackdir):
- Regenerate fallback directories generated on November 09, 2023.
o Minor features (geoip data):
- Update the geoip files to match the IPFire Location Database, as
retrieved on 2023/11/09.
--
t7qMgZ+4ZWHcUKLU6S12UPw6gttdkJVfcSjOX8+FeL8=
Hi everyone,
Tor Browser 13.0a6 has now been published for all platforms. For details please see our blog post:
- https://blog.torproject.org/new-alpha-release-tor-browser-130a6/
This is our first release candidate build for the stable 13.0 series, so please have a go and kick
the tires a bit :)
best
-richard
Greetings,
We have just released 0.4.8.7. Here is the announcement:
https://forum.torproject.org/t/stable-release-0-4-8-7/9398
ChangLog follows.
Cheers!
David
Changes in version 0.4.8.7 - 2023-09-25
This version fixes a single major bug in the Conflux subsystem on the client
side. See below for more information. The upcoming Tor Browser 13 stable will
pick this up.
o Major bugfixes (conflux):
- Fix an issue that prevented us from pre-building more conflux sets
after existing sets had been used. Fixes bug 40862; bugfix
on 0.4.8.1-alpha.
o Minor features (fallbackdir):
- Regenerate fallback directories generated on September 25, 2023.
o Minor features (geoip data):
- Update the geoip files to match the IPFire Location Database, as
retrieved on 2023/09/25.
--
q7T6mD1nbFk9Jyq4XrI3UyeWs0AZbQIAhaHpiWYf6Dg=