[RELEASE] Tor 0.4.8.20 stable - Security Fixes
Greetings, We just released 0.4.8.20 containing two security medium severity fixes affecting Exit relays mostly. As of this announcement, our Debian packages are available at https://deb.torproject.org Here is the announcement: https://forum.torproject.org/t/stable-release-0-4-8-20/20781 Changes in version 0.4.8.20 - 2025-11-10 This release fixes several bugfixes related to Conflux edge cases as well as adding a new hardening compiler flag if supported. We strongly recommend to upgrade as soon as possible. o Minor feature (compiler flag): - Add -fcf-protection=full if supported by the compiler. Fixes 41139. o Minor features (fallbackdir): - Regenerate fallback directories generated on October 06, 2025. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2025/11/10. o Minor bugfixes (conflux fragile asserts): - Fix the root cause of some conflux fragile asserts when a control port listener is attached. Fixes bug 41037; bugfix on 0.4.8.16. o Minor bugfixes (conflux, relay): - Fix a series of conflux edge cases about sequence number arithmetic and OOM handler kicking in under heavy memory pressure. Fixes bug 41155; bugfix on 0.4.8.4. Cheers! David -- liO7tEkAvH7asFm910GjXnAJ++7tf/uz6e1uCcUHj8E=
participants (1)
-
David Goulet