tor-packagers

tor-packagers@lists.torproject.org

March 2018

1 participants
2 discussions

Tor 0.3.3.4-alpha source is available for download
by Nick Mathewson 29 Mar '18

29 Mar '18

Hi all! The latest tor alpha, 0.3.3.4-alpha, is available at the usual place at https://dist.torproject.org/ Please test this out if you can, and get it to users so that they can test it too. I hope that the next release will be a release candidate. I'll send official announcements once the website has updated and I'm out of meetings for the day. cheers, -- Nick

1 0

[security] new releases available for download: Tor 0.2.9.15, 0.3.1.10, 0.3.2.10, 0.3.3.3-alpha
by Nick Mathewson 03 Mar '18

03 Mar '18

Hello! There are new releases tagged and available for download from the usual place at https://dist.torproject.org/ . Please remember to check the signatures! These releases are security-relevant for relays. In brief: 0.2.9.15, 0.3.1.10, and 0.3.2.10 all backport our countermeasures to mitigate current denial-of-service attacks against the Tor network (trac ticket #24902). All of these releases contain a fix for TROVE-2018-001, a denial-of-service issue affecting directory authorities. 0.3.2.10 backports a fix for TROVE-2018-002, a use-after-free issue affecting relays running earlier versions of 0.3.2. None of these fixes appear to be essential for clients, but relays should upgrade, especially if they are running 0.3.2.x or 0.3.3.1-alpha. You can see their full changelogs at https://gitweb.torproject.org/tor.git/tree/ChangeLog . I'll be sending out official announcements later today, with blog posts to follow after the website has updated. peace, -- Nick

1 0