Hello!

There are new releases tagged and available for download from the usual place at https://dist.torproject.org/ . Please remember to check the signatures!

These releases are security-relevant for relays. In brief:

0.2.9.15, 0.3.1.10, and 0.3.2.10 all backport our countermeasures to mitigate current denial-of-service attacks against the Tor network (trac ticket #24902).

All of these releases contain a fix for TROVE-2018-001, a denial-of-service issue affecting directory authorities.

0.3.2.10 backports a fix for TROVE-2018-002, a use-after-free issue affecting relays running earlier versions of 0.3.2.

None of these fixes appear to be essential for clients, but relays should upgrade, especially if they are running 0.3.2.x or 0.3.3.1-alpha.

You can see their full changelogs at https://gitweb.torproject.org/tor.git/tree/ChangeLog .

I'll be sending out official announcements later today, with blog posts to follow after the website has updated.

peace,