I've noticed the same. The challenge I have is that the Fedora packages are updated several days after the official release. So that makes it difficult to stay current with security updates, unless I want to venture out and start compiling them (which I'd prefer not to).

For example, tor-0.4.8.20 was announced on November 11, yet the rpm didn't get uploaded until November 15.

Announcement: https://forum.torproject.org/t/stable-release-0-4-8-20/20781

Fedora repo: https://rpm.torproject.org/fedora/43/x86_64/

On Wed, Nov 19, 2025 at 1:39 AM Chris Enkidu-6 via tor-relays <tor-relays@lists.torproject.org> wrote:

Understood. I guess my point is that servers shouldn't be flagged when the new version is one day old. If it's a serious security issue, then I expect to see some sort of an announcement on this mailing list because I may go for weeks and never look at my flags on the web. The original email in this thread was the only reason realized it. If I see the average Network traffic that I expect, I simply move on and update my servers once a month.

On 11/19/2025 4:03 AM, Marco Moock wrote:
Am 19.11.2025 um 03:06:18 Uhr schrieb Chris Enkidu-6 via tor-relays:
Version 0.4.8.21 doesn't even show up on my Almalinux
servers for me to update.
I assume because it is not in their repo yet. The release way yesterday
night.
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org