So does this mean any version of tor is safe to use as long as it is not considered “obsolete”? Thanks. From: teor Sent: Wednesday, September 19, 2018 5:04 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Tor Relay Software Warns When Current RunningVersion Of Tor Is No Longer Recommended, But Not When A Newer Version IsAvailable? On 20 Sep 2018, at 07:02, Keifer Bly <keifer.bly@gmail.com> wrote: Hello,   A few days ago, I upgraded my version of tor from 0.3.3.9 to tor 0.3.4.8. I  noticed, however, that tor does not tell me when a new version is available. But in the past when I was a few versions behind, it popped up with a message saying “WARNING: this version of tor is out of date or no longer recommended.”   So, I am just wondering, why is it that the tor software warns when the current version is “no longer recommended” but does not warn when an update is available? Tor only warns about obsolete versions. It doesn't warn when there is a new release or "new in series" version available. Definitions here: https://gitweb.torproject.org/torspec.git/tree/version-spec.txt#n53 T

So what would be an advised way to make sure tor is 100% up to date, besides the update command? Thank you. On Wed, Sep 19, 2018 at 11:13 PM teor <teor@riseup.net> wrote:

On 20 Sep 2018, at 07:02, Keifer Bly <keifer.bly@gmail.com> wrote:

A few days ago, I upgraded my version of tor from 0.3.3.9 to tor 0.3.4.8. I noticed, however, that tor does not tell me when a new version is available. But in the past when I was a few versions behind, it popped up with a message saying “WARNING: this version of tor is out of date or no longer recommended.”

So, I am just wondering, why is it that the tor software warns when the current version is “no longer recommended” but does not warn when an update is available?

*From: *teor <teor@riseup.net> *Sent: *Wednesday, September 19, 2018 5:04 PM

Tor only warns about obsolete versions.

It doesn't warn when there is a new release or "new in series" version available.

Definitions here:

https://gitweb.torproject.org/torspec.git/tree/version-spec.txt#n53

On 20 Sep 2018, at 12:56, Keifer Bly <keifer.bly@gmail.com> wrote:

So does this mean any version of tor is safe to use as long as it is not considered “obsolete”? Thanks.

Sometimes, a supported releases series will have serious security bugs.

When we fix those bugs, we "un-recommend" that version, and recommend the newer versions in that series.

So please don't run "obsolete" or "un-recommended" Tor versions.

T _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Am 21.09.2018 um 00:39 schrieb teor:

...

On 21 Sep 2018, at 04:00, Keifer Bly <keifer.bly@gmail.com> wrote:

So what would be an advised way to make sure tor is 100% up to date, besides the update command? Thank you.

Since you are on macOS and using Homebrew, you should use "brew update". No extra steps are needed.

If you want, you can watch the logs for warnings that your tor version is not recommended.

And you can find the list of the good ones on your pc. All tor instances need a file `cached-microdesc-consensus´. Read the text and find the `client-versions´ line. Currently the entry says: client-versions 0.2.9.14,0.2.9.15,0.2.9.16,0.2.9.17,0.3.2.6-alpha,0.3.2.7-rc,0.3.2.8-rc,0.3.2.9,0.3.2.10,0.3.2.11,0.3.2.12,0.3.3.1-alpha,0.3.3.2-alpha,0.3.3.3-alpha,0.3.3.4-alpha,0.3.3.5-rc,0.3.3.6,0.3.3.7,0.3.3.8,0.3.3.9,0.3.3.10,0.3.4.1-alpha,0.3.4.2-alpha,0.3.4.3-alpha,0.3.4.4-rc,0.3.4.5-rc,0.3.4.6-rc,0.3.4.7-rc,0.3.4.8,0.3.5.1-alpha -- Cheers, Felix