[tor-bugs] #20431 [Core Tor/DirAuth]: do not recommend vulnerable tor versions - update "recommended versions"

[Tor Bug Tracker & Wiki]

#20431: do not recommend vulnerable tor versions - update "recommended versions"
------------------------------+---------------------
 Reporter:  cypherpunks       |          Owner:
     Type:  defect            |         Status:  new
 Priority:  Medium            |      Milestone:
Component:  Core Tor/DirAuth  |        Version:
 Severity:  Normal            |     Resolution:
 Keywords:                    |  Actual Points:
Parent ID:                    |         Points:
 Reviewer:                    |        Sponsor:
------------------------------+---------------------

Comment (by cypherpunks):

 Replying to [comment:3 Sebastian]:
 > I feel highly uncomfortable doing it the way we're doing it. Maybe there
 really *SHOULD* be a new version if it's just unclear whether currently
 running versions are vulnerable or not?

 I'm not entirely sure I know what you mean by "the way we're doing it",
 but regarding proper new releases for former branches: Nick actually sad
 in his announcement:

 "Patches will be released for older versions of Tor."

 So there will be new releases or just "patches"?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20431#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online