[tor-bugs] #33644 [Circumvention/Snowflake]: Upgrade tor on Snowflake bridge for TROVE-2020-002

[Tor Bug Tracker & Wiki]

#33644: Upgrade tor on Snowflake bridge for TROVE-2020-002
-------------------------------------+--------------------------
 Reporter:  dcf                      |          Owner:  dcf
     Type:  task                     |         Status:  assigned
 Priority:  High                     |      Milestone:
Component:  Circumvention/Snowflake  |        Version:
 Severity:  Normal                   |     Resolution:
 Keywords:                           |  Actual Points:
Parent ID:                           |         Points:
 Reviewer:                           |        Sponsor:
-------------------------------------+--------------------------
Changes (by dcf):

 * owner:  (none) => dcf
 * status:  new => assigned


Old description:

> [https://lists.torproject.org/pipermail/tor-
> announce/2020-March/000196.html New stable Tor releases: 0.3.5.10,
> 0.4.1.9, and 0.4.2.7]
> > These releases fix a couple of denial-of-service vulnerabilities.
> Everybody running an older version should upgrade as packages become
> available.
>
> Upgrading tor may require an
> [https://www.debian.org/releases/buster/amd64/release-notes/ch-
> upgrading.en.html OS upgrade] from Debian stretch (oldstable) to buster
> (stable), and/or a switch to the [https://support.torproject.org/apt/tor-
> deb-repo/ torproject.org package repository]. Currently the bridge is on
> stretch. whose available version is
> [https://packages.debian.org/stretch/tor 0.2.9.16-1].

New description:

 [https://lists.torproject.org/pipermail/tor-
 announce/2020-March/000196.html New stable Tor releases: 0.3.5.10,
 0.4.1.9, and 0.4.2.7]
 > These releases fix a couple of denial-of-service vulnerabilities.
 Everybody running an older version should upgrade as packages become
 available.

 Upgrading tor may require an [https://www.debian.org/releases/buster/amd64
 /release-notes/ch-upgrading.en.html OS upgrade] from Debian stretch
 (oldstable) to buster (stable), and/or a switch to the
 [https://support.torproject.org/apt/tor-deb-repo/ torproject.org package
 repository]. Currently the bridge is on stretch, whose available version
 is [https://packages.debian.org/stretch/tor 0.2.9.16-1].

--

Comment:

 I'm going to look at doing the OS upgrade.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33644#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online