[tor-packagers] [security] new releases available for download: Tor 0.2.9.15, 0.3.1.10, 0.3.2.10, 0.3.3.3-alpha

[Nick Mathewson]

Hello!

There are new releases tagged and available for download from the
usual place at https://dist.torproject.org/ .  Please remember to
check the signatures!

These releases are security-relevant for relays.  In brief:

0.2.9.15, 0.3.1.10, and 0.3.2.10 all backport our countermeasures to
mitigate current denial-of-service attacks against the Tor network
(trac ticket #24902).

All of these releases contain a fix for TROVE-2018-001, a
denial-of-service issue affecting directory authorities.

0.3.2.10 backports a fix for TROVE-2018-002, a use-after-free issue
affecting relays running earlier versions of 0.3.2.

None of these fixes appear to be essential for clients, but relays
should upgrade, especially if they are running 0.3.2.x or
0.3.3.1-alpha.

You can see their full changelogs at
https://gitweb.torproject.org/tor.git/tree/ChangeLog .

I'll be sending out official announcements later today, with blog
posts to follow after the website has updated.

peace,
-- 
Nick