[tor-relays] 'critical' security update: Tor 0.2.2.39

[tagnaq]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


> It is quite sad that one has to find out about 'critical' security 
> updates [0] via an unrelated thread on tor-talk [1] or the blog
> [2] instead of getting an announcement on tor-announce [3] - where
> relay operators are probably expecting such information.
> 
> Are tor versions 0.2.3.x and 0.2.4.x affected too?

Yes, 0.2.3.x is affected and #6811 is fixed in 0.2.3.22-rc
https://gitweb.torproject.org/tor.git/blob/tor-0.2.3.22-rc:/ChangeLog

0.2.3.22-rc was announced by roger as usual on tor-talk:
https://lists.torproject.org/pipermail/tor-talk/2012-September/025501.html
-----BEGIN PGP SIGNATURE-----

iF4EAREKAAYFAlBUXHAACgkQyM26BSNOM7ZQ5AD9E8CVhsUV9QBjtw90oQjF9BMd
1YPqUVsFAMdxEAffghEA/i9OtTV4A9k0YkIQtyUzsynxRKuAo3D6k4lXqirQrgRv
=O6+v
-----END PGP SIGNATURE-----