[tor-talk] Bogus security warning?

Moritz Bartl moritz at torservers.net
Thu Feb 21 18:26:40 UTC 2013


Hi David,

On 21.02.2013 18:35, David Balažic wrote:
> So, is there a new version? Is it labeled the same as the old one?
> Something else?

Yes, this is a known problem. 2.3.25-3 was released in February, but
revoked because of an OpenSSL bug that made it crash on systems with
AES-NI support.

For some reason, the update check signaled/signals 2.3.25-3 as current
version for the last 24 hours or so (
https://check.torproject.org/RecommendedTBBVersions ). As user reports
still come in after the recommended version was changed back, I would
suspect some kind of caching on client side.

-- 
Moritz Bartl
https://www.torservers.net/


More information about the tor-talk mailing list