[tor-talk] Tor-ramdisk 20140520 released

[Anthony G. Basile]

Hi everyone

I want to announce to the list that a new release of tor-ramdisk is out. 
Tor-ramdisk is an i686, x86_64 or MIPS uClibc-based micro Linux 
distribution whose only purpose is to host a Tor server in an 
environment that maximizes security and privacy. Security is enhanced by 
hardening the kernel and binaries, and privacy is enhanced by forcing 
logging to be off at all levels so that even the Tor operator only has 
access to minimal information. Finally, since everything runs in 
ephemeral memory, no information survives a reboot, except for the Tor 
configuration file and the private RSA key, which may be 
exported/imported by FTP or SCP.

Changelog:

This release updates tor to version 0.2.4.22, the kernel to 3.14.4 plus 
Gentoo's hardened-patches, and openssh to 6.6p1. The bump in tor adds an 
important block to authority signing keys that were used on authorities 
vulnerable to the "heartbleed" bug in OpenSSL, CVE-2014-0160. The bump 
in the kernel addresses the pty layer race condition memory corruption, 
CVE-2014-0196. Upgrading is strongly recommended.


i686:
Homepage: http://opensource.dyc.edu/tor-ramdisk
Download: http://opensource.dyc.edu/tor-ramdisk-downloads

x86_64:
Homepage: http://opensource.dyc.edu/tor-x86_64-ramdisk
Download: http://opensource.dyc.edu/tor-x86_64-ramdisk-downloads


-- 
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197