[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-announce] [RELEASE] Tor 0.4.8.20 stable - Security Fixes



Greetings,

We just released 0.4.8.20 containing two security medium severity fixes
affecting Exit relays mostly. As of this announcement, our Debian packages are
available at https://deb.torproject.org

Here is the announcement:

https://forum.torproject.org/t/stable-release-0-4-8-20/20781

Changes in version 0.4.8.20 - 2025-11-10
  This release fixes several bugfixes related to Conflux edge cases as well as
  adding a new hardening compiler flag if supported. We strongly recommend to
  upgrade as soon as possible.

  o Minor feature (compiler flag):
    - Add -fcf-protection=full if supported by the compiler.
      Fixes 41139.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on October 06, 2025.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2025/11/10.

  o Minor bugfixes (conflux fragile asserts):
    - Fix the root cause of some conflux fragile asserts when a control
      port listener is attached. Fixes bug 41037; bugfix on 0.4.8.16.

  o Minor bugfixes (conflux, relay):
    - Fix a series of conflux edge cases about sequence number
      arithmetic and OOM handler kicking in under heavy memory pressure.
      Fixes bug 41155; bugfix on 0.4.8.4.

Cheers!
David

-- 
liO7tEkAvH7asFm910GjXnAJ++7tf/uz6e1uCcUHj8E=

Attachment: signature.asc
Description: PGP signature

_______________________________________________
tor-announce mailing list -- tor-announce@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-announce-leave@xxxxxxxxxxxxxxxxxxxx