Roger Dingledine | 25 May 23:13
Picon
Favicon

Tor 0.1.2.14 is released

Tor 0.1.2.14 changes the addresses of two directory authorities (this
change especially affects those who serve or use hidden services),
and fixes several other crash- and security-related bugs.

We'll put out 0.1.1.27 in the next week or so for people who absolutely
can't upgrade -- but really, please upgrade to 0.1.2.14 if you can. Those
still running 0.1.0.x should now consider it obsolete and unsupported.

https://tor.eff.org/download.html

Changes in version 0.1.2.14 - 2007-05-25
  o Directory authority changes:
    - Two directory authorities (moria1 and moria2) just moved to new
      IP addresses. This change will particularly affect those who serve
      or use hidden services.

  o Major bugfixes (crashes):
    - If a directory server runs out of space in the connection table
      as it's processing a begin_dir request, it will free the exit stream
      but leave it attached to the circuit, leading to unpredictable
      behavior. (Reported by seeess, fixes bug 425.)
    - Fix a bug in dirserv_remove_invalid() that would cause authorities
      to corrupt memory under some really unlikely scenarios.
    - Tighten router parsing rules. (Bugs reported by Benedikt Boss.)
    - Avoid segfaults when reading from mmaped descriptor file. (Reported
      by lodger.)

  o Major bugfixes (security):
    - When choosing an entry guard for a circuit, avoid using guards
      that are in the same family as the chosen exit -- not just guards
(Continue reading)


Gmane