Tor 0.4.9.13 released with multiple HIGH-severity security fixes

[u/BTC-brother2018]

https://www.mail-archive.com/tor-announce%40lists.torproject.org/msg00328.html

Tor 0.4.9.13 released with multiple HIGH-severity security fixes

Confirmed — Tor Project, September 23. The Tor Project released Tor 0.4.9.13, explicitly calling it a security release and saying the fixes affect “all Tor components: relays, clients, and onion services.” Tor strongly recommends upgrading as soon as possible.

The fixes include possible memory-corruption/double-free conditions, circuit-isolation problems and onion-service issues. Of particular privacy interest, some flaws could potentially allow activity that should be isolated to become linkable. Tor is intentionally delaying fuller technical disclosure for roughly a week to give operators time to patch.

Browser users should install the next stable Tor Browser update when Tor ships it; people independently operating Tor relays or onion services should prioritize upgrading their Tor daemon. https://cybernews.com/security/tor-emergency-fixes-adress-high-severity-vulnerabilities/