#6949: remove vulnerable tor versions from 'recommended versions'
-------------------------------------+--------------------------------------
Reporter: cypherpunkx | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor Directory Authority | Version:
Keywords: | Parent:
Points: | Actualpoints:
-------------------------------------+--------------------------------------
Tor versions prior to v0.2.2.39, v0.2.3.22 and v0.2.4.3 should be removed
from the 'recommended versions' consensus parameter to inform relay
operators to update (at least the ones that read their logs ;)
The current recommended tor version list looks like this [1]:
{{{
consensus
client-versions
0.2.2.35,0.2.2.36,0.2.2.37,0.2.2.38,0.2.2.39,0.2.3.10-alpha,0.2.3.11-alpha,0.2.3.12-alpha,0.2.3.13-alpha,0.2.3.14-alpha,0.2.3.15-alpha,0.2.3.16-alpha,0.2.3.17-beta,0.2.3.18-rc,0.2.3.19-rc,0.2.3.20-rc,0.2.3.21-rc,0.2.3.22-rc,0.2.4.1-alpha,0.2.4.2-alpha,0.2.4.3-alpha
server-versions
0.2.2.35,0.2.2.36,0.2.2.37,0.2.2.38,0.2.2.39,0.2.3.10-alpha,0.2.3.11-alpha,0.2.3.12-alpha,0.2.3.13-alpha,0.2.3.14-alpha,0.2.3.15-alpha,0.2.3.16-alpha,0.2.3.17-beta,0.2.3.18-rc,0.2.3.19-rc,0.2.3.20-rc,0.2.3.21-rc,0.2.3.22-rc,0.2.4.1-alpha,0.2.4.2-alpha,0.2.4.3-alpha
}}}
[1] https://metrics.torproject.org/consensus-health.html
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6949>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
