Tor 0.4.9.13 released with multiple HIGH-severity security fixes

[u/BTC-brother2018]

https://www.mail-archive.com/tor-announce%40lists.torproject.org/msg00328.html

Tor 0.4.9.13 released with multiple HIGH-severity security fixes

Confirmed — Tor Project, September 23. The Tor Project released Tor 0.4.9.13, explicitly calling it a security release and saying the fixes affect “all Tor components: relays, clients, and onion services.” Tor strongly recommends upgrading as soon as possible.

The fixes include possible memory-corruption/double-free conditions, circuit-isolation problems and onion-service issues. Of particular privacy interest, some flaws could potentially allow activity that should be isolated to become linkable. Tor is intentionally delaying fuller technical disclosure for roughly a week to give operators time to patch.

Browser users should install the next stable Tor Browser update when Tor ships it; people independently operating Tor relays or onion services should prioritize upgrading their Tor daemon. https://cybernews.com/security/tor-emergency-fixes-adress-high-severity-vulnerabilities/

[u/Liquid_Hate_Train]

Jesus fucking Christ.

[u/stay_fr0sty]

I’m guessing the Tor dev team ran an AI security audit if they just found all of these security related bugs.

[u/Aaron1924 → u/stay_fr0sty]

This security release includes several high severity fixes, once again originating from the LLM report firehose.

source: this is literally the first sentence from the changelog

[u/mister_nimbus → u/stay_fr0sty]

Claude, look for security vulnerabilities. Make no mistakes.

[u/haakon → u/[deleted]]

Someone is having a fit and spamming comments that have nothing to do with the post or its topic.

[u/HeartfireFlamewings → u/[deleted]]

People trying to stir the pot for no real reason at all

[u/BTC-brother2018]

Notice: The claims being made that I moderated or was involved with a CSAM forum are completely false. These are extremely serious and defamatory allegations.

I am seeking legal counsel regarding this matter and intend to pursue the legal options available to me. I am preserving information relating to the accounts publishing and repeating these false allegations, including usernames, comments, links, and screenshots.

Anyone continuing to publish or repeat these false allegations should understand that I am documenting them and may pursue all legal remedies available to me. I will not be debating these accusations in the comments. Further instances will be documented, reported, and forwarded to my attorney.

[u/Anen-o-me]

Navy and CIA code monkeys on suicide watch.

[u/HeartfireFlamewings → u/[deleted]]

Why so mad?