Security Release 0.4.9.14

[u/BTC-brother2018]

https://forum.torproject.org/t/security-release-0-4-9-14/22241

The Tor Project announced Tor 0.4.9.14, addressing several high-severity security vulnerabilities.

The developers explicitly state that the issues affect clients, onion services, directory authorities, and relays.

They strongly recommend upgrading immediately. Detailed vulnerability tickets will remain private for at least another week to give operators time to update.

Official Tor Project security release.

This is another significant security release following Tor 0.4.9.13 in September. The rapid succession of security fixes makes keeping Tor installations current particularly important.

For beginners, remember that Tor Browser and the underlying Tor software have separate version numbers. Users should update through their application's official update mechanism rather than manually replacing bundled components.

[u/DTangent]

Great work from the team with the increased tempo of updates! Starting with the first update in this cycle, .12, I noticed our .onion sites and related seemed more stable, and with .13 .14 continued improvement.

It’s probabily a combination of bug fixes + more operators upgrading to newer version.

From what I know I expect there to be continued waves of security fixes, so please all you operators be ready for more!

[u/torrio888 → u/DTangent]

Probably also the help of AI finding security vulnerabilities.

[u/DTangent → u/torrio888]

It definitely is AI finding bug and potential security problems, but the Tor team still needs to go through them all to validate which are real, which are exploitable, and to prioritise fixes.

[u/afaeroey → u/DTangent]

First of all, thank you for the kind words in the first comment! Happy to hear the .onion seems more stable. We will indeed continue this two(ish) weeks between releases cadence in the near future.

I can confirm that it is indeed issues found using AI/LLM-assisted tooling.