Fwd: Tor Project Forum: Security Release 0.4.9.12
Tor released 0.4.9.12 with several high-severity fixes, some found via LLMs, plus recommended protocol updates and removal of TAP key acceptance.
The Tor Project shipped version 0.4.9.12, a security release containing several high-severity fixes, some reportedly discovered with the help of LLMs. The release recommends new protocol versions (41316) for both clients and relays. Directory authorities will no longer accept relay descriptors containing TAP keys.
- Tor 0.4.9.12 addresses several high-severity security issues
- Some bugs were found via LLM-assisted analysis
- New protocol version 41316 recommended for clients and relays
- Authorities no longer accept relay descriptors containing TAP keys
Posted by Sam James on Sep 08 Here's the relevant release notes at the link in the email below: """ Changes in version 0.4.9.12 - 2026-09-08 Another security release containing several high security fixes reported by the exciting and controversial world of LLMs. One important note is that new protocol versions are recommended for clients and relays (41316). Furthermore, authorities will NOT accept relay descriptor containing TAP keys anymore...
This source does not provide full text. Read it at seclists.org.