Version 0.1.2.16 of Tor
Release Notes: This release fixes a critical security vulnerability that allowed a remote attacker in certain situations to rewrite the user's torrc configuration file. This could completely compromise anonymity of users in most configurations, including those running the Vidalia bundles, TorK, etc.
Other releases
Release Notes: This release makes relay measurement by directory authorities more robust, makes hidden service authentication work again, and resolves a DPI fingerprint for Tor's SSL transport.
Release Notes: This release reduces directory overhead, provides enormous crypto performance improvements for fast relays on recent hardware, a new v3 TLS handshake protocol that can better resist fingerprinting, support for protocol obfuscation plugins, better scalability for hidden services, IPv6 support for bridges, performance improvements like allowing clients to skip the first round-trip on the circuit ("optimistic data") and refilling token buckets more often, a new "stream isolation" design to isolate different applications on different circuits, and many stability, security, and privacy fixes.
Release Notes: This release fixes another opportunity for a remotely triggerable assertion, resumes letting relays test reachability of their DirPort, and cleans up a bunch of smaller bugs.
Release Notes: This release fixes two opportunities for remotely-triggerable assertions.
Release Notes: This release fixes a rare race condition which could crash exit relays, fixes a remotely-triggerable crash bug, and fixes a timing attack which could leak path information.
