Hi! There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.3.4.2-alpha from the usual place on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release over the coming weeks.
Tor 0.3.4.2-alpha fixes several minor bugs in the previous alpha release, and forward-ports an authority-only security fix from 0.3.3.6.
Changes in version 0.3.4.2-alpha - 2018-06-12
- Directory authority changes:
- Add an IPv6 address for the "dannenberg" directory authority. Closes ticket 26343.
- Major bugfixes (security, directory authority, denial-of-service, also in 0.3.3.6):
- Fix a bug that could have allowed an attacker to force a directory authority to use up all its RAM by passing it a maliciously crafted protocol versions string. Fixes bug 25517; bugfix on 0.2.9.4-alpha. This issue is also tracked as TROVE-2018-005.