New release candidate: Tor 0.4.5.5-rc

by nickm | February 1, 2021

There's a new release candidate available for download. If you build Tor from source, you can download the source code for 0.4.5.5-rc from the download page on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release in the coming week.

We think this is almost ready to be stable: please test it out, and let us know on the bugtracker if there are any major problems!

Tor 0.4.5.5-rc is the third release candidate in its series. We're coming closer and closer to a stable release series. This release fixes an annoyance with address detection code, and somewhat mitigates an ongoing denial-of-service attack.

We anticipate no more code changes between this and the stable release, though of course that could change.

Changes in version 0.4.5.5-rc - 2021-02-01

  • Major feature (exit):
    • Re-entry into the network is now denied at the Exit level to all relays' ORPorts and authorities' ORPorts and DirPorts. This change should help mitgate a set of denial-of-service attacks. Closes ticket 2667.
  • Minor bugfixes (relay, configuration):
    • Don't attempt to discover our address (IPv4 or IPv6) if no ORPort for it can be found in the configuration. Fixes bug 40254; bugfix on 0.4.5.1-alpha.

Comments

Please note that the comment area below has been archived.

February 10, 2021

Permalink

I had major problem with this on Debian Buster. My relays torrc have:
ORPort {localIP behind NAT}:443 NoAdvertise
ORPort {externalIP}:443 NoListen

After upgrade to 0.4.5.5-rc, Tor does not even start and error says, that there is not any ORPort to listen, even if one is advertised. I did not have any problem with my relay or torrc config before, so I had to downgrade.

Someone else had similar problem: https://www.reddit.com/r/TOR/comments/lgnt7g/orport_is_not_reachable_af…