Re: [tor-relays] 'critical' security update: Tor 0.2.2.39

2012-09-23 Thread tagnaq
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 In the spectrum of critical, I wouldn't put this one towards the top. There's no code execution or privacy or anonymity issues. So yes, upgrading is definitely a fine idea, but it's not a cancel your dinner plans to do it sort of situation. I

[tor-relays] 'critical' security update: Tor 0.2.2.39

2012-09-15 Thread tagnaq
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 It is quite sad that one has to find out about 'critical' security updates [0] via an unrelated thread on tor-talk [1] or the blog [2] instead of getting an announcement on tor-announce [3] - where relay operators are probably expecting such

Re: [tor-relays] 'critical' security update: Tor 0.2.2.39

2012-09-15 Thread tagnaq
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 It is quite sad that one has to find out about 'critical' security updates [0] via an unrelated thread on tor-talk [1] or the blog [2] instead of getting an announcement on tor-announce [3] - where relay operators are probably expecting such

Re: [tor-relays] 'critical' security update: Tor 0.2.2.39

2012-09-15 Thread Roger Dingledine
On Sat, Sep 15, 2012 at 12:25:59PM +0200, tagnaq wrote: It is quite sad that one has to find out about 'critical' security updates [0] via an unrelated thread on tor-talk [1] or the blog [2] instead of getting an announcement on tor-announce [3] - where relay operators are probably expecting