https://seclists.org/oss-sec/2026/q3/684: Fwd: Tor Project Forum: Security lease 0.4.9.12
Published Sep 8, 2026
·Updated
Affected Software
1 affected component
Tor Project Tor=0.4.9.12
Frequently Asked Questions
1
What operational change affects relay operators?
Authorities will no longer accept relay descriptors containing TAP keys. Relay operators should upgrade to the latest 0.4.9.x stable version so their relays use the recommended protocol versions.
2
Do clients need to upgrade as well as relays?
Yes. The release notes recommend new protocol versions for both clients and relays.
3
Is a mitigation available if upgrading cannot happen immediately?
The provided release notes do not identify a workaround or configuration-based mitigation. They strongly recommend upgrading as soon as possible.
4
How far back does the out-of-memory handling issue date?
The release notes identify it as a bugfix on 0.2.4.14-alpha and state that it is the root-cause fix for TROVE-2026-043.