Upgrade tor to v0.4.0.5, openssl to 1.1.0k
Closed this issue · 1 comments
the 0.4.0.X cycle has a bunch of stuff that may be useful (esp the memory usage fixes, like using mmap() for the consensus)
https://blog.torproject.org/new-release-tor-0405
(partially just making this ticket for tracking in https://github.com/OnionBrowser/OnionBrowser/projects/2 )
@tladesignz I think we'll want to update all three of Tor, OpenSSL, and libevent. But I'll mark libevent as a separate ticket since they literally went two years without a release so the diff on 2.1.8 to 2.1.9/2.1.10 is huge (and I think that update is low priority compared to the Tor new features & the OpenSSL security fixes).
the current embedded tor is currently 0.3.5.8 and openssl is 1.1.0i.
the openssl one should be trivial since it's just a small series of security patches