Download Tor 0.1.2.16

Tor is a network that can be used to anonymously use the internet. All users’ tcp traffic is routed through different Tor routers, after which it is no longer possible for the recipient to trace who the original sender was. This information is still present within the Tor network, so that answers – of course also via the system of routers – eventually arrive at the right place. The developers released version 0.1.2.16 a few days ago, which fixes a critical vulnerability. The announcement on the mailing list looks like this:

Tor 0.1.2.16 fixes a critical security vulnerability that allows a remote attacker in certain situations to rewrite the user’s torrc configuration file. This can completely compromise anonymity of users in most configurations, including those running the Vidalia bundles, TorK, etc. Or worse.

Users who do not have ControlPort enabled are secure; if you are not sure, you should upgrade and you should probably overwrite your torrc file with the default when you upgrade.

Major security fixes:

• Close immediately after missing authentication on control port; do not allow multiple authentication attempts.

[break] Tor 0.1.2.16 is available in the following flavors:
Windows
Mac OS X 10.4
Mac OS X 10.3
Linux – Red Hat RPM
Linux – SUSE RPM
source