Upgrade tor on Snowflake bridge for TROVE-2020-002
New stable Tor releases: 0.3.5.10, 0.4.1.9, and 0.4.2.7
These releases fix a couple of denial-of-service vulnerabilities. Everybody running an older version should upgrade as packages become available.
Upgrading tor may require an OS upgrade from Debian stretch (oldstable) to buster (stable), and/or a switch to the torproject.org package repository. Currently the bridge is on stretch, whose available version is 0.2.9.16-1.