Changes in version 0.4.9.6 - 2026-03-25
  This is a security release fixing major bugfixes that could possibly lead to
  remote crashing relays. We strongly recommend upgrading as soon as possible.

  o Major bugfix (security):
    - Fix a stack overflow of 11 bytes on malicious CREATED2. This lead
      to a remote crash. TROVE-2026-003. Reported-by: Anas Cherni of
      Calif.io. Fixes bug 41231; bugfix on 0.4.9.1-alpha.

  o Major bugfix (security, conflux):
    - Fix a memory compare using the wrong length. This could lead to a
      remote crash when using the conflux subsystem. TROVE-2026-004.
      Fixes bug 41232; bugfix on 0.4.8.1-alpha.

  o Minor bugfixes (security):
    - Fix a series of defense in depth security issues found across the
      codebase. Fixes bug 41228; bugfix on 0.3.5.1-alpha.

  o Minor bugfixes (portability):
    - (Hopefully) fix our polyval implementation on big-endian
      platforms. Fixes bug 41215; bugfix on 0.4.9.3-alpha.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on March 25, 2026.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2026/03/25.

Changes in version 0.4.8.21 - 2025-11-17
  This release is a continuation of the previous one and addresses additional
  Conflux-related issues identified through further testing and feedback from
  relay operators. We strongly recommend upgrading as soon as possible.

  o Major bugfixes (conflux, exit):
    - When dequeuing out-of-order conflux cells, the circuit could be
      close in between two dequeue which could lead to a mishandling of
      a NULL pointer. Fixes bug 41162; bugfix on 0.4.8.4.

  o Minor feature (compiler flag):
    - Add -mbranch-protection=standard for arm64.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on November 17, 2025.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2025/11/17.

  o Minor bugfixes (bridges, pluggable transport):
    - Fix a bug causing the initial tor process to hang intead of
      exiting with RunAsDaemon, when pluggable transports are used.
      Fixes bug 41088; bugfix on 0.4.8.1-alpha.

Changes in tor version 0.4.8.20 - 2025-11-10
  This release fixes several bugfixes related to Conflux edge cases as well as
  adding a new hardening compiler flag if supported. We strongly recommend to
  upgrade as soon as possible.

  o Minor feature (compiler flag):
    - Add -fcf-protection=full if supported by the compiler.
      Fixes 41139.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on October 06, 2025.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2025/11/10.

  o Minor bugfixes (conflux fragile asserts):
    - Fix the root cause of some conflux fragile asserts when a control
      port listener is attached. Fixes bug 41037; bugfix on 0.4.8.16.

  o Minor bugfixes (conflux, relay):
    - Fix a series of conflux edge cases about sequence number
      arithmetic and OOM handler kicking in under heavy memory pressure.
      Fixes bug 41155; bugfix on 0.4.8.4.