# Security Release 0.4.9.9

**URL:** https://forum.torproject.org/t/security-release-0-4-9-9/21664
**Category:** Tor Release Announcement
**Tags:** tor
**Created:** [June 1, 2026, 7:46pm UTC](https://forum.torproject.org/t/security-release-0-4-9-9/21664 "2026-06-01T19:46:48Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![dgoulet](https://forum.torproject.org/user_avatar/forum.torproject.org/dgoulet/32/18_2.png) [@dgoulet](https://forum.torproject.org/u/dgoulet)
#### Post date: [June 1, 2026, 7:46pm UTC](https://forum.torproject.org/t/security-release-0-4-9-9/21664/1 "2026-06-01T19:46:48Z")

</div>

# Where to Download

- [Tarballs](https://dist.torproject.org/)
- [Gitlab Repository](https://gitlab.torproject.org/tpo/core/tor)
- [Bug Report](https://gitlab.torproject.org/tpo/core/tor/-/issues/new)

# Changes

Below are the major changes of the released versions and links to more detailed release notes.

## Stable

Today, we released stable version **0.4.9.9** , which address several security issues reported over the past few weeks. As the network upgrade to a safe threshold, we will make those issues public on our Gitlab issue tracker.

If you are a relay operator, we strongly recommend updating as soon as possible. The **0.4.9.9** Tor Debian package is now available in our repository: [https://deb.torproject.org](https://deb.torproject.org).

#### Release Notes

- [0.4.9.x](https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ReleaseNotes)

---

<div class="post-metadata">

### Author: ![siemien](https://forum.torproject.org/letter_avatar_proxy/v4/letter/s/e47c2d/32.png) [@siemien](https://forum.torproject.org/u/siemien)
#### Post date: [June 7, 2026, 7:25pm UTC](https://forum.torproject.org/t/security-release-0-4-9-9/21664/2 "2026-06-07T19:25:48Z")

</div>

Could someone please update the Official Docker image?

---

<div class="post-metadata">

### Author: ![jabdoa2](https://forum.torproject.org/user_avatar/forum.torproject.org/jabdoa2/32/7993_2.png) [@jabdoa2](https://forum.torproject.org/u/jabdoa2)
#### Post date: [June 8, 2026, 11:46am UTC](https://forum.torproject.org/t/security-release-0-4-9-9/21664/3 "2026-06-08T11:46:26Z")

</div>

Please also update the webtunnel docker images!

---

<div class="post-metadata">

### Author: ![siemien](https://forum.torproject.org/letter_avatar_proxy/v4/letter/s/e47c2d/32.png) [@siemien](https://forum.torproject.org/u/siemien)
#### Post date: [June 8, 2026, 4:33pm UTC](https://forum.torproject.org/t/security-release-0-4-9-9/21664/4 "2026-06-08T16:33:24Z")

</div>

We got update in docker images 🙂

---

<div class="post-metadata">

### Author: ![jabdoa2](https://forum.torproject.org/user_avatar/forum.torproject.org/jabdoa2/32/7993_2.png) [@jabdoa2](https://forum.torproject.org/u/jabdoa2)
#### Post date: [June 13, 2026, 11:49am UTC](https://forum.torproject.org/t/security-release-0-4-9-9/21664/5 "2026-06-13T11:49:02Z")

</div>

It seems like the webtunnel bridge image is still not updated: [thetorproject/webtunnel-bridge - Docker Image](https://hub.docker.com/r/thetorproject/webtunnel-bridge) . The image still contains 0.4.9.5. Should I stop my bridges for security reasons?

---

<div class="post-metadata">

### Author: ![jabdoa2](https://forum.torproject.org/user_avatar/forum.torproject.org/jabdoa2/32/7993_2.png) [@jabdoa2](https://forum.torproject.org/u/jabdoa2)
#### Post date: [June 21, 2026, 12:51pm UTC](https://forum.torproject.org/t/security-release-0-4-9-9/21664/6 "2026-06-21T12:51:41Z")

</div>

Is there a process to get those images updates? Last update was 3 month ago and I also had to ask for that one multiple times.

I will shut down all my webtunnel bridges for now. Sorry for that but I don’t want to run unmaintained services on the internet. I will restore them once the this is resolved.