If you're using it, update and rebuild.
VV CLEARNET LINK VV
gitlab.torproject.org/tpo/core/arti/-/tree/arti-v1.6.0
VV ONION LINK VV
eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/tpo/core/arti/-/tree/arti-v1.6.0
Breaking changes
- Arti now requires Rust 1.85.1 or later.
!! Security fixes !!
Arti now requires tracing-subscriber v0.3.20 due to upstream security issue RUSTSEC-2025-0055.
It is unlikely that this would have been exploitable in Arti running with the default configuration, but a detailed analysis was not performed.
Major features
- Arti now includes experimental circuit padding support, based on the maybenot library (this defense will help resist traffic and protocol fingerprinting attacks).
- Arti now has mitigations for DropMark side-channel attacks for flow control (enabled with the flowctl-cc feature flag).
- Arti now has a "arti keys check-integrity command" to check the validity of stored keys.
- Arti now has experimental support for exporting debugging information via OpenTelemetry.