We have made public the details of the distinguishability bugs that were affecting obfs4: https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/91 https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/obfs4...
Most bridges are already upgraded, thank you all bridge operators for the work here.
Quoting meskio (2022-10-14 11:28:44)
Hello,
The latest version of obfs4proxy (0.0.14) comes with an important security fix. If you are running a obfs4 Tor bridge please upgrade as soon as possible.
If you use debian you can find the Debian package in stable-backports: https://packages.debian.org/stable-backports/obfs4proxy
If you use docker you'll find the latest version in docker hub: https://hub.docker.com/r/thetorproject/obfs4-bridge/
Or you can find the source code in the upstream repository: https://gitlab.com/yawning/obfs4
If you need help upgrading your relay, please use this mailing list or the Tor Forum: https://forum.torproject.net/c/support/relay-operator/17
We appreciate a lot your effort and time!
Thank you