update tor from 0.4.9.14-r0 to 0.4.9.15-r0
security release (TROVE-2026-072), relevant changes:
- authorities now require clients to support DESC_NO_TAP & MICRODESC_NO_TAP (tor <= 0.4.8 no longer works on the network)
- onion service directories accept at most one descriptor fetch / upload per circuit from an authenticated relay
- HSDir flag persists across relay restarts
- onion service, control port: fix memory leak on every HSPOST command
- clients: forgive exit relays that refused a stream (hibernating / out of file descriptors) on the next consensus instead of only after restart
- relays & directory caches: new DoS defenses rate-limiting BEGIN_DIR cells per circuit
- fix scheduler priority queue serving circuits in the wrong order (temporary starvation)
- refuse ATTACHSTREAM onto conflux circuits that have not finished linking
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ReleaseNotes
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude