Whonix Gateway in Qubes – Tor 0.4.8.18 marked as obsolete. Is this expected?

Hello,

I noticed that my Whonix-Gateway (Qubes OS) is using Tor version 0.4.8.18, which appears to be marked as obsolete. As far as I know, newer Tor versions are already available upstream.

I would like to understand whether:

  • this is currently the latest Tor version shipped with Whonix-Gateway for Qubes,
  • or if there is a supported or recommended way to upgrade Tor to a newer version,
  • or whether Whonix/Qubes intentionally pins this version for stability or security reasons.

To be honest, seeing Tor marked as obsolete in a security-focused system like Whonix/Qubes is a bit concerning, and I want to make sure I am not missing something or running an outdated component unnecessarily.

I would appreciate clarification on:

  • whether this behavior is expected,
  • whether I should take any action on my side,
  • or whether an update is planned.

Thank you for your time and for the work on Qubes and Whonix.

Looks like someone already asked about this on the Whonix forum:

This also appears relevant:

1 Like