Tor 0.1.1.26 fixes HttpProxyAuthenticator privacy flaw

Bug #76094 reported by Roger Dingledine
258
Affects Status Importance Assigned to Milestone
tor (Ubuntu)
Fix Released
Undecided
Unassigned
Breezy
Invalid
Undecided
Unassigned
Dapper
Won't Fix
Undecided
Unassigned
Edgy
Won't Fix
Undecided
Unassigned
Feisty
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: tor

We found a big bug and put out a new bugfix release:

http://archives.seul.org/or/announce/Dec-2006/msg00000.html

There's also a link to a patch for the 0.1.0.x Tor tree, if you're still
maintaining whichever Ubuntu it is that ships 0.1.0.16-2.

Tags: patch
Revision history for this message
Kai Kasurinen (kai-kasurinen) wrote :

Fixed in Feisty:

tor (0.1.1.26-1) unstable; urgency=high

  * New upstream version (Stop sending the HttpProxyAuthenticator string to
    directory servers when directory connections are tunnelled through Tor).

 -- Ubuntu Archive Auto-Sync <email address hidden> Wed, 20 Dec 2006 13:07:11 +0000

magilus (magilus)
Changed in tor:
status: Unconfirmed → Fix Released
magilus (magilus)
Changed in tor:
assignee: nobody → pirast
status: Unconfirmed → In Progress
assignee: nobody → pirast
status: Unconfirmed → In Progress
magilus (magilus)
Changed in tor:
assignee: pirast → nobody
status: In Progress → Confirmed
assignee: pirast → nobody
status: In Progress → Confirmed
Revision history for this message
Marco Rodrigues (gothicx) wrote :

Breezy support is over.. Today it's Breezy End Of Life!

Changed in tor:
status: Unconfirmed → Rejected
Revision history for this message
Hew (hew) wrote :

Ubuntu Edgy Eft is no longer supported, so a SRU will not be issued for this release. Marking Edgy as Won't Fix.

Changed in tor:
status: Confirmed → Won't Fix
Revision history for this message
Artur Rona (ari-tczew) wrote :
tags: added: patch
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for reporting this bug to Ubuntu. dapper has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against dapper is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.

Changed in tor (Ubuntu Dapper):
status: Confirmed → Won't Fix
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.