© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
From oss-security at $URL:
Tor upstream has recently released v0.2.2.38 version, correcting three
security flaws:
1) tor: Read from freed memory and double free by processing failed DNS request
Upstream ticket:
[1] https:/
Relevant patch:
[2] https:/
References:
[3] https:/
[4] https:/
[5] https:/
2) tor: Unitialized memory read by reading vote or consensus document with unrecognized flavor name
Upstream ticket:
[6] https:/
Relevant patches:
[7] https:/
[8] https:/
References:
[9] https:/
[10] https:/
Note: No Red Hat bug (Fedora tor versions already updated && EPEL one not affected).
3) tor: Client's relays path information leak
Upstream ticket:
[11] https:/
Relevant patches:
[12] https:/
[13] https:/
References:
[14] https:/
[15] https:/