tor 0.2.7.6-1ubuntu1 has memory-access severe bug TROVE-2016-10-001

[Chad Miller]

A buffer overrun can crash Tor 0.2.4.27 (trusty), 0.2.7.6 (xenial), 0.2.8.8 (yakkety) causing d-o-s.

Tor treats "the contents of a buffer chunk as if they were a NUL-terminated string. At least one such bug seems to be present in all currently used versions of Tor, and would allow an attacker to remotely crash most Tor instances, especially those compiled with extra compiler hardening."

[Chad Miller (cmiller)]

This is TROVE-2016-10-001 .

[Robie Basak (racb)]

Zesty has 0.2.9.10-1ubuntu1. I think this might mean that this issue is fixed in Zesty? It isn't clear to me.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Otus (jan-varho)]

0.2.7 is also unsupported since August 1: https://blog.torproject.org/blog/tor-0315-alpha-released

[Simon Déziel (sdeziel)]

Tor 0.2.9.11 is now in Xenial and Zesty, marking Xenial as fix released.