Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1513-1

Опубликовано: 29 нояб. 2021
Источник: suse-cvrf

Описание

Security update for tor

This update for tor fixes the following issues:

tor 0.4.6.8:

  • Improving reporting of general overload state for DNS timeout errors by relays
  • Regenerate fallback directories for October 2021
  • Bug fixes for onion services
  • CVE-2021-22929: do not log v2 onion services access attempt warnings on disk excessively (TROVE-2021-008, boo#1192658)

Список пакетов

SUSE Package Hub 15 SP3
tor-0.4.6.8-bp153.2.9.1
openSUSE Leap 15.2
tor-0.4.6.8-bp153.2.9.1
openSUSE Leap 15.3
tor-0.4.6.8-bp153.2.9.1

Описание

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.


Затронутые продукты
SUSE Package Hub 15 SP3:tor-0.4.6.8-bp153.2.9.1
openSUSE Leap 15.2:tor-0.4.6.8-bp153.2.9.1
openSUSE Leap 15.3:tor-0.4.6.8-bp153.2.9.1

Ссылки