[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

security update: tor (0.2.0.34-1)



Hi,

I uploaded this bugfix-only release a few hours ago.  It closes these
two debian bugs (It also fixes a third bug which I have not confirmed
affects Debian).

|  tor (0.2.0.34-1) unstable; urgency=high
|  .
|    * New upstream version:
|       - Avoid a potential crash on exit nodes when processing malformed
|         input.  Remote DoS opportunity (closes: #514579).
|       - Fix a temporary DoS vulnerability that could be performed by
|         a directory mirror (closes: #514580).

s/potential// - It's actually pretty trivial to induce once you know how.

Please unblock.
-- 
                           |  .''`.  ** Debian GNU/Linux **
      Peter Palfrader      | : :' :      The  universal
 http://www.palfrader.org/ | `. `'      Operating System
                           |   `-    http://www.debian.org/


Reply to: