Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: MGASA-2023-0017 Moderate: Tor SOCKS Logic Error Fix

mageia
Calendar Grey January 24, 2023
Dist Mageia Esm H88
Enhanced security features in Mageia 8 system are provided by updated Tor packages, fixing a logical flaw in the SafeSocks setting.
SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002

Summary

SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002. (CVE-2023-23589)

References

- https://bugs.mageia.org/show_bug.cgi?id=31414

- https://forum.torproject.org/t/stable-release-0-4-5-16-and-0-4-7-13/6216

- https://lists.debian.org/debian-security-announce/2023/msg00009.html

- https://www.cve.org/CVERecord?id=CVE-2023-23589

Topics%20covered

Topics Covered

security advisory moderate Tor logic error Mageia networking fix SOCKS protocol

Resolution

SRPMS

- 8/core/tor-0.4.5.16-1.mga8

Publication date: 24 Jan 2023
URL: https://advisories.mageia.org/MGASA-2023-0017.html
Type: security
CVE: CVE-2023-23589

Topics%20covered

Topics Covered

security advisory moderate Tor logic error Mageia networking fix SOCKS protocol

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here