Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

openSUSE: tor Efficient Resource Management Update 2025:0456-3

opensuse
Calendar Grey September 26, 2025
Dist Opensuse Esm H88
Update fixes moderate resource consumption issue in tor, openSUSE Advisory ID: openSUSE-SU-2025:0373-1.
An update that fixes one vulnerability is now available.

Description

This update for tor fixes the following issues:

- 0.4.8.18

* CVE-2025-4444: onion service descriptor resource consumption issue

(boo#1250101)

- 0.4.8.17

* Minor features and bugfixes

* use quantum-resistant MLKEM-768 cipher

- tor 0.4.8.16

* fix typo in a directory authority rule file

* fix a sandbox issue for bandwidth authority and a conflux issue

on the control port

* client fix about relay flag usage

- tor 0.4.8.14

* bugfix for onion service directory cache

* test-network now unconditionally includes IPv6

* Regenerate fallback directories 2025-02-05

* Update the geoip files to 2025-02-05

* Fix a pointer free

- tor 0.4.8.13

* Conflux related client circuit building performance bugfix

* Fix minor memory leaks

* Add STATUS TYPE=version handler for Pluggable Transport

- tor 0.4.8.12

* Minor features and bugfixes

* See

...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2025-373=1

- openSUSE Backports SLE-15-SP6:

zypper in -t patch openSUSE-2025-373=1

Package List

- openSUSE Backports SLE-15-SP7 (aarch64 ppc64le s390x x86_64):

tor-0.4.8.18-bp157.2.3.1

tor-debuginfo-0.4.8.18-bp157.2.3.1

tor-debugsource-0.4.8.18-bp157.2.3.1

- openSUSE Backports SLE-15-SP6 (aarch64 ppc64le s390x x86_64):

tor-0.4.8.18-bp156.2.3.1

References

https://www.suse.com/security/cve/CVE-2025-4444.html

https://bugzilla.suse.com/1250101

Announcement ID: openSUSE-SU-2025:0373-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP6 openSUSE Backports SLE-15-SP7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here