An update that contains security fixes can now be installed. . openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0027-1 Rating: moderate References: #1207110 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues: tor 0.4.7.13: * fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002) * improve congestion control * fix relay channel handling tor 0.4.7.12: * new key for moria1 * new metrics are exported on the MetricsPort for the congestion control subsystem Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2023-27=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.7.13-bp154.2.12.1 References: https://bugzilla.suse.com/1207110 . New release of Tor bolsters safety, tackling DNS exposure issues and refining user oversight - intermediate notice from openSUSE.. openSUSE Security Update, tor fixes, DNS leaks, relay handling, update instructions. . LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10023-1 Rating: important References: #1200672 Cross-References: CVE-2022-33903 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tor fixes the following issues: tor was updated to 0.4.7.8: * Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. (TROVE-2022-001, CVE-2022-33903, boo#1200672) * Regenerate fallback directories generated on June 17, 2022. * Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. * Allow the rseq system call in the sandbox * logging bug fixes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10023=1 - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10023=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): tor-0.4.7.8-bp154.2.3.1 tor-debuginfo-0.4.7.8-bp154.2.3.1 tor-debugsource-0.4.7.8-bp154.2.3.1 - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64): tor-0.4.7.8-bp153.2.15.1 References: https://www.suse.com/security/cve/CVE-2022-33903.html https://bugzilla.suse.com/1200672 . SignificantopenSUSE enhancement addresses traffic management issues with Tor, delivering security patches to defend against external vulnerabilities.. openSUSE Update, tor Security Fix, Important Security Advisory, remote attack Mitigation. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.