1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 4961-1] tor security update

    From Salvatore Bonaccorso@21:1/5 to All on Mon Aug 23 17:20:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4961-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 23, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : tor
    CVE ID : CVE-2021-38385

    Henry de Valence reported a flaw in the signature verification code in
    Tor, a connection-based low-latency anonymous communication system. A
    remote attacker can take advantage of this flaw to cause an assertion
    failure, resulting in denial of service.

    For the oldstable distribution (buster), this problem has been fixed
    in version 0.3.5.16-1.

    For the stable distribution (bullseye), this problem has been fixed in
    version 0.4.5.10-1~deb11u1.

    We recommend that you upgrade your tor packages.

    For the detailed security status of tor please refer to its security
    tracker page at:
    https://security-tracker.debian.org/tracker/tor

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmEjuwdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0SjJg/+PFFycx6K0A36MtY5MPFx7XtqnqLAUvLxkKNNUv6pRWPUxEwnPFBjTG83 QPRs8jk1DQlrBUdnoZ4vWzyKRJsdjvzGN2YfDkcNnQ/l+GCILdrVa3VUKPmF00hR oKQVvI2GazWgGgBAStNFR8Vza79hKMxD3xb7XcMQsvzqore1SDenUc17Qjw04HE9 mzhWv8GctC19SfSbJvov2crRhWIjA3piK8FZMjaGPe8vnz/35hYo5QuW1K1YR2wd LG7tbRL6ZKhT4Mj9Iov3V2WjIaiNrCnTxgdP0eepYYUnAoX/D5FHfW18qGzwsa4N rwav7E4BGV4jamrAMNBYtCTBJamGQ6nleEyY+to4VhwrXwtD+Ao4BgOmY0kGkE6Z lw/gMKvpqhHra7OhqD4Kmg7fr1V/83mswZBpfQ06OVI5gG1rQBoSwMfHCthv4bhl ant6x+8Ly97uUQnEhuc1jwnKIsNlbkSy+fv5eq7mZ/Tihqf5Z+tldKHIoc+xcSSW LZgaFlehg/0rIB1c0U3/cuBAJ2o9QYzQRQE+lXA/42O0h1Ohdheqa/C+zPlia7Vk FVn5YwfeHsXHUjRg9FNBvHO6xb6mdFTdtjLOAKeCC0xz9erFYS7UeKGe48YdbiDc eUivHBwXolDD5dlm1msLyfmfrYdhr+oqSTr+zWwYpHB0x2Q3RKU=
    =9o4V
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)