Lucene search

K
suseSuseOPENSUSE-SU-2022:10023-1
HistoryJun 22, 2022 - 12:00 a.m.

Security update for tor (important)

2022-06-2200:00:00
lists.opensuse.org
19
tor update
vulnerability fix
remote trigger
geoip update
sandboxing fix
rtt estimation fix
opensuse patch instructions

EPSS

0.001

Percentile

50.2%

An update that fixes one vulnerability is now available.

Description:

This update for tor fixes the following issues:

tor was updated to 0.4.7.8:

  • Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This impacts
    clients, onion services, and relays, and can be triggered remotely by a
    malicious endpoint. (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  • Regenerate fallback directories generated on June 17, 2022.
  • Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  • Allow the rseq system call in the sandbox
  • logging bug fixes

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Backports SLE-15-SP4:

    zypper in -t patch openSUSE-2022-10023=1

  • openSUSE Backports SLE-15-SP3:

    zypper in -t patch openSUSE-2022-10023=1

OSVersionArchitecturePackageVersionFilename
openSUSE Backports SLE15-SP4aarch64- opensuse backports sle< 15-SP4 (aarch64 i586 ppc64le s390x x86_64):- openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Backports SLE15-SP4i586- opensuse backports sle< 15-SP4 (aarch64 i586 ppc64le s390x x86_64):- openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64):.i586.rpm
openSUSE Backports SLE15-SP4ppc64le- opensuse backports sle< 15-SP4 (aarch64 i586 ppc64le s390x x86_64):- openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Backports SLE15-SP4s390x- opensuse backports sle< 15-SP4 (aarch64 i586 ppc64le s390x x86_64):- openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64):.s390x.rpm
openSUSE Backports SLE15-SP4x86_64- opensuse backports sle< 15-SP4 (aarch64 i586 ppc64le s390x x86_64):- openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Backports SLE15-SP3aarch64- opensuse backports sle< 15-SP3 (aarch64 i586 ppc64le x86_64):- openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64):.aarch64.rpm
openSUSE Backports SLE15-SP3i586- opensuse backports sle< 15-SP3 (aarch64 i586 ppc64le x86_64):- openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64):.i586.rpm
openSUSE Backports SLE15-SP3ppc64le- opensuse backports sle< 15-SP3 (aarch64 i586 ppc64le x86_64):- openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64):.ppc64le.rpm
openSUSE Backports SLE15-SP3x86_64- opensuse backports sle< 15-SP3 (aarch64 i586 ppc64le x86_64):- openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le x86_64):.x86_64.rpm