tocsin

Debian/tor: unknown

Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by re

Action: Upgrade tor to 0.2.2.34-1 or later.

Affected

introducedfixedlast affected
00.2.2.34-1-

Fixed versions

0.2.2.34-1

Sources

published · modified · JSON