tocsin

Debian/torbrowser-launcher: high 8.1

Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan

Action: Upgrade torbrowser-launcher to 0.2.4-1 or later.

Affected

introducedfixedlast affected
00.2.4-1-

Fixed versions

0.2.4-1

Sources

published · modified · JSON