Debian/tor: critical 9
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.
Action: Upgrade tor to 0.4.9.11-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.9.11-1 | - |
Fixed versions
| 0.4.9.11-1 |
Sources
published · modified · JSON