Debian/tor: medium 5.3
Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compressio
Action: Upgrade tor to 0.4.9.9-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.9.9-1 | - |
Fixed versions
| 0.4.9.9-1 |
Sources
published · modified · JSON