[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] Tor and Openssl bug CVE-2014-0160

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-talk] Tor and Openssl bug CVE-2014-0160
From: Roger Dingledine <arma@xxxxxxx>
Date: Mon, 7 Apr 2014 19:17:47 -0400
Delivered-to: archiver@xxxxxxxx
Delivery-date: Mon, 07 Apr 2014 19:26:39 -0400
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mutt/1.5.20 (2009-06-14)

A new OpenSSL vulnerability on 1.0.1 through 1.0.1f is out today,
which can be used to reveal up to 64kB of memory to a connected client
or server.

https://blog.torproject.org/blog/openssl-bug-cve-2014-0160

The short version is: upgrade your openssl (unless you're running an
old one), and also more packages coming soon.

--Roger
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Tor and Openssl bug CVE-2014-0160
  - From: Geoff Down

Prev by Author: Re: [tor-talk] Hidden Services Questions (mostly) Please?
Next by Author: Re: [tor-talk] TBB 3.5.4 says I should upgrade
Previous by thread: Re: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL
Next by thread: Re: [tor-talk] Tor and Openssl bug CVE-2014-0160
Index(es):
- Author
- Thread