[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Tor and Openssl bug CVE-2014-0160

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] Tor and Openssl bug CVE-2014-0160
From: Geoff Down <geoffdown@xxxxxxxxxxxx>
Date: Tue, 08 Apr 2014 02:56:06 +0100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Mon, 07 Apr 2014 21:56:35 -0400
Dkim-signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.net; h= message-id:from:to:mime-version:content-transfer-encoding :content-type:in-reply-to:references:subject:date; s=mesmtp; bh= P2uumWWrIO2ZS+8+i2UpGHWRUl0=; b=g3jbWpL7ifSmZYH7wsfLpF+8TChEHg5H 8Vp/Gb/JAA0jzRSRuemRJ5GFtUSuDuZv0Gjenn/BXZ4Rh9TPp0eg1Db31pYXURvL R5Z1jcn2pUyh2cmYV6WrVZqPV4xaIzpjFSxrCGrIBAQ/Rtyz6c/s8d6iSzIaYtwk GUWUO3Q/NFc=
Dkim-signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:in-reply-to:references :subject:date; s=smtpout; bh=P2uumWWrIO2ZS+8+i2UpGHWRUl0=; b=gSS QUpKmigob+6QJu8V9TWCeMYgvR6wNK/tahdjcjJONqWeDVpQgqmE9ip+dXf745pP fbiilby/oUdbv6zUL4wiEz3SP4np91jeAx8qdauMg3tClkmkVu7Ed070nO04ep28 LG+2MXo0gfWiPZx1U0qIBYEiGCaQvymmCTMrVqsM=
In-reply-to: <20140407231747.GH22584@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <20140407231747.GH22584@xxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>


On Tue, Apr 8, 2014, at 12:17 AM, Roger Dingledine wrote:
> A new OpenSSL vulnerability on 1.0.1 through 1.0.1f is out today,
> which can be used to reveal up to 64kB of memory to a connected client
> or server.
> 
> https://blog.torproject.org/blog/openssl-bug-cve-2014-0160
> 
> The short version is: upgrade your openssl (unless you're running an
> old one), and also more packages coming soon.
> 
> --Roger

So this is the openssl *binary*, the version of which is found by typing
 openssl version
not some library used when compiling Tor?
 If the latter, how do we find the version?
GD

-- 
http://www.fastmail.fm - Access all of your messages and folders
                          wherever you are

-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] Tor and Openssl bug CVE-2014-0160
  - From: kendrick eastes

References:
- [tor-talk] Tor and Openssl bug CVE-2014-0160
  - From: Roger Dingledine

Prev by Author: [tor-talk] Time synchronisation
Next by Author: Re: [tor-talk] Tor and Openssl bug CVE-2014-0160
Previous by thread: [tor-talk] Tor and Openssl bug CVE-2014-0160
Next by thread: Re: [tor-talk] Tor and Openssl bug CVE-2014-0160
Index(es):
- Author
- Thread