[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-relays] OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
From: Dhalgren Tor <dhalgren.tor@xxxxxxxxx>
Date: Wed, 4 May 2016 16:52:04 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 04 May 2016 12:52:15 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=wPqadcKbgwT0PYII1+E7PmgFCBp1fRgJlVcAaFJ3POY=; b=KjXleYnUvmcbXMZxuNcpGVPs7WrCMQm1JpKCDBuB0S3BeTWe2NktSnlwPDMYePsLhV xYAh7V1OEpWFo/2VVRRjoRf4c0TiqZjY3B+sqiv4k0kzP1yWVNw31LQP7qi0ysyavwNS NkCGb0zfcv8BB7yYXOV1xrxUPGwnkC+pqLe0HbSha+t2uJcVcsq/xI+0l0dnC1iFmiyM Q7NJdcFT9oxQEZhU0Wmrtj4qCbkqtn5yn1Ow3ZICoXS1TUzin9MwXkR7FPrzTLKIz3ZI fxui6XsTEQbXlmWeM9wYJd1ZpIz1FqQbyCZbRbwffyZNrAF59LbDb1Sar3yAvfiiQnGX N2Gg==
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

https://www.openssl.org/news/secadv/20160503.txt

In general I understand that padding oracle attacks are principally a
hazard for browser communications.  Am assuming that updating OpenSSL
for this fix is not an urgent priority for a Tor Relay.

If anyone knows different please comment.
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
  - From: isis

Prev by Author: Re: [tor-relays] Search warrant and house search because of an exit in DE
Next by Author: Re: [tor-relays] Port knocking for SSH on a Tor node
Previous by thread: Re: [tor-relays] Port knocking for SSH on a Tor node
Next by thread: Re: [tor-relays] OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
Index(es):
- Author
- Thread