[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] relays and CUPS vulnerabilities

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-relays] relays and CUPS vulnerabilities
From: George via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>
Date: Fri, 27 Sep 2024 09:41:29 -0400
Autocrypt: addr=george@xxxxxxxxxx; keydata= xjMEZoRx0xYJKwYBBAHaRw8BAQdAzRcqiVmj7VP9+GEg0mnpp0rkgabPzDdWpHqa3/EHJFTN Gkdlb3JnZSA8Z2VvcmdlQHF1ZWFpci5uZXQ+wpkEExYKAEEWIQRDwoWwQbZKwQ4CJ2dwkq6z QLDIBAUCZoRx0wIbAwUJBaOagAULCQgHAgIiAgYVCgkICwIEFgIDAQIeBwIXgAAKCRBwkq6z QLDIBMSuAP9oNBJLVnftJ607qE5+e0L0/7SXlKCKchFj/lSi1ww1PgD/X/zi6/tj47bliuK2 IuOgRVzMsOBAxNCQ7qC9MPTylATOOARmhHHTEgorBgEEAZdVAQUBAQdA3yF+YhxFho9Cjzrs ssGaMuBuNoLRbBTJk46DyfsAwzMDAQgHwn4EGBYKACYWIQRDwoWwQbZKwQ4CJ2dwkq6zQLDI BAUCZoRx0wIbDAUJBaOagAAKCRBwkq6zQLDIBAkxAQCrdIIM5g1XHmvAQFBo2yM0G6UJRf2h j7ONRkJ1DlNU0AEAvL1hGiCh4/52Kz6r6tl9DPi50WTyqaIHINHy5c3YJQY=
Cc: George <george@xxxxxxxxxx>
Delivered-to: archiver@xxxxxxxx
Delivery-date: Fri, 27 Sep 2024 09:41:46 -0400
Dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=lists.torproject.org; s=2022-eugeni; t=1727444499; bh=lFCDxaVg8c4zYNpKVNhOss9h4DMThxjCnSasRqixKFU=; h=Date:To:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:From:Reply-To:Cc:From; b=xGN970GC+krOLlPk48ZgwhcvN5uzgGTUEGJczGGSy82YF/iCLvnEVrJapR2KEQyAJ tV/a+2iy9lfVOXsEUCOL9GUjgzTX32lyoq6tzqrCfgfPadgmpbXe9xEmrn2THxny/Q Z7llICpv/asa4qOkPkiHS8ZAcb+6QTYAuKmQ2bwJgnRnWOkJD+Y0pTNdRja/srkkbg 7G+w5Ts5iv0/O/gRhOVcrfhV4n+9QKXNxMQio9y8ewyz/+KuDkwEb7d7ogNgvc3YAz anmPxum8mIIsik7McMGTc84gdccYTSsZFrPDZ1Qa0B+FXAKoo5R3LL5GljGHZsNZ0Z qZmEG0NFMbp0g==
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla Thunderbird

There are some very significant recent CVEs out for CUPS, the unix
printing system.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=cups

It's an ideal moment to remind relay operators that a Tor node, relay or
bridge, should be a single-purpose internet server.

Running alternate internet services is a bad idea. The node should have
the minimum packages installed for the purpose of running a node. More
packages means more possible vulnerabilities.

Needless to say, a CUPS server listening on 631/tcp or 631/udp while
providing Tor access is a bad idea.

g


-- 
43C2 85B0 41B6 4AC1 0E02 2767 7092 AEB3 40B0 C804

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] relays and CUPS vulnerabilities
  - From: George Hartley via tor-relays
- Re: [tor-relays] relays and CUPS vulnerabilities
  - From: Roger Dingledine

Prev by Author: Re: [tor-relays] relays and CUPS vulnerabilities
Next by Author: Re: [tor-relays] Next Tor Relay Operator Meetup - September 7th, 2024 at 19UTC
Previous by thread: Re: [tor-relays] Relay disconnect & offline on IP change
Next by thread: Re: [tor-relays] relays and CUPS vulnerabilities
Index(es):
- Author
- Thread