OPENSUSE-SU-2020:1970-1: tor&distro=openSUSE Leap 15.1
Vulnerability summary
OPENSUSE-SU-2020:1970-1 is a vulnerability in tor&distro=openSUSE Leap 15.1 with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 19-11-2020PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for tor This update for tor fixes the following issues: Updating tor to a newer version in the respective codestream. - tor 0.3.5.12: * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) * Not affected by out-of-bound memory access (CVE-2020-15572, boo#1173979) * Fix DoS defenses on bridges with a pluggable transport * CVE-2020-10592: CPU consumption DoS and timing patterns (boo#1167013) * CVE-2020-10593: circuit padding memory leak (boo#1167014) - tor 0.4.4.6 * Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741) * Fix a crash due to an out-of-bound memory access (CVE-2020-15572, boo#1173979) * Fix logrotate to not fail when tor is stopped (boo#1164275)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- tor&distro=SUSE Package Hub 12< 0.4.4.6-bp152.2.3.1
- tor&distro=SUSE Package Hub 15 SP1< 0.4.4.6-bp152.2.3.1
- tor&distro=SUSE Package Hub 15 SP2< 0.4.4.6-bp152.2.3.1
Opensuse2 products
- tor&distro=openSUSE Leap 15.1< 0.4.4.6-bp152.2.3.1
- tor&distro=openSUSE Leap 15.2< 0.4.4.6-bp152.2.3.1
2 vendors · 5 products
References
9 links- lists.opensuse.org/archives/…Advisory