CVE-2020-10593

Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.

Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.

Updated tor package fixes security vulnerabilities:

Tor before 0.3.5.10 allows remote attackers to cause a Denial of Service (CPU consumption) (CVE-2020-10592).

Tor before 0.3.5.10 allows remote attackers to cause a Denial of Service (memory leak). This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit (CVE-2020-10593).

This update for tor to version 0.3.5.10 fixes the following issues:

• tor was updated to version 0.3.5.10:

• CVE-2020-10592: Fixed a CPU consumption denial of service and timing patterns (boo#1167013)

• CVE-2020-10593: Fixed a circuit padding memory leak (boo#1167014)

This update for tor to version 0.3.5.10 fixes the following issues:

• tor was updated to version 0.3.5.10:

• CVE-2020-10592: Fixed a CPU consumption denial of service and timing patterns (boo#1167013)

• CVE-2020-10593: Fixed a circuit padding memory leak (boo#1167014)

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for tor fixes the following issues:

Updating tor to a newer version in the respective codestream.

• tor 0.3.5.12:

  • Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741)
  • Not affected by out-of-bound memory access (CVE-2020-15572, boo#1173979)
  • Fix DoS defenses on bridges with a pluggable transport
  • CVE-2020-10592: CPU consumption DoS and timing patterns (boo#1167013)
  • CVE-2020-10593: circuit padding memory leak (boo#1167014)

• tor 0.4.4.6

  • Check channels+circuits on relays more thoroughly (TROVE-2020-005, boo#1178741)
  • Fix a crash due to an out-of-bound memory access (CVE-2020-15572, boo#1173979)
  • Fix logrotate to not fail when tor is stopped (boo#1164275)

These are all security issues fixed in the tor-0.4.6.7-2.2 package on the GA media of openSUSE Tumbleweed.