openSUSE-SU-2022:10209-1
Security update for tor
No scoreFix available
openSUSE-SU-2022:10209-1 is a vulnerability with no CVSS score yet in tor, published November 20, 2022. No source lists public exploit code. Fixed in tor 0.4.7.11-bp154.2.9.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.4.7.11-bp154.2.9.1tor +3 more
Description
This update for tor fixes the following issues:
tor 0.4.7.11:
- Improve security of DNS cache by randomly clipping the TTL value (boo#1205307, TROVE-2021-009)
- Improved defenses against network-wide DoS, multiple counters and metrics added to MetricsPorts
- Apply circuit creation anti-DoS defenses if the outbound circuit max cell queue size is reached too many times. This introduces two new consensus parameters to control the queue size limit and number of times allowed to go over that limit.
- Directory authority updates
- IPFire database and geoip updates
- Bump the maximum amount of CPU that can be used from 16 to 128. The NumCPUs torrc option overrides this hardcoded maximum.
- onion service: set a higher circuit build timeout for opened client rendezvous circuit to avoid timeouts and retry load
- Make the service retry a rendezvous if the circuit is being repurposed for measurements
Affected packages
| Package | Affected | Fixed |
|---|---|---|
torSUSE:Package Hub 15 SP3 | before 0.4.7.11-bp154.2.9.1 | 0.4.7.11-bp154.2.9.1 |
torSUSE:Package Hub 15 SP4 | before 0.4.7.11-bp154.2.9.1 | 0.4.7.11-bp154.2.9.1 |
toropenSUSE:Leap 15.3 | before 0.4.7.11-bp154.2.9.1 | 0.4.7.11-bp154.2.9.1 |
toropenSUSE:Leap 15.4 | before 0.4.7.11-bp154.2.9.1 | 0.4.7.11-bp154.2.9.1 |
What each source reports
OSVNo score
Security update for tor
This update for tor fixes the following issues:
tor 0.4.7.11:
- Improve security of DNS cache by randomly clipping the TTL value (boo#1205307, TROVE-2021-009)
- Improved defenses against network-wide DoS, multiple counters and metrics added to MetricsPorts
- Apply circuit creation anti-DoS defenses if the outbound circuit max cell queue size is reached too many times. This introduces two new consensus parameters to control the queue size limit and number of times allowed to go over that limit.
- Directory authority updates
- IPFire database and geoip updates
- Bump the maximum amount of CPU that can be used from 16 to 128. The NumCPUs torrc option overrides this hardcoded maximum.
- onion service: set a higher circuit build timeout for opened client rendezvous circuit to avoid timeouts and retry load
- Make the service retry a rendezvous if the circuit is being repurposed for measurements
- Record
openSUSE-SU-2022:10209-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.