Every CVESearch/Get API key

openSUSE-SU-2023:0027-1

Security update for tor

No scoreFix available

openSUSE-SU-2023:0027-1 is a vulnerability with no CVSS score yet in tor, published January 21, 2023. No source lists public exploit code. Fixed in tor 0.4.7.13-bp154.2.12.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.4.7.13-bp154.2.12.1tor +1 more

Description

This update for tor fixes the following issues:

tor 0.4.7.13:

  • fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  • improve congestion control
  • fix relay channel handling

tor 0.4.7.12:

  • new key for moria1
  • new metrics are exported on the MetricsPort for the congestion control subsystem

Affected packages

Affected packages
PackageAffectedFixed
tor
SUSE:Package Hub 15 SP4
before 0.4.7.13-bp154.2.12.1
0.4.7.13-bp154.2.12.1
tor
openSUSE:Leap 15.4
before 0.4.7.13-bp154.2.12.1
0.4.7.13-bp154.2.12.1

What each source reports

OSVNo score

Security update for tor

This update for tor fixes the following issues:

tor 0.4.7.13:

  • fix SafeSocks option to avoid DNS leaks (boo#1207110, TROVE-2022-002)
  • improve congestion control
  • fix relay channel handling

tor 0.4.7.12:

  • new key for moria1
  • new metrics are exported on the MetricsPort for the congestion control subsystem
Record
openSUSE-SU-2023:0027-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open