lainchan / Ω

(untitled)

Masami Eiri · 2018-01-31 01:14
Since mods locked the thread, this is another "you should update Tor" thread. A non-public-release "security incident" was announced. Most likely a vulnerability which results in Remote Code Execution, it was given a CVSS score of 10, as shown by the screenshot, courtesy of VulnDB. Here's a link to the Tor patch: https://trac.torproject.org/projects/tor/ticket/25074 and here's a link to the TROVE warning, which is so far blank aside from a "Medium" rating. https://trac.torproject.org/projects/tor/wiki/TROVE Now get off my dick, mods.
Tequila · 2018-01-31 02:26
Thanks OP. I hope the Fdroid update is soon.
Leto Atreides I · 2018-01-31 02:28
>>7806 from the looks of it, an official Tor patch isn't even out yet, hence the lack of more information. I'd recommend not running Tor at all until a new update is out or new information is released.
Spooky · 2018-01-31 09:41
No patch and no details. I don't understand what you're trying to do OP, this isn't helpful. Also OSVDB was shut down in 2016 so whereever you got that screenshot from, it's obviously fake. The fact that you couldn't find a public link or that a medium severity bug was apparently given a CVSS score of 10/10 should have been your first clues.
Lunch · 2018-01-31 18:58
>>7805 >Most likely a vulnerability which results in Remote Code Execution How did you get there? This is a Medium issue and only 1 of the High severity issues on the TROVE page looks like it could lead to RCE (use after free). >Now get off my dick, mods. When mods locked your last thread because there was no details did they say "please make some soykaf up and post again"? fuarrrk off and kill yourself.