Update Info

openSUSE-2025-373


Security update for tor


Type: security
Severity: moderate
Issued: 2025-09-26
Description:
This update for tor fixes the following issues:

- 0.4.8.18
  * CVE-2025-4444: onion service descriptor resource consumption
    issue (boo#1250101)

- 0.4.8.17
  * Minor features and bugfixes
  * use quantum-resistant MLKEM-768 cipher

- tor 0.4.8.16
  * fix typo in a directory authority rule file
  * fix a sandbox issue for bandwidth authority and a conflux issue
    on the control port
  * client fix about relay flag usage

- tor 0.4.8.14
  * bugfix for onion service directory cache
  * test-network now unconditionally includes IPv6
  * Regenerate fallback directories 2025-02-05
  * Update the geoip files to 2025-02-05
  * Fix a pointer free

- tor 0.4.8.13
  * Conflux related client circuit building performance bugfix
  * Fix minor memory leaks
  * Add STATUS TYPE=version handler for Pluggable Transport

- tor 0.4.8.12
  * Minor features and bugfixes
  * See https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes


              

Packages


  • tor-0.4.8.18-bp157.2.3.1