Все бюллетени/sisyphus/ALT-PU-2026-10107-2
ALT-PU-2026-10107-2

Обновление пакета tor в ветке sisyphus

Версия0.4.9.11-alt1
Задание#423206
Опубликовано2026-09-18
Макс. серьёзностьCRITICAL
Серьёзность:

Закрытые проблемы (3)

CVE-2026-77584
HIGH8.2

Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit back-pointer and a use-after-free (UAF) when the circuit is freed. This is TROVE-2026-025.

Опубликовано: 2026-08-20Изменено: 2026-09-16
CVSS 3.xВЫСОКАЯ 8.2
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Ссылки
CVE-2026-77587
HIGH7.5

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

Опубликовано: 2026-08-20Изменено: 2026-09-16
CVSS 3.xВЫСОКАЯ 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ссылки
CVE-2026-77638
CRITICAL9.0

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.

Опубликовано: 2026-08-20Изменено: 2026-09-16
CVSS 3.xКРИТИЧЕСКАЯ 9.0
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Ссылки

Закрытые ошибки (1)

Ошибка #59572

Сервис tor запускается с устаревшим параметром group