Security update for tor SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:10209-1 Final 1 1 2022-11-20T19:01:41Z current 2022-11-20T19:01:41Z 2022-11-20T19:01:41Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tor This update for tor fixes the following issues: tor 0.4.7.11: * Improve security of DNS cache by randomly clipping the TTL value (boo#1205307, TROVE-2021-009) * Improved defenses against network-wide DoS, multiple counters and metrics added to MetricsPorts * Apply circuit creation anti-DoS defenses if the outbound circuit max cell queue size is reached too many times. This introduces two new consensus parameters to control the queue size limit and number of times allowed to go over that limit. * Directory authority updates * IPFire database and geoip updates * Bump the maximum amount of CPU that can be used from 16 to 128. The NumCPUs torrc option overrides this hardcoded maximum. * onion service: set a higher circuit build timeout for opened client rendezvous circuit to avoid timeouts and retry load * Make the service retry a rendezvous if the circuit is being repurposed for measurements The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2022-10209 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KMI2QZMW7Z7265ZD4MJX4P6F34NIF2HZ/ E-Mail link for openSUSE-SU-2022:10209-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1205307 SUSE Bug 1205307 SUSE Package Hub 15 SP3 SUSE Package Hub 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 tor-0.4.7.11-bp154.2.9.1 tor-0.4.7.11-bp154.2.9.1 as a component of SUSE Package Hub 15 SP3 tor-0.4.7.11-bp154.2.9.1 as a component of SUSE Package Hub 15 SP4 tor-0.4.7.11-bp154.2.9.1 as a component of openSUSE Leap 15.3 tor-0.4.7.11-bp154.2.9.1 as a component of openSUSE Leap 15.4