List overview
Download

tor-announce April 2014

tor-announce@lists.torproject.org

1 participants
1 discussions

Start a nNew thread

Tor security advisory: OpenSSL flaw
by Roger Dingledine 10 Apr '14

10 Apr '14

A new OpenSSL vulnerability is out this week, which can be used to reveal memory to a connected client or server. Tor uses OpenSSL so all Tor users (clients, relays, etc) are potentially affected. You can read many more details about the Tor impact on our blog post: https://blog.torproject.org/blog/openssl-bug-cve-2014-0160 We have released an updated Tor Browser Bundle: https://blog.torproject.org/blog/tor-browser-354-released --Roger

1 0