[tor-bugs] #12642 [Ooni]: Can Network Attacker Downgrade Dependency Install Security?

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Dec 2 16:40:40 UTC 2015


#12642: Can Network Attacker Downgrade Dependency Install Security?
-----------------------+-------------------------
 Reporter:  earthrise  |          Owner:  hellais
     Type:  defect     |         Status:  closed
 Priority:  Medium     |      Milestone:
Component:  Ooni       |        Version:
 Severity:  Normal     |     Resolution:  fixed
 Keywords:             |  Actual Points:
Parent ID:             |         Points:
  Sponsor:             |
-----------------------+-------------------------
Changes (by hellais):

 * status:  new => closed
 * resolution:   => fixed
 * severity:   => Normal


Comment:

 This has been fixed in later versions of pip so it's no longer an issue.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12642#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list