[tor-bugs] #17027 [Tor]: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local addresses
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Dec 16 14:32:32 UTC 2015
#17027: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local
addresses
-------------------------------------------------+-------------------------
Reporter: teor | Owner:
Type: defect | Status:
Priority: High | needs_review
Component: Tor | Milestone: Tor:
Severity: Normal | 0.2.7.x-final
Keywords: TorCoreTeam201512, security, | Version: Tor:
027-backport | unspecified
Parent ID: | Resolution:
Sponsor: | Actual Points:
| Points:
-------------------------------------------------+-------------------------
Comment (by nickm):
My current vote here is "this is a feature; no backport." Are the
remaining issues in 0.2.7 worse than I think? I'm trying to balance those
issues against the risk that comes with any backport of significant size
or complexity (and this looks like one to me).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17027#comment:37>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list