[tor-bugs] #17027 [Tor]: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local addresses
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Sep 10 07:44:30 UTC 2015
#17027: policies_parse_exit_policy_internal should block all IPv4 and IPv6 local
addresses
-------------------------+-------------------------------------------------
Reporter: teor | Owner:
Type: defect | Status: new
Priority: major | Milestone: Tor: 0.2.7.x-final
Component: Tor | Version: Tor: 0.2.7.2-alpha
Resolution: | Keywords: TorCoreTeam201509 security
Actual Points: | 026-backport
Points: | Parent ID:
-------------------------+-------------------------------------------------
Comment (by teor):
We should also update the man page and torrcs with this change, as it
changes the meaning of "private" to mean "all IPv4 and IPv6 addresses on
all server interfaces", rather than "a single IPv4 address on one of the
server's interfaces". (It's ambiguous in the man page at the moment.)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17027#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list