[tor-bugs] #17443 [Tor]: tor-gencert --passphrase-fd improperly checks for newline
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Feb 11 18:18:56 UTC 2016
#17443: tor-gencert --passphrase-fd improperly checks for newline
------------------------------------------------+--------------------------
Reporter: junglefowl | Owner:
Type: defect | Status:
Priority: Medium | needs_review
Component: Tor | Milestone: Tor:
Severity: Normal | 0.2.8.x-final
Keywords: security 027-backport 026-backport | Version: Tor:
Parent ID: | 0.2.7.4-rc
Sponsor: | Resolution:
| Actual Points:
| Points:
------------------------------------------------+--------------------------
Comment (by nickm):
I don't see how this is security unless the user is sending
unauthenticated data as their passphrase? I think it should be fine to
just get it in 0.2.8.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17443#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list