[tor-bugs] #31533 [Applications/GetTor]: Require Twisted 19.7.0 because it fixes CVE-2019-12855 in jabber

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Aug 26 23:39:18 UTC 2019


#31533: Require Twisted 19.7.0 because it fixes CVE-2019-12855 in jabber
-------------------------------------+--------------------
     Reporter:  teor                 |      Owner:  (none)
         Type:  defect               |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/GetTor  |    Version:
     Severity:  Normal               |   Keywords:
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+--------------------
 Does gettor use the jabber protocol?

 If it does, we need to require Twisted 19.7.0 in gettor:
 http://cve.circl.lu/cve/CVE-2019-12855

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31533>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list