[tor-relays] More recent rpm somewhere?

teor teor2345 at gmail.com
Mon Sep 18 22:17:21 UTC 2017


> On 17 Sep 2017, at 22:53, Nagaev Boris <bnagaev at gmail.com> wrote:
> 
> On Sun, Sep 17, 2017 at 8:22 AM, nusenu <nusenu-lists at riseup.net> wrote:
>>> I'm running a few relays on CentOS 7
>>> As I'm sticking to the ease of rpm distributions, I'm left behind on
>>> 0.2.9.10 from EPEL
>>> 
>>> Does anyone know of another rpm repository with a more up to date version ?
>> 
>> I'm not aware of any updated (trustworthy) RPM repository.
>> Also the promising comment on the bugtracker didn't lead to an updated
>> package
>> https://bugzilla.redhat.com/show_bug.cgi?id=1284469#c48
>> 
>> The upcoming tor releases fixing CVE-2017-0380 will make it even more
>> uncomfortable for RPM users if there will be no updated packages for
>> them and it does not look like there is anyone working on it.
> 
> Can you provide a reference to CVE-2017-0380, please?

This issue does not affect relays, only hidden services with
SafeLogging turned off (the default is on).

https://trac.torproject.org/projects/tor/ticket/23490
https://lists.torproject.org/pipermail/tor-announce/2017-September/000139.html

T

--
Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B
ricochet:ekmygaiu4rzgsk6n
xmpp: teor at torproject dot org
------------------------------------------------------------------------



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20170919/59212cb2/attachment.sig>


More information about the tor-relays mailing list