http://lmgtfy.com/?q=CVE-2017-0380
-------- Original Message -------- Subject: Re: [tor-relays] More recent rpm somewhere? Local Time: September 17, 2017 12:53 PM UTC Time: September 17, 2017 12:53 PM From: bnagaev@gmail.com To: tor-relays@lists.torproject.org
On Sun, Sep 17, 2017 at 8:22 AM, nusenu nusenu-lists@riseup.net wrote:
I"m running a few relays on CentOS 7 As I"m sticking to the ease of rpm distributions, I"m left behind on 0.2.9.10 from EPEL
Does anyone know of another rpm repository with a more up to date version ?
I"m not aware of any updated (trustworthy) RPM repository. Also the promising comment on the bugtracker didn"t lead to an updated package https://bugzilla.redhat.com/show_bug.cgi?id=1284469#c48
The upcoming tor releases fixing CVE-2017-0380 will make it even more uncomfortable for RPM users if there will be no updated packages for them and it does not look like there is anyone working on it.
Can you provide a reference to CVE-2017-0380, please?
so the options are not to promising:
- build your own tor packages
- run your relay with another OS that has a maintained tor package
-- https://mastodon.social/@nusenu https://twitter.com/nusenu_
tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
-- Best regards, Boris Nagaev _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays