A vulnerability has been discovered in Freenet, where an XSS vulnerability could lead to deanonymization.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-p2p/freenet | * | < 0.7.5_p1505 | >= 0.7.5_p1505 |
Freenet is an encrypted network without censorship.
A vulnerability has been discovered in Freenet. Please review the CVE identifier referenced below for details.
This release fixes as an XSS vulnerability that may allow an attacker to deanonymize the user.
There is no known workaround at this time.
All Freenet users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-p2p/freenet-0.7.5_p1505"
A vulnerability has been discovered in Freenet, which can lead to deanonymization due to path folding.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-p2p/freenet | * | < 0.7.5_p1497 | >= 0.7.5_p1497 |
Freenet is an encrypted network without censorship.
This release fixes a severe vulnerability in path folding that allowed to distinguish between downloaders and forwarders with an adapted node that is directly connected via opennet.
This release fixes a severe vulnerability in path folding that allowed to distinguish between downloaders and forwarders with an adapted node that is directly connected via opennet.
There is no known workaround at this time.
All Freenet users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-p2p/freenet-0.7.5_p1497"