portage-ng / portage / net-vpn / tor / 0.4.9.14
portage-ng glsa
5 advisories reference net-vpn/tor · none place version 0.4.9.14 in a vulnerable range
▸ GLSA 202608-32 Tor: Multiple Vulnerabilities this version unaffected high remote 2026-08-29

Multiple vulnerabilities have been found in Tor, the worst of which could allow remote code execution.

Announced
2026-08-29
Revised
2026-08-29
Access
remote
Bugs
#965987 #969415 #971568 #974279 #976637 #977978 #978087
Advisory
https://security.gentoo.org/glsa/202608-32

Affected packages

PackageArchVulnerableUnaffected
net-vpn/tor*< 0.4.9.11>= 0.4.9.11

Background

Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service.

Description

Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Tor users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.9.11"

References

▸ GLSA 202409-24 Tor: Multiple Vulnerabilities this version unaffected low remote 2024-09-24

Multiple vulnerabilities have been found in Tor, the worst of which could result in denial of service.

Announced
2024-09-24
Revised
2024-09-24
Access
remote
Bugs
#916759 #917142
Advisory
https://security.gentoo.org/glsa/202409-24

Affected packages

PackageArchVulnerableUnaffected
net-vpn/tor*< 0.4.8.9>= 0.4.8.9

Background

Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service.

Description

Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Tor users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.8.9"

References

▸ GLSA 202305-11 Tor: Multiple Vulnerabilities this version unaffected normal remote 2023-05-03

Multiple vulnerabilities have been found in Tor, the worst of which could result in denial of service.

Announced
2023-05-03
Revised
2023-05-03
Access
remote
Bugs
#808681 #852821 #890618
Advisory
https://security.gentoo.org/glsa/202305-11

Affected packages

PackageArchVulnerableUnaffected
net-vpn/tor*< 0.4.7.13>= 0.4.7.13

Background

Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service.

Description

Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Tor users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.7.13"

References

▸ GLSA 202107-25 Tor: Multiple vulnerabilities this version unaffected normal remote 2021-07-10

Multiple vulnerabilities have been found in Tor, the worst of which could result in a Denial of Service condition.

Announced
2021-07-10
Revised
2021-07-10
Access
remote
Bugs
#776586 #795969
Advisory
https://security.gentoo.org/glsa/202107-25

Affected packages

PackageArchVulnerableUnaffected
net-vpn/tor*< 0.4.6.5>= 0.4.6.5, >= 0.4.5.9, >= 0.4.4.9

Background

Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service.

Description

Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Tor 0.4.6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.6.5"

All Tor 0.4.5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.5.9"

All Tor 0.4.4.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.4.9"

References

▸ GLSA 202003-50 Tor: Multiple vulnerabilities version not in range low remote 2020-03-25

Multiple vulnerabilities were found in Tor, the worst of which could allow remote attackers to cause a Denial of Service condition.

Announced
2020-03-25
Revised
2020-03-25
Access
remote
Bugs
#713238
Advisory
https://security.gentoo.org/glsa/202003-50

Affected packages

PackageArchVulnerableUnaffected
net-vpn/tor*< 0.4.2.7>= 0.4.1.9 (revision), >= 0.4.2.7 (revision)

Background

Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service.

Description

Multiple vulnerabilities have been discovered in Tor, and tor. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Tor 0.4.1.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.1.9"

All Tor 0.4.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-vpn/tor-0.4.2.7"

References