upgrade tor v0.4.1.7->0.4.1.9 (fixes CVE-2020-10592 & CVE-2020-10593)

This commit is contained in:
Fabian Peter Hammerle
2020-03-21 20:19:47 +01:00
parent e49b89c9d7
commit 140ebf8e2e
2 changed files with 6 additions and 5 deletions
+1 -1
View File
@@ -6,7 +6,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
### Fixed
- upgrade default tor version: 0.4.1.6 -> 0.4.1.7
- upgrade default tor version: 0.4.1.6 -> 0.4.1.9
(non-breaking, fixes only, https://gitweb.torproject.org/tor.git/plain/ChangeLog)
## [1.0.0] - 2019-10-12
+5 -4
View File
@@ -2,16 +2,17 @@ FROM alpine:3.11
ARG CURL_PACKAGE_VERSION=7.67.0-r0
ARG BIND_TOOLS_PACKAGE_VERSION=9.14.8-r5
ARG TOR_PACKAGE_VERSION=0.4.1.7-r0
ARG TOR_PACKAGE_VERSION=0.4.1.9-r0
RUN adduser -S onion \
&& apk add --no-cache \
curl=$CURL_PACKAGE_VERSION \
bind-tools=$BIND_TOOLS_PACKAGE_VERSION `# dig` \
tor=$TOR_PACKAGE_VERSION
# RUN apk add --no-cache man less \
# && apk add --no-cache tor-doc=$TOR_PACKAGE_VERSION \
# --repository $TOR_PACKAGE_REPOSITORY
# RUN apk add --no-cache \
# less \
# man \
# tor-doc=$TOR_PACKAGE_VERSION
# ENV PAGER=less
EXPOSE 9050/tcp