fphammerle/docker-tor-proxy
1
0
Fork 0
mirror of https://github.com/fphammerle/docker-tor-proxy.git synced 2025-10-27 02:43:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

upgrade alpine base image v3.12.2->v3.13.3 including upgrade of tor v0.4.4.7-r1->v0.4.4.8-r0 (see below)

Browse Source 
> One of these vulnerabilities (TROVE-2021-001) would allow an attacker
> who can send directory data to a Tor instance to force that Tor
> instance to consume huge amounts of CPU.
https://gitweb.torproject.org/tor.git/plain/ChangeLog

https://cve.circl.lu/cve/CVE-2021-28089

https://git.alpinelinux.org/aports/commit/community/tor?id=dc7ce7e4b63c64d11026e307ada830c33d8309a4

https://github.com/fphammerle/docker-onion-service/commit/48c53ae15c2780b3ac97ac55a91748e947a55ead
This commit is contained in:
Fabian Peter Hammerle
2021-03-27 15:26:01 +01:00
parent f9f3095cba 4e2545483d
commit 76f7fcaf09
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+2 -2
View File
@@ -1,6 +1,6 @@
FROM docker.io/alpine:3.13.2
FROM docker.io/alpine:3.13.3
ARG TOR_PACKAGE_VERSION=0.4.4.7-r1
ARG TOR_PACKAGE_VERSION=0.4.4.8-r0
RUN apk add --no-cache tor=$TOR_PACKAGE_VERSION
VOLUME /var/lib/tor