Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 15 submissions in the queue.

Tor Browser 7.0.3 is Released (Major Security Bugfix Release for Linux Users Only)

posted by takyon on Tuesday August 01 2017, @08:52AM   Printer-friendly
from the click-our-summary's-specially-crafted-URLs dept.

An Anonymous Coward writes:

"This release features an important security update to Tor Browser for Linux users. On Linux systems with GVfs/GIO support Firefox allows to bypass proxy settings as it ships a whitelist of supported protocols. Once an affected user navigates to a specially crafted URL the operating system may directly connect to the remote host, bypassing Tor Browser. Tails and Whonix users, and users of our sandboxed Tor Browser are unaffected, though."

Original Submission

 
This discussion has been archived. No new comments can be posted.
Tor Browser 7.0.3 is Released (Major Security Bugfix Release for Linux Users Only) | Log In/Create an Account | Top | 20 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 2) by FatPhil on Wednesday August 02 2017, @08:29AM (1 child)

    by FatPhil (863) <{pc-soylent} {at} {asdf.fi}> on Wednesday August 02 2017, @08:29AM (#547875) Homepage
    Yeah, I was going to post something similar, framed around the following rhetorical question:

    So, who should we blame for this - RedHat (current majority contributor to Gnome), well known for things such as systemd, or Miguel de Icaza (originator of Gnome), well known for trying to push .NET into Linux?
    --
    Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  
    Total Score:   2  

  • (Score: 0) by Anonymous Coward on Wednesday August 02 2017, @06:48PM

    by Anonymous Coward on Wednesday August 02 2017, @06:48PM (#548049)
    Pretty sure de Icaza hasn't had anything to do with GNOME - or working - for years. He got a cushy sinecure from Microsoft after he endorsed .NET iirc.