shield Security update for tor
openSUSE-2025-373


This update for tor fixes the following issues: - 0.4.8.18 * CVE-2025-4444: onion service descriptor resource consumption issue (boo#1250101) - 0.4.8.17 * Minor features and bugfixes * use quantum-resistant MLKEM-768 cipher - tor 0.4.8.16 * fix typo in a directory authority rule file * fix a sandbox issue for bandwidth authority and a conflux issue on the control port * client fix about relay flag usage - tor 0.4.8.14 * bugfix for onion service directory cache * test-network now unconditionally includes IPv6 * Regenerate fallback directories 2025-02-05 * Update the geoip files to 2025-02-05 * Fix a pointer free - tor 0.4.8.13 * Conflux related client circuit building performance bugfix * Fix minor memory leaks * Add STATUS TYPE=version handler for Pluggable Transport - tor 0.4.8.12 * Minor features and bugfixes * See https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes

  • Release Date
    Sep 26 2025
  • References
    Bugzilla: 1250101
    CVEs: CVE-2025-4444
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Package Hub 15.7 x86_64
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp157.2.3.1 lock rpm
SUSE Package Hub 15.7 s390x
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp157.2.3.1 lock rpm
SUSE Package Hub 15.7 ppc64le
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp157.2.3.1 lock rpm
SUSE Package Hub 15.7 aarch64
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp157.2.3.1 lock rpm
SUSE Package Hub 15.6 s390x
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp156.2.3.1 lock rpm
SUSE Package Hub 15.6 x86_64
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp156.2.3.1 lock rpm
SUSE Package Hub 15.6 ppc64le
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp156.2.3.1 lock rpm
SUSE Package Hub 15.6 aarch64
  • Packages
    tor
    Anonymizing overlay network for TCP (The onion router)
    0.4.8.18-bp156.2.3.1 lock rpm