Tor project releases update to close critical hole

[Peaches]

</h1>

<h1>Tor project releases update to close critical hole

The developers of the Tor (The Onion Routing project) anonymisation solution has released version 0.2.1.29 to close a hole that can be remotely exploited. According to the developers, the problem is caused by a heap overflow. Version 0.2.1.28, which was released in late December, had already fixed another heap overflow in Tor. This flaw could be exploited to remotely crash Tor and the developers didn't rule out that it could also have been exploited to inject and execute arbitrary code.

http://www.h-online.com/security/news/item/Tor-project-releases-update-to-close-critical-hole-1170454.html