Tor Browser Bundle 3.5.4 Updates OpenSSL To 1.0.1g

Tor Browser Bundle 3.5.4 is available in the Tor Browser Bundle PPA.

This release updates the OpenSSL version to 1.0.1g, to address potential client-side vectors for CVE-2014-0160. The browser itself does not use OpenSSL, and is not vulnerable to this CVE. However, this release is still considered an important security update, because it is theoretically possible to extract sensitive information from the Tor client sub-process.

Package info:

• Description: Tor Browser Bundle is a web browser based on Firefox ESR (Firefox with extended support), configured to protect users’ privacy and anonymity by using Tor and Vidalia, tools that come bundled with it. The bundle also includes 4 Firefox extensions: TorButton, TorLauncher, NoScript and HTTPS-Everywhere.
• Package name: tor-browser
• Ubuntu versions: 14.04, 13.10, 12.10 and 12.04
• PPA: Tor Browser Bundle PPA