Upgrade onioncircuits to 0.8.2 to fix LPE to arbitrary code exec in its privileged network namespace (#20744) · Issues · tails / tails · GitLab

Upgrade onioncircuits to 0.8.2 to fix LPE to arbitrary code exec in its privileged network namespace

It fixes a case of the `python3 -I` bug that we missed when we meant to fix tails/tails#20702. (I expected this to already be in Tails, but the latest `stable` build only has `0.8.1-2`). # User impact intrigeri expects the impact to be similar to tails/tails#20709. # Practical exploitation path Like #20702, this can be exploited by any attacker who can write to `/home/amnesia/.local/lib/`.

issue