Bugzilla – Bug 1043456
VUL-0: CVE-2017-0376: tor: hidden service assertion through BEGIN_DIR cell on rendezvous circuit (TROVE-2017-005)
Last modified: 2017-06-15 16:10:18 UTC
https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html > o Major bugfixes (hidden service, relay, security, backport > [.../ > - Fix a remotely triggerable assertion failure caused by receiving a > BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug > 22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix > on 0.2.2.1-alpha. Fixed in: 0.3.0.8 0.2.4.29 0.2.5.14 0.2.6.12 0.2.7.8 0.2.8.14 0.2.9.11 https://trac.torproject.org/projects/tor/ticket/22494 https://gitweb.torproject.org/tor.git/commit/?id=56a7c5bc15e0447203a491c1ee37de9939ad1dcd References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-0376 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0376
submitted
This is an autogenerated message for OBS integration: This bug (1043456) was mentioned in https://build.opensuse.org/request/show/502413 Factory / tor https://build.opensuse.org/request/show/502415 42.2 / tor
releasing, done
openSUSE-SU-2017:1569-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1043455,1043456 CVE References: CVE-2017-0375,CVE-2017-0376 Sources used: openSUSE Leap 42.2 (src): tor-0.2.9.11-8.3.1