Your message dated Thu, 08 Jun 2017 18:35:00 +0000
with message-id <[email protected]>
and subject line Bug#864424: fixed in tor 0.2.9.11-1
has caused the Debian Bug report #864424,
regarding tor onion services: remote assertion failure
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
864424: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864424
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tor
Version: 0.2.2.1-alpha-1
Severity: serious
Tags: security
There is a remotely triggerable assertion failure in Tor onion services.
This is a DoS issue for any tor instance providing an onion service.
Tor in all of Debian's suites is affected.
It's tracked as TROVE-2017-005, https://bugs.torproject.org/22494,
CVE-2017-0376.
[Additionally, Tor in experimental is affected by TROVE-2017-004,
https://bugs.torproject.org/22493 CVE-2017-0375.]
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
| `- https://www.debian.org/
--- End Message ---
--- Begin Message ---
Source: tor
Source-Version: 0.2.9.11-1
We believe that the bug you reported is fixed in the latest version of
tor, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Palfrader <[email protected]> (supplier of updated tor package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 08 Jun 2017 18:48:46 +0200
Source: tor
Binary: tor tor-dbg tor-geoipdb
Architecture: source
Version: 0.2.9.11-1
Distribution: unstable
Urgency: high
Maintainer: Peter Palfrader <[email protected]>
Changed-By: Peter Palfrader <[email protected]>
Description:
tor - anonymizing overlay network for TCP
tor-dbg - debugging symbols for Tor
tor-geoipdb - GeoIP database for Tor
Closes: 864424
Changes:
tor (0.2.9.11-1) unstable; urgency=high
.
* New upstream version.
- Fix a remotely triggerable assertion failure caused by receiving a
BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug
22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix
on 0.2.2.1-alpha. (closes: #864424)
Checksums-Sha1:
fcf10e208e1b4a62fad5d8eb9d609f94b73e4562 1827 tor_0.2.9.11-1.dsc
8b1f4e7580c7606d2b3c2bf69380f0c1cbfe850d 5584296 tor_0.2.9.11.orig.tar.gz
4ef736e81b823e562657b45d8dd6419aad1e73a3 41691 tor_0.2.9.11-1.diff.gz
Checksums-Sha256:
948faef97eb57c6a5fdb7ea7501d10676d747410c23c2eb579c1d9f643a70891 1827
tor_0.2.9.11-1.dsc
c1959bebff9a546a54cbedb58c8289a42441991af417d2d16f7b336be8903221 5584296
tor_0.2.9.11.orig.tar.gz
ecbf2b71cf73e6087c4ee6528903326196085ec278f82b1667d421575dd8c927 41691
tor_0.2.9.11-1.diff.gz
Files:
c5d329f7332c8dc0ace6b356a82ea150 1827 net optional tor_0.2.9.11-1.dsc
763ae964e916c2a7a4c5015d351fcf8b 5584296 net optional tor_0.2.9.11.orig.tar.gz
cc015c678b4a7f97cd0c3bac60dbda13 41691 net optional tor_0.2.9.11-1.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJZOZPLAAoJEIYCyCA4cjMfOzAH+wQOTt10uv9ahpLiRtEraJ8E
Ajk/UKD297bo9Ly0PFE/7uhc323w3xpuNJ8D6g/GusNmnblv6BPLbtqCgDaLcifc
sRtEp9KCg7fMFSYJZ8cJs4Iq/MQ5F/7fhvDpeFCxlDIUMnw+p8FafgX6ooCYRhGh
zvbjSBbrMfq1gTAkzQiLdIEBtrE0GOorrvnNMxcF+QXkLEqWdNJr0o44LLQu7DlN
8TjL3yEhHv+zCNvRKfznmO1/AvyfvNdylROdYVVWS/5533k06ICIuuoO9X/4WvBy
oY/4vwYFlkd8VUdj7zWevJILreKVSvgPFSCv++HP/erwQ5Ujb1BbdCDVFRPusjA=
=EPS6
-----END PGP SIGNATURE-----
--- End Message ---
