Upstream information

CVE-2015-2929 at MITRE

Description

The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and application exit) via a malformed HS descriptor.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having moderate severity.

SUSE Bugzilla entry: 926097 [RESOLVED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 13.1
  • tor >= 0.2.4.27-5.30.1
  • tor-debuginfo >= 0.2.4.27-5.30.1
  • tor-debugsource >= 0.2.4.27-5.30.1
Patchnames:
openSUSE-2015-300
openSUSE Tumbleweed
  • tor >= 0.2.8.11-1.1
Patchnames:
openSUSE Tumbleweed GA tor