File _patchinfo of Package patchinfo.6856

<patchinfo incident="6856">
  <packager>AndreasStieger</packager>
  <issue tracker="cve" id="2017-0375"></issue>
  <issue tracker="cve" id="2017-0376"></issue>
  <issue tracker="bnc" id="1043455"></issue>
  <issue tracker="bnc" id="1043456"></issue>
  <category>security</category>
  <rating>moderate</rating>
  <summary>Security update for tor</summary>
  <description>This update to tor 0.2.9.11 fixes the following vulnerabilities:

- CVE-2017-0375: remotely triggerable assertion failure when a hidden service handles a malformed BEGIN cell (bsc#1043455)
- CVE-2017-0376: remotely triggerable assertion failure caused by receiving a BEGIN_DIR cell on a hidden service rendezvous circuit (bsc#1043456)</description>
</patchinfo>
openSUSE Build Service is sponsored by