Mageia alert MGASA-2012-0356 (tor)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0356: tor-0.2.2.39-2.1.mga2 (2/core) 
Date:
    	     
 
Fri, 7 Dec 2012 22:44:10 +0100
Message-ID:
    	     
 
<20121207214410.GA7679@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0356
Date: 	December 7th, 2012
Affected releases: 	2


Description:
Updated tor package fixes security vulnerability:

Denial of Service vulnerability in Tor before 0.2.3.25, due to an error
when handling SENDME cells and can be exploited to cause excessive
consumption of memory resources within an entry node
(SA51329, CVE-2012-5573).


Updated Packages:
tor-0.2.2.39-2.1.mga2


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5573
https://secunia.com/advisories/51329/
https://trac.torproject.org/projects/tor/ticket/6252
http://lists.opensuse.org/opensuse-updates/2012-12/msg000...
https://bugs.mageia.org/show_bug.cgi?id=8325
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...