Package: apt Version: 1.3~rc1 Severity: important Tags: security Control: fixed -1 1.7.0~alpha1
apt, starting with 1.3~rc1, and prior to 1.7.0~alpha1, generates a SRV request when trying to use the Tor proxy, asking the DNS server SRV _socks._tcp.localhost. This might cause information to be leaked that the user is about to use tor for Debian package installation, as no other tool is likely to perform such queries. -- debian developer - deb.li/jak | jak-linux.org - free software dev ubuntu core developer i speak de, en
