On Tue, 24 Mar 2020, Emilio Pozuelo Monfort wrote:
> On 28/12/2017 11:48, Emilio Pozuelo Monfort wrote:
> > On 04/12/17 13:31, Peter Palfrader wrote:
> >> Upstream is no longer maintaining the 0.2.4.x tree. Maybe it's time to
> >> terminate support for Tor in whee
am is no longer maintaining the 0.2.4.x tree. Maybe it's time to
terminate support for Tor in wheezy/oldoldstable?
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' O
three to react
- check who did updates for the package in the past
- if it also requires an update to stable, wait for that to happen.
Chances are, it takes priority
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Package: tor
Version: 0.2.4.29-1
CVE ID : CVE-2017-0376
Debian Bug : 864424
It has been discovered that Tor, a connection-based low-latency
anonymous communication system, contains a flaw in the hidden service
code. A
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Sat, 10 Jun 2017 11:11:57 +0200
Source: tor
Binary: tor tor-dbg tor-geoipdb
Architecture: source all
Version: 0.2.4.29-1
Distribution: wheezy-security
Urgency: medium
Maintainer: Peter Palfrader <wea...@debian.org>
C
ime
(more than a few minutes) before pinging them?
> Would you like to take care of this yourself?
I will. In time.
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Oper
to pass the name of the .changes file to
gen-DSA, and then the script can go and use all the information from
there?
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Mon, 19 Dec 2016 22:01:22 +0100
Source: tor
Binary: tor tor-dbg tor-geoipdb
Architecture: source all
Version: 0.2.4.27-3
Distribution: wheezy-security
Urgency: medium
Maintainer: Peter Palfrader <wea...@debian.org>
C
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Package: tor
Version: 0.2.4.27-2
It has been discovered that Tor treats the contents of some buffer
chunks as if they were a NUL-terminated string. This issue could
enable a remote attacker to crash a Tor client, hidden service,
you like to take care of this yourself?
It's already in progress.
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
| `-https://www.debian.org/
ian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
| `-https://www.debian.org/
urrent.
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
| `-https://www.debian.org/
. Everything is as it should be.
Cheers,
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
http://www.palfrader.org/ | `. `' Operating System
| `-http://www.debian.org/
--
To UNSUBSCRIBE, email
, or should I just go ahead and make packages and upload?
Cheers,
weasel
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
http://www.palfrader.org/ | `. `' Operating System
| `-http
14 matches
Mail list logo