Accepted tor 0.2.4.26-1 (all source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 22 Mar 2015 14:34:19 CET
Source: tor
Binary: tor tor-dbg tor-geoipdb
Architecture: all source
Version: 0.2.4.26-1
Distribution: wheezy-security
Urgency: medium
Maintainer: Peter Palfrader <weasel@debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Description:
tor - anonymizing overlay network for TCP
tor-dbg - debugging symbols for Tor
tor-geoipdb - GeoIP database for Tor
Changes:
tor (0.2.4.26-1) wheezy-security; urgency=medium
.
* New upstream version.
+ Fixes the following security relevant issues (copied from upstream
changelog):
- Fix an assertion failure that could occur under high DNS load.
Fixes bug 14129; bugfix on Tor 0.0.7rc1. Found by "jowr";
diagnosed and fixed by "cypherpunks".
- Fix a bug that could lead to a relay crashing with an assertion
failure if a buffer of exactly the wrong layout was passed to
buf_pullup() at exactly the wrong time. Fixes bug 15083; bugfix on
0.2.0.10-alpha. Patch from 'cypherpunks'.
- Do not assert if the 'data' pointer on a buffer is advanced to the
very end of the buffer; log a BUG message instead. Only assert if
it is past that point. Fixes bug 15083; bugfix on 0.2.0.10-alpha.
- Disable support for SSLv3. All versions of OpenSSL in use with Tor
today support TLS 1.0 or later, so we can safely turn off support
for this old (and insecure) protocol. Fixes bug 13426.
+ Updates the list of directory authorities and the geoIP database.
Checksums-Sha256:
97390c6790d705ebfcf2c952537bee8b6f0a19ea3534a129d8d341273ae1015d 1199414 tor-geoipdb_0.2.4.26-1_all.deb
d34f5f0d13a4b31de011532d38b5f84afd6cd4235ce9e8fe9ece2014c9f37fad 1701 tor_0.2.4.26-1.dsc
7095469ea65fe309194e0885f9c4dabf5742704fca1f11d3a645224336b9303d 3132691 tor_0.2.4.26.orig.tar.gz
8051e8418c5ceb097df24279208b37d68133ea5341d05b87a018d8b1e1ec8644 35206 tor_0.2.4.26-1.diff.gz
Checksums-Sha1:
c03ba02d22d00c3e20557e6594abe3b6ff578b0a 1199414 tor-geoipdb_0.2.4.26-1_all.deb
aa3866d7a6d1f12584ecf59517344bed82f85bb6 1701 tor_0.2.4.26-1.dsc
394b5485ea01bc8cf5620273ad60551a6e2d6d8b 3132691 tor_0.2.4.26.orig.tar.gz
cf36c978d0a893ffc887480ebae10ac5a062ec91 35206 tor_0.2.4.26-1.diff.gz
Files:
a22dc359f8f1d4d2b1cde4d7143941eb 1199414 net extra tor-geoipdb_0.2.4.26-1_all.deb
7ea25edd2c2f0d03138a00efe2392181 1701 net optional tor_0.2.4.26-1.dsc
ae923e0a6fcbd4b5cde7cf87b525fe61 3132691 - - tor_0.2.4.26.orig.tar.gz
bf47ac9776b3673830a3ea9b99727923 35206 - - tor_0.2.4.26-1.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJVDsULAAoJEIYCyCA4cjMf9esH/1PQ71TI4PZZN06fT1tPHzOn
kOE8KGrmK29xAhk54WKR56YTuXA03j6IDWhRV5lRme+dBd8479kzUEJUGM6IV5PF
kWr0Yq3xpQY378+NmIz99HTnQT6neqH9+fFpqG8hQRvBqluhp214mKsIWabMCFZD
w7AkmwxcWg/5Wuj0TKJuMZpMH9Sa38xWZ7MKnSpqShpoDJp9kf6fQoEUixHwLXaQ
hoSM6BTNg5KnkyBnutGfF7Hqs4WPgqn8jMtktsLKo6Ko9+KOh2446P7NSSA2TEbD
t0Pzs91F/wepTjmlSA8hXyqvTd8KW1ap04GMwTYXhuIg9swOfkN6zOprrH1Yl34=
=MW0V
-----END PGP SIGNATURE-----