Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package patchinfo.16832 for openSUSE:Leap:15.2:Update checked in at 2021-08-19 17:21:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2:Update/patchinfo.16832 (Old) and /work/SRC/openSUSE:Leap:15.2:Update/.patchinfo.16832.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "patchinfo.16832" Thu Aug 19 17:21:48 2021 rev:1 rq:912870 version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo incident="16832"> <issue tracker="bnc" id="1189489">VUL-0: CVE-2021-38385: tor: assertion failure in signature verification</issue> <issue tracker="cve" id="2021-38385"/> <packager>bmwiedemann</packager> <rating>important</rating> <category>security</category> <summary>Security update for tor</summary> <description>This update for tor fixes the following issues: tor 0.4.6.7: * Fix a DoS via a remotely triggerable assertion failure (boo#1189489, TROVE-2021-007, CVE-2021-38385) tor 0.4.6.6: * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch * Enable the deterministic RNG for unit tests that covers the address set bloomfilter-based API's tor 0.4.6.5 * Add controller support for creating v3 onion services with client auth * When voting on a relay with a Sybil-like appearance, add the Sybil flag when clearing out the other flags. This lets a relay operator know why their relay hasn't been included in the consensus * Relays now report how overloaded they are * Add a new DoS subsystem to control the rate of client connections for relays * Relays now publish statistics about v3 onions services * Improve circuit timeout algorithm for client performance </description> </patchinfo>
