-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 22 Mar 2015 14:34:19 CET Source: tor Binary: tor tor-dbg tor-geoipdb Architecture: all source Version: 0.2.4.26-1 Distribution: wheezy-security Urgency: medium Maintainer: Peter Palfrader <wea...@debian.org> Changed-By: Peter Palfrader <wea...@debian.org> Description: tor - anonymizing overlay network for TCP tor-dbg - debugging symbols for Tor tor-geoipdb - GeoIP database for Tor Changes: tor (0.2.4.26-1) wheezy-security; urgency=medium . * New upstream version. + Fixes the following security relevant issues (copied from upstream changelog): - Fix an assertion failure that could occur under high DNS load. Fixes bug 14129; bugfix on Tor 0.0.7rc1. Found by "jowr"; diagnosed and fixed by "cypherpunks". - Fix a bug that could lead to a relay crashing with an assertion failure if a buffer of exactly the wrong layout was passed to buf_pullup() at exactly the wrong time. Fixes bug 15083; bugfix on 0.2.0.10-alpha. Patch from 'cypherpunks'. - Do not assert if the 'data' pointer on a buffer is advanced to the very end of the buffer; log a BUG message instead. Only assert if it is past that point. Fixes bug 15083; bugfix on 0.2.0.10-alpha. - Disable support for SSLv3. All versions of OpenSSL in use with Tor today support TLS 1.0 or later, so we can safely turn off support for this old (and insecure) protocol. Fixes bug 13426. + Updates the list of directory authorities and the geoIP database. Checksums-Sha256: 97390c6790d705ebfcf2c952537bee8b6f0a19ea3534a129d8d341273ae1015d 1199414 tor-geoipdb_0.2.4.26-1_all.deb d34f5f0d13a4b31de011532d38b5f84afd6cd4235ce9e8fe9ece2014c9f37fad 1701 tor_0.2.4.26-1.dsc 7095469ea65fe309194e0885f9c4dabf5742704fca1f11d3a645224336b9303d 3132691 tor_0.2.4.26.orig.tar.gz 8051e8418c5ceb097df24279208b37d68133ea5341d05b87a018d8b1e1ec8644 35206 tor_0.2.4.26-1.diff.gz Checksums-Sha1: c03ba02d22d00c3e20557e6594abe3b6ff578b0a 1199414 tor-geoipdb_0.2.4.26-1_all.deb aa3866d7a6d1f12584ecf59517344bed82f85bb6 1701 tor_0.2.4.26-1.dsc 394b5485ea01bc8cf5620273ad60551a6e2d6d8b 3132691 tor_0.2.4.26.orig.tar.gz cf36c978d0a893ffc887480ebae10ac5a062ec91 35206 tor_0.2.4.26-1.diff.gz Files: a22dc359f8f1d4d2b1cde4d7143941eb 1199414 net extra tor-geoipdb_0.2.4.26-1_all.deb 7ea25edd2c2f0d03138a00efe2392181 1701 net optional tor_0.2.4.26-1.dsc ae923e0a6fcbd4b5cde7cf87b525fe61 3132691 - - tor_0.2.4.26.orig.tar.gz bf47ac9776b3673830a3ea9b99727923 35206 - - tor_0.2.4.26-1.diff.gz
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJVDsULAAoJEIYCyCA4cjMf9esH/1PQ71TI4PZZN06fT1tPHzOn kOE8KGrmK29xAhk54WKR56YTuXA03j6IDWhRV5lRme+dBd8479kzUEJUGM6IV5PF kWr0Yq3xpQY378+NmIz99HTnQT6neqH9+fFpqG8hQRvBqluhp214mKsIWabMCFZD w7AkmwxcWg/5Wuj0TKJuMZpMH9Sa38xWZ7MKnSpqShpoDJp9kf6fQoEUixHwLXaQ hoSM6BTNg5KnkyBnutGfF7Hqs4WPgqn8jMtktsLKo6Ko9+KOh2446P7NSSA2TEbD t0Pzs91F/wepTjmlSA8hXyqvTd8KW1ap04GMwTYXhuIg9swOfkN6zOprrH1Yl34= =MW0V -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1yzp7a-0000om...@franck.debian.org