Re: outdated Tor version in Fedora (missing security fixes)

2011-06-13 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/10/2011 11:38 PM, Fennix wrote: On Sat, Jun 11, 2011 at 8:30 AM, Christoph A. cas...@gmail.com mailto:cas...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/10/2011 06:28 PM, Fennix wrote: As to

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-10 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/10/2011 06:28 PM, Fennix wrote: As to the SELinux policy questions...I am not sure. I have always compiled and the TOR package has always worked without any SELinux complaints so for this question I have never looked into this. the output

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-10 Thread Fennix
On Sat, Jun 11, 2011 at 8:30 AM, Christoph A. cas...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/10/2011 06:28 PM, Fennix wrote: As to the SELinux policy questions...I am not sure. I have always compiled and the TOR package has always worked without any SELinux

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-10 Thread Fennix
On Fri, Jun 10, 2011 at 2:19 AM, Christoph A. cas...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/07/2011 04:06 PM, Fennix wrote: Umm, you could just download the source file and compile yourself... Yes, *I* could, but if Fedora ships a vulnerable package this

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-09 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/07/2011 04:06 PM, Fennix wrote: Umm, you could just download the source file and compile yourself... Yes, *I* could, but if Fedora ships a vulnerable package this affects a lot more people then just me. Compiling is always a possibility but

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-07 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/04/2011 11:20 AM, Enrico Scholz wrote: for the other versions: there are simply no users who test the updates. E.g. 0.2.1.29 was pushed to testing at 2011-01-22 and nobody tested it for f13. According to bodhi you can push it to stable

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-07 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/07/2011 06:53 AM, Rahul Sundaram wrote: I don't. Till the point it is EOL'ed, security updates are the only sort of the updates I would still want to definitely see pushed. You are right.

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-07 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/07/2011 02:43 PM, Christoph A. wrote: On 06/07/2011 06:53 AM, Rahul Sundaram wrote: I don't. Till the point it is EOL'ed, security updates are the only sort of the updates I would still want to definitely see pushed. You are right.

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-07 Thread Fennix
On Tue, Jun 7, 2011 at 9:47 PM, Christoph A. cas...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/07/2011 02:43 PM, Christoph A. wrote: On 06/07/2011 06:53 AM, Rahul Sundaram wrote: I don't. Till the point it is EOL'ed, security updates are the only sort of

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-07 Thread Enrico Scholz
Christoph A. cas...@gmail.com writes: for the other versions: there are simply no users who test the updates. E.g. 0.2.1.29 was pushed to testing at 2011-01-22 and nobody tested it for f13. According to bodhi you can push it to stable even if it didn't get enough karma points. What would

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-06 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/05/2011 01:05 AM, Rahul Sundaram wrote: Link to f13 update? I think it is ok if the package for f13 is not updated anymore because f13 will reach EOL soon. Footnotes: [1] https://admin.fedoraproject.org/updates/tor-0.2.1.30-1400.fc14

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-06 Thread Rahul Sundaram
On 06/07/2011 03:06 AM, Christoph A. wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/05/2011 01:05 AM, Rahul Sundaram wrote: Link to f13 update? I think it is ok if the package for f13 is not updated anymore because f13 will reach EOL soon. I don't. Till the point it is

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-04 Thread Enrico Scholz
Christoph A. cas...@gmail.com writes: I suppose you are the maintainer of the tor package in Fedora. I'm wondering why Fedora (13,14,15) currently doesn't contain the latest stable Tor version 0.2.1.30 f15 contains 0.2.1.30 for the other versions: there are simply no users who test the

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-04 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/04/2011 11:20 AM, Enrico Scholz wrote: Christoph A. cas...@gmail.com writes: I suppose you are the maintainer of the tor package in Fedora. I'm wondering why Fedora (13,14,15) currently doesn't contain the latest stable Tor version

Re: outdated Tor version in Fedora (missing security fixes)

2011-06-04 Thread Rahul Sundaram
On 06/04/2011 02:50 PM, Enrico Scholz wrote: for the other versions: there are simply no users who test the updates. E.g. 0.2.1.29 was pushed to testing at 2011-01-22 and nobody tested it for f13. Link to f13 update? Footnotes: [1]

outdated Tor version in Fedora (missing security fixes)

2011-06-03 Thread Christoph A.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Enrico, I suppose you are the maintainer of the tor package in Fedora. I'm wondering why Fedora (13,14,15) currently doesn't contain the latest stable Tor version 0.2.1.30 which was released on 2011-02-23 and contains various security fixes