|
|
@@ -1,11 +1,16 @@
|
|
|
-tor (0.2.1.11-alpha-2~1) experimental; urgency=low
|
|
|
+tor (0.2.1.12-alpha-1) experimental; urgency=low
|
|
|
|
|
|
+ * New upstream version, fixing several security relevant bugs:
|
|
|
+ - Avoid a potential crash on exit nodes when processing malformed
|
|
|
+ input. Remote DoS opportunity (closes: #514579).
|
|
|
+ - Fix a temporary DoS vulnerability that could be performed by
|
|
|
+ a directory mirror (closes: #514580).
|
|
|
* patches/06_add_compile_time_defaults: Only set the User option in
|
|
|
the config if we run as root. Do not set it when run as debian-tor
|
|
|
as Tor then always insists on changing users which will fail. (If
|
|
|
we run as any other user we don't set our debian defaults anyway.)
|
|
|
|
|
|
- -- Peter Palfrader <weasel@debian.org> Thu, 05 Feb 2009 00:27:23 +0100
|
|
|
+ -- Peter Palfrader <weasel@debian.org> Tue, 10 Feb 2009 00:19:53 +0100
|
|
|
|
|
|
tor (0.2.1.11-alpha-1) experimental; urgency=high
|
|
|
|
Peter Palfrader