From 32aaa16100b062729c00726e9fe1f8097627356f Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Mon, 9 Feb 2009 23:51:31 +0000 Subject: [PATCH] New upstream version svn:r18457 --- debian/changelog | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index 06b6b03abf..0d778011ff 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,11 +1,16 @@ -tor (0.2.1.11-alpha-2~1) experimental; urgency=low +tor (0.2.1.12-alpha-1) experimental; urgency=low + * New upstream version, fixing several security relevant bugs: + - Avoid a potential crash on exit nodes when processing malformed + input. Remote DoS opportunity (closes: #514579). + - Fix a temporary DoS vulnerability that could be performed by + a directory mirror (closes: #514580). * patches/06_add_compile_time_defaults: Only set the User option in the config if we run as root. Do not set it when run as debian-tor as Tor then always insists on changing users which will fail. (If we run as any other user we don't set our debian defaults anyway.) - -- Peter Palfrader Thu, 05 Feb 2009 00:27:23 +0100 + -- Peter Palfrader Tue, 10 Feb 2009 00:19:53 +0100 tor (0.2.1.11-alpha-1) experimental; urgency=high