-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 10 Jun 2017 11:11:57 +0200 Source: tor Binary: tor tor-dbg tor-geoipdb Architecture: source all Version: 0.2.4.29-1 Distribution: wheezy-security Urgency: medium Maintainer: Peter Palfrader <weasel@debian.org> Changed-By: Peter Palfrader <weasel@debian.org> Description: tor - anonymizing overlay network for TCP tor-dbg - debugging symbols for Tor tor-geoipdb - GeoIP database for Tor Closes: 864424 Changes: tor (0.2.4.29-1) wheezy-security; urgency=medium . * New upstream version. - Fix a remotely triggerable assertion failure caused by receiving a BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug 22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix on 0.2.2.1-alpha. (closes: #864424) * The previous release, 0.2.4.28, already incorporates the changes made in Debian's updates of the 0.2.4.27 version. Therefore, drop - debian/patches/tor-bug-20384-TROVE-2016-10-001 - debian/patches/tor-bug-21018-TROVE-2016-12-002-CVE-2016-1254 - debian/patches/update-authority-set Checksums-Sha1: c767d5eefadd888442020afc4a6d6013b3df4da9 1693 tor_0.2.4.29-1.dsc eec6bc8b5cc41ae8c038ab5ba7ee3e871c4a250a 3508247 tor_0.2.4.29.orig.tar.gz 4b232054fe26a9dd5192bad000a64472c5bade43 35732 tor_0.2.4.29-1.diff.gz 07fc1d8fd61549f1583aee98ee973b03f6bf3dd7 1574908 tor-geoipdb_0.2.4.29-1_all.deb Checksums-Sha256: 6cd708f7ae8a1fa8c72d8c4cc39bfa0411ed1a0b06ec4e1f5221ea9a08631373 1693 tor_0.2.4.29-1.dsc 45150eda20441d4d9f5cc915688737e4d873bd1f1d2d73d624755e656426235a 3508247 tor_0.2.4.29.orig.tar.gz 72d9df9a886825fc5ab9dff79fb0711c20bd9d0d027dca759a4f5ebff6f97ee1 35732 tor_0.2.4.29-1.diff.gz 02ab7d7d4a2aaed89657e9f1038cde275f11ef9fb0d4746042b091521e272c03 1574908 tor-geoipdb_0.2.4.29-1_all.deb Files: 968495039450afe722d20123bbca40b6 1693 net optional tor_0.2.4.29-1.dsc f0baf1ade5ccd0040ffb0ae07afafa34 3508247 net optional tor_0.2.4.29.orig.tar.gz 489d2e23fbcb26ad349df34d173b8c00 35732 net optional tor_0.2.4.29-1.diff.gz 66a8525a00505df4287f8abf5164c266 1574908 net extra tor-geoipdb_0.2.4.29-1_all.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEs4PXhajJL968BgN2hgLIIDhyMx8FAlk72z8ACgkQhgLIIDhy Mx/TAAf/Ys7o/2Xt3H3FqaynFqu2EPsvKXzDYyagXb82WHv53Xo/JIbJlIOMRJeI Get+uWDV2M/OksahJPFLP7x/Fcl6OJZiEB0Me4X98vbZfrh7A2NG7On/RY9yD6Ok zPYNq6gK+J67YG49f4QUSJpeRmspnb49R0NQBuA3fUmabIVkYxiNWc+Fw8b+suB+ cJ69FL4pLSHQh+Q4Nm9s6GjvYFG+fgNP5tsqLpeLwlftbUkYdHtFf/Vz2v/f3D7z yT12ZLSVd8inySm12ZmAgIKv8VWHyyrENvpWGO3f40Mri6j1ZeBfV9wyQ4c6xJwp gIGhpXX64nk1Y8p2CgH57isF1PbCjw== =ifD8 -----END PGP SIGNATURE-----