[or-cvs] r18457: {tor} New upstream version (tor/trunk/debian)

[weasel at seul.org]

Author: weasel
Date: 2009-02-09 18:51:31 -0500 (Mon, 09 Feb 2009)
New Revision: 18457

Modified:
   tor/trunk/debian/changelog
Log:
New upstream version

Modified: tor/trunk/debian/changelog
===================================================================
--- tor/trunk/debian/changelog	2009-02-09 22:32:42 UTC (rev 18456)
+++ tor/trunk/debian/changelog	2009-02-09 23:51:31 UTC (rev 18457)
@@ -1,11 +1,16 @@
-tor (0.2.1.11-alpha-2~1) experimental; urgency=low
+tor (0.2.1.12-alpha-1) experimental; urgency=low
 
+  * New upstream version, fixing several security relevant bugs:
+     - Avoid a potential crash on exit nodes when processing malformed
+       input.  Remote DoS opportunity (closes: #514579).
+     - Fix a temporary DoS vulnerability that could be performed by
+       a directory mirror (closes: #514580).
   * patches/06_add_compile_time_defaults: Only set the User option in
     the config if we run as root.  Do not set it when run as debian-tor
     as Tor then always insists on changing users which will fail.  (If
     we run as any other user we don't set our debian defaults anyway.)
 
- -- Peter Palfrader <weasel at debian.org>  Thu, 05 Feb 2009 00:27:23 +0100
+ -- Peter Palfrader <weasel at debian.org>  Tue, 10 Feb 2009 00:19:53 +0100
 
 tor (0.2.1.11-alpha-1) experimental; urgency=high