Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1171269
| From | Axel Beckert <abe@debian.org> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 |
| Date | 2023-10-09 18:10 +0200 |
| Message-ID | <Hn0Zr-eG7O-3@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
Package: apt-listchanges
Version: 4.0
Severity: normal
Hi,
after the upgrade to 4.0, apt-listchanges showed me this ancient NEWS
when upgrading tor from 0.4.8.6-1 to 0.4.8.7-1.
Reading changelogs... Done
apt-listchanges: News
---------------------
--- News for tor ---
tor (0.2.0.26-rc-1) experimental; urgency=critical
* weak cryptographic keys
It has been discovered that the random number generator in Debian's
openssl package is predictable. This is caused by an incorrect
Debian-specific change to the openssl package (CVE-2008-0166). As a
result, cryptographic key material may be guessable.
See Debian Security Advisory number 1571 (DSA-1571) for more information:
http://lists.debian.org/debian-security-announce/2008/msg00152.html
If you run a Tor server using this package please see
/var/lib/tor/keys/moved-away-by-tor-package/README.REALLY
-- Peter Palfrader <weasel@debian.org> Tue, 13 May 2008 12:49:05 +0200
(press q to quit)
(In this case it even was an especially embarassing topic for Debian...)
Might be related or the same as #1053696 by Russ (X-Debbugs-Cc'ed).
-- Package-specific info:
Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread
Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 Axel Beckert <abe@debian.org> - 2023-10-09 18:10 +0200
Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 Russ Allbery <rra@debian.org> - 2023-10-09 18:20 +0200
Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 Jonathan Kamens <jik@kamens.us> - 2023-10-09 19:10 +0200
Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 Axel Beckert <abe@debian.org> - 2023-10-09 20:10 +0200
Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 Jonathan Kamens <jik@kamens.us> - 2023-10-09 21:40 +0200
Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 Axel Beckert <abe@debian.org> - 2023-10-09 21:50 +0200
Bug#1053725: apt-listchanges: Shows NEWS for package tor from 2008 Russ Allbery <rra@debian.org> - 2023-10-09 20:10 +0200
csiph-web