Your message dated Sat, 04 Mar 2017 13:37:10 +0000 with message-id <E1ck9ry-000ALv-2n@fasolo.debian.org> and subject line Accepted tor 0.3.0.4-rc-1 (source) into experimental has caused the Debian Bug report #856786, regarding integer underflows in version comparison to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 856786: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856786 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: integer underflows in version comparison
- From: Peter Palfrader <weasel@debian.org>
- Date: Sat, 4 Mar 2017 16:49:01 +0100
- Message-id: <20170304154859.GA17057@valiant.palfrader.org>
Package: tor Version: 0.0.7.2+0.0.8pre2-1 Severity: important Tor versions prio to 0.2.9.10 and 0.3.0.4-rc contain an integer underflow in its version comparison. When tor gets built with ftrapv, this is a remotely triggerable DoS. This is part of the security issue tracked as TROVE-2017-001 upstream.
--- End Message ---
--- Begin Message ---
- To: debian-experimental-changes@lists.debian.org, debian-devel-changes@lists.debian.org
- Subject: Accepted tor 0.3.0.4-rc-1 (source) into experimental
- From: Peter Palfrader <weasel@debian.org>
- Date: Sat, 04 Mar 2017 13:37:10 +0000
- Message-id: <E1ck9ry-000ALv-2n@fasolo.debian.org>
- Mail-followup-to: debian-devel@lists.debian.org
- Reply-to: debian-devel@lists.debian.org
Attachment: pgpFmmfMh8pTx.pgp
Description: PGP message
--- End Message ---