[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[DLA 17-1] tor: new upstream version



Package        : tor
Version        : 0.2.4.23-1~deb6u1

The Tor version previously in Debian squeeze, 0.2.2.39, is no longer
supported by upstream.

This update brings the currently stable version of Tor, 0.2.4.23, to
Debian squeeze.

Changes include use of stronger cryptographic primitives, always
clearing bignums before freeing them to avoid leaving key material in
memory, mitigating several linkability vectors such as by disabling
client-side DNS caches, blacklisting authority signing keys potentially
compromised due to heartbleed, updating the list of directory
authorities, and much more.

We recommend that you upgrade your tor packages.

Attachment: signature.asc
Description: Digital signature


Reply to: