tor (0.4.6.7-1) [PTS] [DDPO]

COMMITS: VCS has seen 2 commits since the debian-tor-0.4.6.7-1 tag

Git: https://git.torproject.org/debian/tor.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Browser: https://gitweb.torproject.org/debian/tor.git
Last scan: 2021-10-23 03:27:04+00
Next scan: 2021-10-24 07:05:00+00

Debian changelog in Git:

tor (0.4.6.7-1) experimental; urgency=medium

  * New upstream version.
    - Resolve an assertion failure caused by a behavior mismatch between our
      batch-signature verification code and our single-signature verification
      code. This assertion failure could be triggered remotely, leading to a
      denial of service attack. We fix this issue by disabling batch
      verification. Fixes bug 40078; bugfix on 0.2.6.1-alpha. This issue is
      also tracked as TROVE-2021-007 and CVE-2021-38385. Found by Henry de
      Valence.
  * Raise debian/compat from 9 to 10.

 -- Peter Palfrader <weasel@debian.org>  Thu, 19 Aug 2021 20:28:49 +0200

This branch is 2 commits ahead of tag debian-tor-0.4.6.7-1

Git log:

commit 3d93de474c1a588b68e92fda290d804561a093e0
Author: Peter Palfrader <peter@palfrader.org>
Date:   Sat Aug 28 13:15:11 2021 +0200

    fix typo for impish

commit 9e439a7dc7e49b6130e9ce8a1df2048a0f074fa5
Author: Peter Palfrader <peter@palfrader.org>
Date:   Sat Aug 28 12:12:30 2021 +0200

    debian/misc: build sources for bookworm and impish; retire groovy