[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #13237 [Tor bundles/installation]: Development builds published to stable APT repositories



#13237: Development builds published to stable APT repositories
--------------------------------------+-----------------------
 Reporter:  johnwang                  |          Owner:  erinn
     Type:  defect                    |         Status:  new
 Priority:  critical                  |      Milestone:
Component:  Tor bundles/installation  |        Version:
 Keywords:  apt repository            |  Actual Points:
Parent ID:                            |         Points:
--------------------------------------+-----------------------
 Yesterday in the stable APT repository a couple of 2.5.x development
 builds for '''tor''' and '''tor-geoipdb''' appeared when I ran `apt-get
 upgrade -s` on my Ubuntu Trusty box:

 {{{
 * Inst tor-geoipdb [0.2.4.23-2~trusty+1] (0.2.5.8-rc-1~trusty+1 trusty
 [all]) []
 * Inst tor [0.2.4.23-2~trusty+1] (0.2.5.8-rc-1~trusty+1 trusty [amd64])
 }}}

 Users relying on the stable repository expect only stable builds, so this
 risky, possibly dangerous update was probably pushed by mistake. The
 development builds were also pushed to the APT repositories for Ubuntu
 Lucid, Precise, and Saucy; Debian Squeeze, Wheezy, Jessie, and Sid; and
 possibly others I haven't checked.

 Here's the contents of my `/etc/apt/sources.list.d/tor-stable.list`:

 {{{
 deb http://deb.torproject.org/torproject.org trusty main
 deb-src http://deb.torproject.org/torproject.org trusty main
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13237>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs