[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: tor removed from ubuntu jaunty

To: or-talk@xxxxxxxxxxxxx
Subject: Re: tor removed from ubuntu jaunty
From: Runa Sandvik <runa.sandvik@xxxxxxxxx>
Date: Tue, 21 Apr 2009 09:30:35 +0200
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Tue, 21 Apr 2009 03:30:38 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=acsxVUZRXE37jy+EV0OKSRWOLBQjLjhskMXaUkvj/5w=; b=WkOr21gwBGkddm4F4zgPcoqx+Dud7RilqdPvIDiPnIK3Vka/0cdUuVm9OdQeSbd14o 6tfpNl6ihO6eS2ly/dcQ/NQG9YXVA+7WGYGv6KJ4VXHE14MatC4E5qvGiIn3QEOQrOnj A/7eXwX6n+M2yCHpvlGoJjYJk6ieNAM9q+fCs=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=UjhkNwbLDetjX1281L0krLssemh2Oklbc574jTMSD1tkB9wuULrRjIf4Frs1nOkbXX 1H3xsR2ZD2W3NEn7z3cyC1hFKknfwozbhma71J5qwXi1SEXIpTyNUiUDYp+ArwNmwWtu /aUzwwJtxXX8g0Us9/MrH74MnppNxaazkQM9w=
In-reply-to: <952854d0904201023j48637f2ey10ecb9e71b404669@xxxxxxxxxxxxxx>
References: <20090419212841.GI4630@xxxxxxxxxxxxxx> <BD7A0C3C-8040-480A-AB59-CAA2C187A592@xxxxxxxxxxxxxxxxx> <952854d0904201023j48637f2ey10ecb9e71b404669@xxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On Apr 19, 2009, at 5:28 PM, Roger Dingledine wrote:
> Ubuntu hardy and intrepid are still shipping known-remote-vulnerable
> versions of Tor. The version they have in Intrepid is even
> known-remote-root-vulnerable. And they still haven't gotten around to
> fixing it.

Ubuntu has this strange way of maintaining the packages in hardy and
intrepid. It seems like you have to request a backport if you want a
new version of package foo. You then have to build this package on the
distro you wish to backport it to, test it and then include the
results in the bug report. Loop this for every new release of package
foo.

No one had requested a backport to hardy and intrepid _with_ the
documentation necessary. I know that it was pointed out that the tor
project does have packages ready for both hardy and intrepid, but it
seemed like the developers wanted someone to "officially" build,
install and test the packages, as well as test for regressions etc.

Also, Martin Pitt said that he would sponsor the packages for hardy
and intrepid soon, and care about the rest. It seems like things are
moving forward, slowly. Those interested can follow the bug report in
Launchpad: https://bugs.launchpad.net/ubuntu/+source/tor/+bug/328442

- Runa

References:
- Re: tor removed from ubuntu jaunty
  - From: Roger Dingledine

Prev by Author: Re: Tor questions
Next by Author: Google Summer of Code 2009
Previous by thread: Re: tor removed from ubuntu jaunty
Next by thread: Google Summer of Code 2009
Index(es):
- Author
- Thread