Bug 510564 – =net-misc/tor-0.2.4.22: please rapid stabilize

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Anthony Basile 2014-05-17 14:17:50 UTC]

I know I just added it to the tree, but from their ChangeLog:

  o Major features (security, backport from 0.2.5.4-alpha):
    - Block authority signing keys that were used on authorities
      vulnerable to the "heartbleed" bug in OpenSSL (CVE-2014-0160). (We
      don't have any evidence that these keys _were_ compromised; we're
      doing this to be prudent.) Resolves ticket 11464.

So this replaces the tor network's signing keys that *may* have been compromised by the heartbleed bug.

Reproducible: Always

[Comment 1 Anthony Basile 2014-05-17 14:19:10 UTC]

Target arches:  KEYWORDS="amd64 arm ppc ppc64 sparc x86"

[Comment 2 Markus Meier 2014-05-25 18:56:52 UTC]

arm stable

[Comment 3 Anthony Basile 2014-05-26 13:03:08 UTC]

I took care of ppc and ppc64.

[Comment 4 Anthony Basile 2014-06-03 12:18:25 UTC]

ping amd64 and x86

[Comment 5 Anthony Basile 2014-06-11 10:41:37 UTC]

(In reply to Anthony Basile from comment #4)
> ping amd64 and x86

reping!

[Comment 6 Myckel Habets 2014-06-12 05:54:03 UTC]

I'm having build/test failures on x86 for specific USE flag combinations (not sure which). I will be looking into this and post bug reports, but it will take me a few days.

[Comment 7 Paweł Hajdan, Jr. (RETIRED) 2014-06-14 09:55:26 UTC]

x86 stable

[Comment 8 Anthony Basile 2014-06-27 23:32:30 UTC]

@amd64: please stabilize this or I will within a few days.  This is an important security update.

[Comment 9 Anthony Basile 2014-06-28 19:05:33 UTC]

I took care of amd64.

[Comment 10 Mikle Kolyada (RETIRED) 2014-06-28 19:19:56 UTC]

sparc stable. All done.