Version in base suite: 0.4.7.16-1 Base version: tor_0.4.7.16-1 Target version: tor_0.4.9.6-0+deb12u1 Base files: tor-dbgsym_0.4.7.16-1_armhf.deb tor_0.4.7.16-1_armhf.deb Target files: tor-dbgsym_0.4.9.6-0+deb12u1_armhf.deb tor_0.4.9.6-0+deb12u1_armhf.deb [The following lists of changes regard files as different if they have different names, permissions or owners.] Files only in first set of .debs, found in package tor-dbgsym ------------------------------------------------------------- -rw-r--r-- root/root /usr/lib/debug/.build-id/0c/60d2f9ca5586e78d85212935c0f0a03a703d73.debug -rw-r--r-- root/root /usr/lib/debug/.build-id/73/0fc1904313b7bd160cfe46696d7d7124ffcb82.debug -rw-r--r-- root/root /usr/lib/debug/.build-id/98/97bd683665df56076e761d2e7dad6c57933cd1.debug -rw-r--r-- root/root /usr/lib/debug/.build-id/ab/5642529699c2b72045e0210a60065257c2aa16.debug New files in second set of .debs, found in package tor-dbgsym ------------------------------------------------------------- -rw-r--r-- root/root /usr/lib/debug/.build-id/0b/e928884c55069d8674aa569f12af874a6dc53e.debug -rw-r--r-- root/root /usr/lib/debug/.build-id/a8/f3449103952061c09959bddecf70041e127ff3.debug -rw-r--r-- root/root /usr/lib/debug/.build-id/b4/1d106e44c7d1f01f7dee4f8c98516e54553202.debug -rw-r--r-- root/root /usr/lib/debug/.build-id/c9/6ef03340a28c8e011fd7da57563bd6758e245d.debug No differences were encountered between the conffiles files of package tor Control files of package tor: lines which differ (wdiff format) --------------------------------------------------------------- Installed-Size: [-4378-] {+4566+} Version: [-0.4.7.16-1-] {+0.4.9.6-0+deb12u1+} Postinst files of package tor: lines which differ (wdiff format) ---------------------------------------------------------------- [-which-] {+command -v+} restorecon >/dev/null 2>&1 && restorecon /var/lib/tor [-which-] {+command -v+} restorecon >/dev/null 2>&1 && restorecon /var/log/tor [-move_away_keys=0-] [--] [-if [ "$1" = "configure" ] &&-] [- [ -e /var/lib/tor/keys ] &&-] [- [ ! -z "$2" ]; then-] [- if dpkg --compare-versions "$2" lt 0.1.2.19-2; then-] [- move_away_keys=1-] [- elif dpkg --compare-versions "$2" gt 0.2.0 &&-] [- dpkg --compare-versions "$2" lt 0.2.0.26-rc; then-] [- move_away_keys=1-] [- fi-] [-fi-] [-if [ "$move_away_keys" = "1" ]; then-] [- echo "Retiring possibly compromised keys. See /usr/share/doc/tor/NEWS.Debian.gz"-] [- echo "and /var/lib/tor/keys/moved-away-by-tor-package/README.REALLY for"-] [- echo "further information."-] [- if ! [ -d /var/lib/tor/keys/moved-away-by-tor-package ]; then-] [- mkdir /var/lib/tor/keys/moved-away-by-tor-package-] [- cat > /var/lib/tor/keys/moved-away-by-tor-package/README.REALLY << EOF-] [-It has been discovered that the random number generator in Debian's-] [-openssl package is predictable. This is caused by an incorrect-] [-Debian-specific change to the openssl package (CVE-2008-0166). As a-] [-result, cryptographic key material may be guessable.-] [--] [-See Debian Security Advisory number 1571 (DSA-1571) for more information:-] [-http://lists.debian.org/debian-security-announce/2008/msg00152.html-] [--] [-The Debian package for Tor has moved away the onion keys upon package-] [-upgrade, and it will have moved away your identity key if it was created-] [-in the affected timeframe. There is no sure way to automatically tell-] [-if your key was created with an affected openssl library, so this move-] [-is done unconditionally.-] [--] [-If you have restarted Tor since this change (and the package probably-] [-did that for you already unless you configured your system differently)-] [-then the Tor daemon already created new keys for itself and in all-] [-likelyhood is already working just fine with new keys.-] [--] [-If you are absolutely certain that your identity key was created with-] [-a non-affected version of openssl and for some reason you have to retain-] [-the old identity, then you can move back the copy of secret_id_key to-] [-/var/lib/tor/keys. Do not move back the onion keys, they were created-] [-only recently since they are temporary keys with a lifetime of only a few-] [-days anyway.-] [--] [-Sincerely,-] [-Peter Palfrader, Tue, 13 May 2008 13:32:23 +0200-] [-EOF-] [- fi-] [- for f in secret_onion_key secret_onion_key.old; do-] [- if [ -e /var/lib/tor/keys/"$f" ]; then-] [- mv -v /var/lib/tor/keys/"$f" /var/lib/tor/keys/moved-away-by-tor-package/"$f"-] [- fi-] [- done-] [- if [ -e /var/lib/tor/keys/secret_id_key ]; then-] [- id_mtime=`stat -c %Y /var/lib/tor/keys/secret_id_key`-] [- sept=`date -d '2006-09-10' +%s`-] [- if [ "$id_mtime" -gt "$sept" ] ; then-] [- mv -v /var/lib/tor/keys/secret_id_key /var/lib/tor/keys/moved-away-by-tor-package/secret_id_key-] [- fi-] [- fi-] [-fi-] [--] [-# clean out apparmor policy files that we shipped with-] [-# Tor 0.2.3.16-alpha-1 in experimental and-] [-# Tor 0.2.3.17-beta-1 in unstable.-] [-if [ "$1" = "configure" ] &&-] [- [ -e /etc/apparmor.d/usr.sbin.tor ] &&-] [- [ ! -z "$2" ] &&-] [- dpkg --compare-versions "$2" le 0.2.3.17-beta-1; then-] [- checksum="`md5sum /etc/apparmor.d/usr.sbin.tor | awk '{print $1}'`"-] [- pkg_md5="`dpkg-query -W -f='${Conffiles}' tor | awk '$1=="/etc/apparmor.d/usr.sbin.tor" {print $2}'`"-] [- if [ "$checksum" = "$pkg_md5" ]; then-] [- if command -v apparmor_parser > /dev/null 2>&1 ; then-] [- apparmor_parser --remove -T -W /etc/apparmor.d/usr.sbin.tor || true-] [- fi-] [--] [- rm -f "/etc/apparmor.d/usr.sbin.tor"-] [- rm -f "/etc/apparmor.d/disable/usr.sbin.tor" || true-] [- rm -f "/etc/apparmor.d/force-complain/usr.sbin.tor" || true-] [- rm -f "/etc/apparmor.d/local/usr.sbin.tor" || true-] [- rmdir /etc/apparmor.d/local 2>/dev/null || true-] [- rmdir /etc/apparmor.d 2>/dev/null || true-] [- fi-] [-fi-] No differences were encountered between the postrm files of package tor No differences were encountered between the preinst files of package tor No differences were encountered between the prerm files of package tor Control files of package tor-dbgsym: lines which differ (wdiff format) ---------------------------------------------------------------------- Build-Ids: [-0c60d2f9ca5586e78d85212935c0f0a03a703d73 730fc1904313b7bd160cfe46696d7d7124ffcb82 9897bd683665df56076e761d2e7dad6c57933cd1 ab5642529699c2b72045e0210a60065257c2aa16-] {+0be928884c55069d8674aa569f12af874a6dc53e a8f3449103952061c09959bddecf70041e127ff3 b41d106e44c7d1f01f7dee4f8c98516e54553202 c96ef03340a28c8e011fd7da57563bd6758e245d+} Depends: tor (= [-0.4.7.16-1)-] {+0.4.9.6-0+deb12u1)+} Installed-Size: [-5761-] {+6075+} Version: [-0.4.7.16-1-] {+0.4.9.6-0+deb12u1+}