Package: apt-listchanges
Version: 4.0
Severity: normal
Hi,
after the upgrade to 4.0, apt-listchanges showed me this ancient NEWS
when upgrading tor from 0.4.8.6-1 to 0.4.8.7-1.
Reading changelogs... Done
apt-listchanges: News
---------------------
--- News for tor ---
tor (0.2.0.26-rc-1) experimental; urgency=critical
* weak cryptographic keys
It has been discovered that the random number generator in Debian's
openssl package is predictable. This is caused by an incorrect
Debian-specific change to the openssl package (CVE-2008-0166). As a
result, cryptographic key material may be guessable.
See Debian Security Advisory number 1571 (DSA-1571) for more information:
http://lists.debian.org/debian-security-announce/2008/msg00152.html
If you run a Tor server using this package please see
/var/lib/tor/keys/moved-away-by-tor-package/README.REALLY
-- Peter Palfrader <[email protected]> Tue, 13 May 2008 12:49:05 +0200
(press q to quit)
(In this case it even was an especially embarassing topic for Debian...)
Might be related or the same as #1053696 by Russ (X-Debbugs-Cc'ed).
-- Package-specific info:
==> /etc/apt/listchanges.conf <==
[apt]
frontend=pager
email_address=root
confirm=0
save_seen=/var/lib/apt/listchanges
which=news
email_format=text
headers=true
reverse=false
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (990, 'unstable'), (600, 'testing'), (500, 'unstable-debug'),
(500, 'buildd-unstable'), (110, 'experimental'), (1, 'experimental-debug'), (1,
'buildd-experimental')
merged-usr: no
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.5.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages apt-listchanges depends on:
ii apt 2.7.6
ii cdebconf [debconf-2.0] 0.271
ii debconf [debconf-2.0] 1.5.82
ii python3 3.11.4-5+b1
ii python3-apt 2.6.0
ii python3-debconf 1.5.82
ii sensible-utils 0.0.20
ii ucf 3.0043+nmu1
apt-listchanges recommends no packages.
Versions of packages apt-listchanges suggests:
ii alacritty [x-terminal-emulator] 0.12.2-2+b1
ii chromium [www-browser] 117.0.5938.149-1
ii cool-retro-term [x-terminal-emulator] 1.2.0+ds2-1+b1
ii dillo [www-browser] 3.0.5-7+b1
ii edbrowse [www-browser] 3.7.7-5
ii elinks [www-browser] 0.16.1.1-4
ii eterm [x-terminal-emulator] 0.9.6-7.1
ii falkon [www-browser] 23.08.1-1
ii firefox [www-browser] 118.0-1+b1
ii firefox-esr [www-browser] 115.3.0esr-1+b1
ii gnome-console [x-terminal-emulator] 45.0-1
ii gnome-terminal [x-terminal-emulator] 3.50.0-1
ii hv3 [www-browser] 3.0~fossil20110109-8
ii kitty [x-terminal-emulator] 0.26.5-5
ii konqueror [www-browser] 4:22.12.3-2
ii konsole [x-terminal-emulator] 4:23.08.1-1
ii lilyterm [x-terminal-emulator] 0.9.9.4+git20150208.f600c0-5+b1
ii links [www-browser] 2.29-1+b1
ii links2 [www-browser] 2.29-1+b1
ii luakit [www-browser] 1:2.3.3-1
ii lxterminal [x-terminal-emulator] 0.4.0-2
ii lynx [www-browser] 2.9.0dev.12-1
ii midori [www-browser] 7.0-2.1+b1
ii netrik [www-browser] 1.16.1-4
ii netsurf [www-browser] 3.6-3.2
ii netsurf-gtk [www-browser] 3.10-3.1
ii postfix [mail-transport-agent] 3.8.2-1
ii pterm [x-terminal-emulator] 0.79-1
ii python3-gi 3.46.0-1
ii qterminal [x-terminal-emulator] 1.3.0-1
ii qutebrowser [www-browser] 2.5.4-1
ii rxvt-unicode [x-terminal-emulator] 9.31-1
ii sakura [x-terminal-emulator] 3.8.7-1
ii stterm [x-terminal-emulator] 0.9-1
ii surf [www-browser] 2.1+git20221016-5
ii terminator [x-terminal-emulator] 2.1.3-1
ii terminology [x-terminal-emulator] 1.13.0-2
ii termit [x-terminal-emulator] 3.1-3
ii tilix [x-terminal-emulator] 1.9.5-2
ii w3m [www-browser] 0.5.3+git20230121-2
ii xfce4-terminal [x-terminal-emulator] 1.1.0-2
ii xterm [x-terminal-emulator] 385-1
ii yakuake [x-terminal-emulator] 23.08.1-1
ii zutty [x-terminal-emulator] 0.14.6.20230701+dfsg1-2
-- debconf information:
* apt-listchanges/confirm: false
apt-listchanges/no-network: false
* apt-listchanges/email-format: text
* apt-listchanges/email-address: root
* apt-listchanges/headers: true
* apt-listchanges/save-seen: true
* apt-listchanges/which: news
* apt-listchanges/reverse: false
* apt-listchanges/frontend: pager
