On 28/12/2017 11:48, Emilio Pozuelo Monfort wrote: > On 04/12/17 13:31, Peter Palfrader wrote: >> Upstream is no longer maintaining the 0.2.4.x tree. Maybe it's time to >> terminate support for Tor in wheezy/oldoldstable? > > I think so. I have marked it as unsupported in debian-security-support.
There's a new tor CVE. However upstream no longer supports 0.2.x.y, so stretch was EOL'ed. Given jessie has an even older version, I think we should follow suit. Thoughts? Cheers, Emilio
