Package: tor-geoipdb
Version: 0.4.8.22-1
Severity: normal

Dear Maintainer,

As reported on https://gitlab.torproject.org/tpo/core/tor/-/issues/41205 , tor-
geoipdb 0.4.8.22-1 erroneously marks 192.0.2.0/24, 198.51.100.0/24,
203.0.113.0/24 and 2001:db8::/32, which are ranges specifically reserved for
documentation and examples only, and used by meek, snowflake, and webtunnel as
fake address, belonging to US, making a tor user with ExcludeNodes {us} in
their torrc unable to use any of these bridges.

The patch mentioned in the upstream bug report above could be used as a hot fix
for the 0.4.8.22 release. (already done locally)


-- System Information:
Debian Release: forky/sid
APT prefers testing
APT policy: (900, 'testing'), (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.18.5+deb14-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=zh_CN.utf8, LC_CTYPE=zh_CN.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages tor-geoipdb depends on:
ii tor 0.4.8.22-1

tor-geoipdb recommends no packages.

tor-geoipdb suggests no packages.

-- no debconf information

-- debsums errors found:
debsums: changed file /usr/share/tor/geoip (from tor-geoipdb package)
debsums: changed file /usr/share/tor/geoip6 (from tor-geoipdb package)

Reply via email to