Received: by mail.netbsd.org (Postfix, from userid 605) id A91F384E8E; Fri, 17 Jun 2022 14:52:13 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id E2D2684E8D for ; Fri, 17 Jun 2022 14:52:12 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id WaUI8UG0YxbG for ; Fri, 17 Jun 2022 14:52:12 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 47BD184CD8 for ; Fri, 17 Jun 2022 14:52:12 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 6B025FB1A; Fri, 17 Jun 2022 14:53:59 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1655477639106070" MIME-Version: 1.0 Date: Fri, 17 Jun 2022 14:53:59 +0000 From: "Thomas Klausner" Subject: CVS commit: pkgsrc/net/tor To: pkgsrc-changes@NetBSD.org Reply-To: wiz@netbsd.org X-Mailer: log_accum Message-Id: <20220617145359.6B025FB1A@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1655477639106070 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: wiz Date: Fri Jun 17 14:53:59 UTC 2022 Modified Files: pkgsrc/net/tor: Makefile distinfo Log Message: tor: update to 0.4.7.8. Changes in version 0.4.7.8 - 2022-06-17 This version fixes several bugfixes including a High severity security issue categorized as a Denial of Service. Everyone running an earlier version should upgrade to this version. o Major bugfixes (congestion control, TROVE-2022-001): - Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes bug 40626; bugfix on 0.4.7.5-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on June 17, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. o Minor bugfixes (linux seccomp2 sandbox): - Allow the rseq system call in the sandbox. This solves a crash issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug 40601; bugfix on 0.3.5.11. o Minor bugfixes (logging): - Demote a harmless warn log message about finding a second hop to from warn level to info level, if we do not have enough descriptors yet. Leave it at notice level for other cases. Fixes bug 40603; bugfix on 0.4.7.1-alpha. - Demote a notice log message about "Unexpected path length" to info level. These cases seem to happen arbitrarily, and we likely will never find all of them before the switch to arti. Fixes bug 40612; bugfix on 0.4.7.5-alpha. o Minor bugfixes (relay, logging): - Demote a harmless XOFF log message to from notice level to info level. Fixes bug 40620; bugfix on 0.4.7.5-alpha. To generate a diff of this commit: cvs rdiff -u -r1.178 -r1.179 pkgsrc/net/tor/Makefile cvs rdiff -u -r1.124 -r1.125 pkgsrc/net/tor/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1655477639106070 Content-Disposition: inline Content-Length: 1427 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/net/tor/Makefile diff -u pkgsrc/net/tor/Makefile:1.178 pkgsrc/net/tor/Makefile:1.179 --- pkgsrc/net/tor/Makefile:1.178 Wed Apr 27 21:02:18 2022 +++ pkgsrc/net/tor/Makefile Fri Jun 17 14:53:59 2022 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.178 2022/04/27 21:02:18 wiz Exp $ +# $NetBSD: Makefile,v 1.179 2022/06/17 14:53:59 wiz Exp $ -DISTNAME= tor-0.4.7.7 +DISTNAME= tor-0.4.7.8 CATEGORIES= net security MASTER_SITES= https://dist.torproject.org/ Index: pkgsrc/net/tor/distinfo diff -u pkgsrc/net/tor/distinfo:1.124 pkgsrc/net/tor/distinfo:1.125 --- pkgsrc/net/tor/distinfo:1.124 Wed Apr 27 21:02:18 2022 +++ pkgsrc/net/tor/distinfo Fri Jun 17 14:53:59 2022 @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.124 2022/04/27 21:02:18 wiz Exp $ +$NetBSD: distinfo,v 1.125 2022/06/17 14:53:59 wiz Exp $ -BLAKE2s (tor-0.4.7.7.tar.gz) = 9df8abaadea842caa216c8712d86ed216593039da7865a1fbaaf4bd8457c9f0d -SHA512 (tor-0.4.7.7.tar.gz) = 896e12fea9342b669911d9cb115cb8cfa3841739d7a90e7457b24a72ff02821cd08be21bde961f18ca35c514a5105315dcb1e9519c52390fd8064c57d1e245bc -Size (tor-0.4.7.7.tar.gz) = 7895089 bytes +BLAKE2s (tor-0.4.7.8.tar.gz) = 47ebe82a031ff0bf0de3103187b23897c503020e64bb89223e5170209cd1c679 +SHA512 (tor-0.4.7.8.tar.gz) = 2daeb4ef9144772b4e0793ccd00990b7eda58c533f9616670940931d6d12770e9a7d48b33b5626d330f62bb71fbc6e1f559881f062d16bc15fbb162e29fa91f4 +Size (tor-0.4.7.8.tar.gz) = 7910081 bytes --_----------=_1655477639106070--