From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: development@lists.ipfire.org Subject: [PATCH] Tor: Update to 0.4.8.10 Date: Sat, 30 Dec 2023 14:35:00 +0000 Message-ID: <09595133-e875-4c6a-8d1b-6c62e6ca85ef@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4641426124230682466==" List-Id: --===============4641426124230682466== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Changes in version 0.4.8.10 - 2023-12-08 This is a security release fixing a high severity bug (TROVE-2023-007) affecting Exit relays supporting Conflux. We strongly recommend to update as soon as possible. o Major bugfixes (TROVE-2023-007, exit): - Improper error propagation from a safety check in conflux leg linking lead to a desynchronization of which legs were part of a conflux set, ultimately causing a UAF and NULL pointer dereference crash on Exit relays. Fixes bug 40897; bugfix on 0.4.8.1-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on December 08, 2023. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/12/08. o Minor bugfixes (bridges, statistics): - Correctly report statistics for client count over Pluggable transport. Fixes bug 40871; bugfix on 0.4.8.4 Signed-off-by: Peter M=C3=BCller --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index cf0ccaf9e..74b738512 100644 --- a/lfs/tor +++ b/lfs/tor @@ -26,7 +26,7 @@ include Config =20 SUMMARY =3D Anonymizing overlay network for TCP (The onion router) =20 -VER =3D 0.4.8.9 +VER =3D 0.4.8.10 =20 THISAPP =3D tor-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D tor -PAK_VER =3D 82 +PAK_VER =3D 83 =20 DEPS =3D libseccomp =20 @@ -48,7 +48,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_BLAKE2 =3D a2d8cc8e60f162930d64d191af1893cb4060a8d98c16560c9ba30e= 0a9a0fd9cce2132573ca4db7b8b6e002f127f06b53fc5aea5fb6e8795c10f73671d14d9190 +$(DL_FILE)_BLAKE2 =3D ef470664d85e019f6cac2366e934d5dc31b8ae92f121a2b4c8c95f= 8267abce5ce4413d30a24affa40a069d587212364ae5a7c3cd114488e50a535f01c54c6e77 =20 install : $(TARGET) =20 --=20 2.35.3 --===============4641426124230682466==--