From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gBMF354V4z2yDc for ; Thu, 07 May 2026 19:07:03 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gBMF02R7sz2xDp for ; Thu, 07 May 2026 19:07:00 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gBMDz2CFLz2kD; Thu, 07 May 2026 19:06:59 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1778180819; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=9HYOgNaXgghDTeB9rgnjBz4qiLj8k3jehHobeJJ5wA0=; b=EPoIMp/8fJw+LLmqQiBZycaUZREITIFNffsmC7XnEobzX5Ms3U8UD1rO4bjO2hZJIAZTBT BXeUyftfgp8iG8AQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1778180819; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=9HYOgNaXgghDTeB9rgnjBz4qiLj8k3jehHobeJJ5wA0=; b=WCHAmyRueTMjCwuSrOjvzZUgpmMOKaNtkHtcQBRaNQ3V3RP+v7TLDxH0n8MB4L1+4/9Fph ShcVrwOZimpCiy6p5giQOIciE0Kh3Fg+3i9JCiGiqYFmgef5Q/ZPTjaM+DTwQXFmN18eM5 mhiL4nFW4VVszVpNiQvKaFwceekryAs2XQeM7Tj1GmdBaWOiYMfifBxiAayCYh89D3z5k9 t93KafCvNCeyStQSy8mC07libeknYZXS6DY5HQAzvCATUBdReSIEXWAz2shmIaQOsTyuHB 2JFNT0Ri4skdakuX38LsJpWvcrjm10OiIH9OiztNhMuo+4UhkZbWGc325uWEyg== Message-ID: <50f33a5d-7c8f-4cb0-9848-924c5347744a@ipfire.org> Date: Thu, 7 May 2026 21:06:55 +0200 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Subject: Re: [PATCH] Tor: Update to 0.4.9.7 To: =?UTF-8?Q?Peter_M=C3=BCller?= References: Content-Language: en-GB Cc: "IPFire: Development-List" From: Adolf Belka In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Reviewed-by: Adolf Belka On 07/05/2026 20:16, Peter Müller wrote: > Changes in version 0.4.9.7 - 2026-05-06 > This is a security release fixing several major bugfixes that were reported > in the past weeks. Huge thanks to everyone that reported these issues! We > strongly recommend upgrading as soon as possible. > > o Major bugfixes (cell handling): > - Fix out-of-bounds read (OOB) when END, TRUNCATE and TRUNCATED cell > have no reason in their payload. TROVE-2026-011. Found by Found by > Brian Carpenter (geeknik). Fixes bug 41254; bugfix > on 0.1.1.1-alpha. > > o Major bugfixes (conflux): > - Do not attempt or accept BEGIN_DIR via conflux legs. TROVE-2026- > 008. Credit to Anas Cherni from Calif.io in collaboration with > Claude and Anthropic Research. Fixes bug 41243; bugfix > on 0.4.8.1-alpha. > > o Major bugfixes (conflux, relay): > - Adjust conflux out-of-order queue accounting when clearing a > queue. TROVE-2026-010. Found by aptupdate. Fixes bug 41251; bugfix > on 0.4.8.1-alpha. > > o Major bugfixes (pathbias): > - Fix a client-side crash caused by double-close of a circuit while > under circuit queue memory pressure. TROVE-2026-009. Found by > cypherpunks. Fixes bug 41237; bugfix on 0.3.3.6-rc. > > o Major bugfixes (relay): > - Fix null pointer dereference when receiving a CERT cell out of > order. TROVE-2026-006. Found by Fwame. Fixes bug 41240; bugfix > on 0.2.4.4-alpha. > > o Major bugfixes (relay, onion service): > - Fix off-by-one out-of-bounds read if a malformed BEGIN cell is > received. TROVE-2026-007. Found by Flanagan. Fixes bug 41245; > bugfix on 0.2.4.7-alpha. > > o Minor features (fallbackdir): > - Regenerate fallback directories generated on May 06, 2026. > > o Minor features (geoip data): > - Update the geoip files to match the IPFire Location Database, as > retrieved on 2026/05/06. > > Signed-off-by: Peter Müller > --- > lfs/tor | 6 +++--- > 1 file changed, 3 insertions(+), 3 deletions(-) > > diff --git a/lfs/tor b/lfs/tor > index 7ba6c6641..da6f50457 100644 > --- a/lfs/tor > +++ b/lfs/tor > @@ -26,7 +26,7 @@ include Config > > SUMMARY = Anonymizing overlay network for TCP (The onion router) > > -VER = 0.4.9.6 > +VER = 0.4.9.7 > > THISAPP = tor-$(VER) > DL_FILE = $(THISAPP).tar.gz > @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) > DIR_APP = $(DIR_SRC)/$(THISAPP) > TARGET = $(DIR_INFO)/$(THISAPP) > PROG = tor > -PAK_VER = 94 > +PAK_VER = 95 > > DEPS = > > @@ -48,7 +48,7 @@ objects = $(DL_FILE) > > $(DL_FILE) = $(DL_FROM)/$(DL_FILE) > > -$(DL_FILE)_BLAKE2 = 93c4a338e892fdc451826fc5be2fa193aec582257b33b5cbb100f3f2ea2ecec182f56fa80e071e0a64fc81fb3a673d27521807071be85917a6490932659d8ebf > +$(DL_FILE)_BLAKE2 = 189aa16fb2bcc2e0838aceeb3f68b43694dea580a89f0bfc27acd4ded9b3824a0c731fb3182e1e221534be9d0f2cbdd5633a4fba7d3137ed793009b39a1d571f > > install : $(TARGET) >