* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 063906ebc232ec0c3d95b29fdb3b68c6f4e980c8
@ 2021-11-24 14:06 Arne Fitzenreiter
0 siblings, 0 replies; only message in thread
From: Arne Fitzenreiter @ 2021-11-24 14:06 UTC (permalink / raw)
To: ipfire-scm
[-- Attachment #1: Type: text/plain, Size: 8405 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via 063906ebc232ec0c3d95b29fdb3b68c6f4e980c8 (commit)
via 53055098f2d7a5a80fae0a5204611e1aa71c8d1a (commit)
via 9a3aca047b700d04a192f6c5c0aa96305ae21dfe (commit)
from a1484cc31a0f80c0cae7c6585fc6655c8f31996d (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 063906ebc232ec0c3d95b29fdb3b68c6f4e980c8
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Wed Nov 24 12:12:27 2021 +0100
Tor: update to 0.4.6.8
Full changelog as per https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.6.8:
Changes in version 0.4.6.8 - 2021-10-26
This version fixes several bugs from earlier versions of Tor. One
highlight is a fix on how we track DNS timeouts to report general
relay overload.
o Major bugfixes (relay, overload state):
- Relays report the general overload state for DNS timeout errors
only if X% of all DNS queries over Y seconds are errors. Before
that, it only took 1 timeout to report the overload state which
was just too low of a threshold. The X and Y values are 1% and 10
minutes respectively but they are also controlled by consensus
parameters. Fixes bug 40491; bugfix on 0.4.6.1-alpha.
o Minor features (fallbackdir):
- Regenerate fallback directories for October 2021. Closes
ticket 40493.
o Minor features (testing):
- On a testing network, relays can now use the
TestingMinTimeToReportBandwidth option to change the smallest
amount of time over which they're willing to report their observed
maximum bandwidth. Previously, this was fixed at 1 day. For
safety, values under 2 hours are only supported on testing
networks. Part of a fix for ticket 40337.
- Relays on testing networks no longer rate-limit how frequently
they are willing to report new bandwidth measurements. Part of a
fix for ticket 40337.
- Relays on testing networks now report their observed bandwidths
immediately from startup. Previously, they waited until they had
been running for a full day. Closes ticket 40337.
o Minor bugfix (onion service):
- Do not flag an HSDir as non-running in case the descriptor upload
or fetch fails. An onion service closes pending directory
connections before uploading a new descriptor which can thus lead
to wrongly flagging many relays and thus affecting circuit building
path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha.
- Improve logging when a bad HS version is given. Fixes bug 40476;
bugfix on 0.4.6.1-alpha.
o Minor bugfix (CI, onion service):
- Exclude onion service version 2 Stem tests in our CI. Fixes bug 40500;
bugfix on 0.3.2.1-alpha.
o Minor bugfixes (compatibility):
- Fix compatibility with the most recent Libevent versions, which no
longer have an evdns_set_random_bytes() function. Because this
function has been a no-op since Libevent 2.0.4-alpha, it is safe
for us to just stop calling it. Fixes bug 40371; bugfix
on 0.2.1.7-alpha.
o Minor bugfixes (onion service, TROVE-2021-008):
- Only log v2 access attempts once total, in order to not pollute
the logs with warnings and to avoid recording the times on disk
when v2 access was attempted. Note that the onion address was
_never_ logged. This counts as a Low-severity security issue.
Fixes bug 40474; bugfix on 0.4.5.8.
Since we configure Tor to use libseccomp, the latter has been updated
for kernel 5.15 as well, hence we need to ship Tor either way.
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
commit 53055098f2d7a5a80fae0a5204611e1aa71c8d1a
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Wed Nov 24 12:11:48 2021 +0100
libseccomp: Update to 2.5.3
Release annnouncement as per https://github.com/seccomp/libseccomp/releases/tag/v2.5.3:
Version 2.5.3 - November 5, 2021
Update the syscall table for Linux v5.15
Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
Document that seccomp_rule_add() may return -EACCES
Fix issues with test 11-basic-basic_errors on old kernels (API level < 5)
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
commit 9a3aca047b700d04a192f6c5c0aa96305ae21dfe
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Wed Nov 24 12:07:43 2021 +0100
Postfix: update to 3.6.3
Please refer to http://www.postfix.org/announcements/postfix-3.6.3.html
for this versions' release announcement.
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/packages/libseccomp | 2 +-
lfs/libseccomp | 6 +++---
lfs/postfix | 6 +++---
lfs/tor | 6 +++---
4 files changed, 10 insertions(+), 10 deletions(-)
Difference in files:
diff --git a/config/rootfiles/packages/libseccomp b/config/rootfiles/packages/libseccomp
index fb0b35d31..e7f19721a 100644
--- a/config/rootfiles/packages/libseccomp
+++ b/config/rootfiles/packages/libseccomp
@@ -4,7 +4,7 @@ usr/bin/scmp_sys_resolver
#usr/lib/libseccomp.la
#usr/lib/libseccomp.so
usr/lib/libseccomp.so.2
-usr/lib/libseccomp.so.2.5.1
+usr/lib/libseccomp.so.2.5.3
#usr/lib/pkgconfig/libseccomp.pc
#usr/share/man/man1/scmp_sys_resolver.1
#usr/share/man/man3/seccomp_api_get.3
diff --git a/lfs/libseccomp b/lfs/libseccomp
index 38d7a7dde..616a61c91 100644
--- a/lfs/libseccomp
+++ b/lfs/libseccomp
@@ -24,7 +24,7 @@
include Config
-VER = 2.5.1
+VER = 2.5.3
THISAPP = libseccomp-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = libseccomp
-PAK_VER = 5
+PAK_VER = 6
DEPS =
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 59f5563c532d3fa1df9db0516b36b1cd
+$(DL_FILE)_MD5 = 5096d3912a605a72b27805fa0ef9886d
install : $(TARGET)
diff --git a/lfs/postfix b/lfs/postfix
index f6892c1c1..6fe46d9a8 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -24,7 +24,7 @@
include Config
-VER = 3.6.2
+VER = 3.6.3
THISAPP = postfix-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = postfix
-PAK_VER = 32
+PAK_VER = 33
DEPS =
@@ -66,7 +66,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 4718b498fa4285cf275f506c169f4746
+$(DL_FILE)_MD5 = 793f9f4abf74d07a2557bd97a903b98d
install : $(TARGET)
diff --git a/lfs/tor b/lfs/tor
index 7aaad07d3..1c41ef89d 100644
--- a/lfs/tor
+++ b/lfs/tor
@@ -24,7 +24,7 @@
include Config
-VER = 0.4.6.7
+VER = 0.4.6.8
THISAPP = tor-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = tor
-PAK_VER = 64
+PAK_VER = 65
DEPS = libseccomp
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = ff80309cfaa0719b197fdaf83f9d5443
+$(DL_FILE)_MD5 = e65cbb78aece2c135f635970e555506a
install : $(TARGET)
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2021-11-24 14:06 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-11-24 14:06 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 063906ebc232ec0c3d95b29fdb3b68c6f4e980c8 Arne Fitzenreiter
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox