From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4dlNSZ1kDfz2y1D for ; Mon, 05 Jan 2026 18:42:06 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4dlNSZ1NtBz2xTY for ; Mon, 05 Jan 2026 18:42:06 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [IPv6:2001:678:b28::161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "E8" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4dlNSY4v2Pz1PB for ; Mon, 05 Jan 2026 18:42:05 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1767638525; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=hW/xVG4ySNW9ztpadBCZbEnxVW0MshgPFTCr9WooeXI=; b=3jVN9LNDNBnX16whOspFt/G6Vy9GSA/CFvBd6jBVGY1Va2Wav6sZmUxY1RghgHVe6/3PvJ BT2U7cOhTgCyGqCQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1767638525; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=hW/xVG4ySNW9ztpadBCZbEnxVW0MshgPFTCr9WooeXI=; b=DhJZz9URWhIvkNEaQOv6CtRw6glUAZdlBUmvlXnRy+h1rosUOMC7fD2he5ml9OwWlmFb1U zQYf3kSS6ZGXn5Kixrsb+YDxWIRQ38jG/YOo9BMR7rLVubiYj/+ALMOhlgs65FoOMT0/ck cgPYqAEy/ewIMaDRNK/E6Cbd+S6m/+7HtviJckHLqObUeFuN9+O5ch5qfRMCFU+e/qWMrT /JhTqyD48bRL1+m5AlSiaTtxHXDCysA936AEcbeRUxfX4eGxJtI3B31Hhe2WcDHDlzcE37 lLjz//Udqpuq7Q2sKeMVztqIV2MJ2v86MMRDv0ovRXMY9eywzEajhjwf75ZxXA== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4dlNSY2Kk7z2xSm; Mon, 05 Jan 2026 18:42:05 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. ef72d807aaf7e778cc4cc8e4126f1d9823ebe12c X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: cfaac99f7609bff85e136b50b10e52ab0ed1ec9e X-Git-Newrev: ef72d807aaf7e778cc4cc8e4126f1d9823ebe12c Message-Id: <4dlNSY2Kk7z2xSm@people01.haj.ipfire.org> Date: Mon, 05 Jan 2026 18:42:05 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via ef72d807aaf7e778cc4cc8e4126f1d9823ebe12c (commit) from cfaac99f7609bff85e136b50b10e52ab0ed1ec9e (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit ef72d807aaf7e778cc4cc8e4126f1d9823ebe12c Author: Peter Müller Date: Mon Jan 5 15:56:00 2026 +0000 Tor: Update to 0.4.8.21 Changes in version 0.4.8.21 - 2025-11-17 This release is a continuation of the previous one and addresses additional Conflux-related issues identified through further testing and feedback from relay operators. We strongly recommend upgrading as soon as possible. o Major bugfixes (conflux, exit): - When dequeuing out-of-order conflux cells, the circuit could be close in between two dequeue which could lead to a mishandling of a NULL pointer. Fixes bug 41162; bugfix on 0.4.8.4. o Minor feature (compiler flag): - Add -mbranch-protection=standard for arm64. o Minor features (fallbackdir): - Regenerate fallback directories generated on November 17, 2025. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2025/11/17. o Minor bugfixes (bridges, pluggable transport): - Fix a bug causing the initial tor process to hang intead of exiting with RunAsDaemon, when pluggable transports are used. Fixes bug 41088; bugfix on 0.4.8.1-alpha. Changes in version 0.4.8.20 - 2025-11-10 This release fixes several bugfixes related to Conflux edge cases as well as adding a new hardening compiler flag if supported. We strongly recommend to upgrade as soon as possible. o Minor feature (compiler flag): - Add -fcf-protection=full if supported by the compiler. Fixes 41139. o Minor features (fallbackdir): - Regenerate fallback directories generated on October 06, 2025. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2025/11/10. o Minor bugfixes (conflux fragile asserts): - Fix the root cause of some conflux fragile asserts when a control port listener is attached. Fixes bug 41037; bugfix on 0.4.8.16. o Minor bugfixes (conflux, relay): - Fix a series of conflux edge cases about sequence number arithmetic and OOM handler kicking in under heavy memory pressure. Fixes bug 41155; bugfix on 0.4.8.4. Signed-off-by: Peter Müller Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: lfs/tor | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) Difference in files: diff --git a/lfs/tor b/lfs/tor index 350f721ac..f77e25bd7 100644 --- a/lfs/tor +++ b/lfs/tor @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2025 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Anonymizing overlay network for TCP (The onion router) -VER = 0.4.8.19 +VER = 0.4.8.21 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 92 +PAK_VER = 93 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 298612a737a3c035de266549cae911ba709f8c261fe8856f9eff6b7a72b7a71d99e91d1d20dbb6f1c10c9c8d42778423d7a96348303006987dd43fa3888699d8 +$(DL_FILE)_BLAKE2 = 1b7d786a7ec5a3e5967d8ce214f8a2aef10f8ba10791bc45d42a322bf4107c0a1962b80368e043ee1b239a8367660fdf810d05f00a010d9e69d024e1042217e8 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree