CVS commit: pkgsrc/net/tor

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Fri Jun 17 14:53:59 UTC 2022

Modified Files:
        pkgsrc/net/tor: Makefile distinfo

Log Message:
tor: update to 0.4.7.8.

Changes in version 0.4.7.8 - 2022-06-17
  This version fixes several bugfixes including a High severity security issue
  categorized as a Denial of Service. Everyone running an earlier version
  should upgrade to this version.

  o Major bugfixes (congestion control, TROVE-2022-001):
    - Fix a scenario where RTT estimation can become wedged, seriously
      degrading congestion control performance on all circuits. This
      impacts clients, onion services, and relays, and can be triggered
      remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes
      bug 40626; bugfix on 0.4.7.5-alpha.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on June 17, 2022.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2022/06/17.

  o Minor bugfixes (linux seccomp2 sandbox):
    - Allow the rseq system call in the sandbox. This solves a crash
      issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug
      40601; bugfix on 0.3.5.11.

  o Minor bugfixes (logging):
    - Demote a harmless warn log message about finding a second hop to
      from warn level to info level, if we do not have enough
      descriptors yet. Leave it at notice level for other cases. Fixes
      bug 40603; bugfix on 0.4.7.1-alpha.
    - Demote a notice log message about "Unexpected path length" to info
      level. These cases seem to happen arbitrarily, and we likely will
      never find all of them before the switch to arti. Fixes bug 40612;
      bugfix on 0.4.7.5-alpha.

  o Minor bugfixes (relay, logging):
    - Demote a harmless XOFF log message to from notice level to info
      level. Fixes bug 40620; bugfix on 0.4.7.5-alpha.


To generate a diff of this commit:
cvs rdiff -u -r1.178 -r1.179 pkgsrc/net/tor/Makefile
cvs rdiff -u -r1.124 -r1.125 pkgsrc/net/tor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/tor/Makefile
diff -u pkgsrc/net/tor/Makefile:1.178 pkgsrc/net/tor/Makefile:1.179
--- pkgsrc/net/tor/Makefile:1.178       Wed Apr 27 21:02:18 2022
+++ pkgsrc/net/tor/Makefile     Fri Jun 17 14:53:59 2022
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.178 2022/04/27 21:02:18 wiz Exp $
+# $NetBSD: Makefile,v 1.179 2022/06/17 14:53:59 wiz Exp $
 
-DISTNAME=      tor-0.4.7.7
+DISTNAME=      tor-0.4.7.8
 CATEGORIES=    net security
 MASTER_SITES=  https://dist.torproject.org/
 

Index: pkgsrc/net/tor/distinfo
diff -u pkgsrc/net/tor/distinfo:1.124 pkgsrc/net/tor/distinfo:1.125
--- pkgsrc/net/tor/distinfo:1.124       Wed Apr 27 21:02:18 2022
+++ pkgsrc/net/tor/distinfo     Fri Jun 17 14:53:59 2022
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.124 2022/04/27 21:02:18 wiz Exp $
+$NetBSD: distinfo,v 1.125 2022/06/17 14:53:59 wiz Exp $
 
-BLAKE2s (tor-0.4.7.7.tar.gz) = 9df8abaadea842caa216c8712d86ed216593039da7865a1fbaaf4bd8457c9f0d
-SHA512 (tor-0.4.7.7.tar.gz) = 896e12fea9342b669911d9cb115cb8cfa3841739d7a90e7457b24a72ff02821cd08be21bde961f18ca35c514a5105315dcb1e9519c52390fd8064c57d1e245bc
-Size (tor-0.4.7.7.tar.gz) = 7895089 bytes
+BLAKE2s (tor-0.4.7.8.tar.gz) = 47ebe82a031ff0bf0de3103187b23897c503020e64bb89223e5170209cd1c679
+SHA512 (tor-0.4.7.8.tar.gz) = 2daeb4ef9144772b4e0793ccd00990b7eda58c533f9616670940931d6d12770e9a7d48b33b5626d330f62bb71fbc6e1f559881f062d16bc15fbb162e29fa91f4
+Size (tor-0.4.7.8.tar.gz) = 7910081 bytes