CVS commit: pkgsrc/net/tor

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Nov  9 07:56:37 UTC 2023

Modified Files:
        pkgsrc/net/tor: Makefile distinfo
Removed Files:
        pkgsrc/net/tor/patches: patch-src_ext_equix_hashx_src_virtual__memory.c

Log Message:
tor: update to 0.4.8.8.

Changes in version 0.4.8.8 - 2023-11-03
  We are releasing today a fix for a high security issue, TROVE-2023-004, that
  is affecting relays. Also a few minor bugfixes detailed below. Please upgrade
  as soon as posssible.

  o Major bugfixes (TROVE-2023-004, relay):
    - Mitigate an issue when Tor compiled with OpenSSL can crash during
      handshake with a remote relay. Fixes bug 40874; bugfix
      on 0.2.7.2-alpha.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on November 03, 2023.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2023/11/03.

  o Minor bugfixes (directory authority):
    - Look at the network parameter "maxunmeasuredbw" with the correct
      spelling. Fixes bug 40869; bugfix on 0.4.6.1-alpha.

  o Minor bugfixes (vanguards addon support):
    - Count the conflux linked cell as valid when it is successfully
      processed. This will quiet a spurious warn in the vanguards addon.
      Fixes bug 40878; bugfix on 0.4.8.1-alpha.

Changes in version 0.4.8.7 - 2023-09-25
  This version fixes a single major bug in the Conflux subsystem on the client
  side. See below for more information. The upcoming Tor Browser 13 stable will
  pick this up.

  o Major bugfixes (conflux):
    - Fix an issue that prevented us from pre-building more conflux sets
      after existing sets had been used. Fixes bug 40862; bugfix
      on 0.4.8.1-alpha.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on September 25, 2023.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2023/09/25.

Changes in version 0.4.8.6 - 2023-09-18
  This version contains an important fix for onion service regarding congestion
  control and its reliability. Apart from that, uneeded BUG warnings have been
  suppressed especially about a compression bomb seen on relays. We strongly
  recommend, in particular onion service operators, to upgrade as soon as
  possible to this latest stable.

  o Major bugfixes (onion service):
    - Fix a reliability issue where services were expiring their
      introduction points every consensus update. This caused
      connectivity issues for clients caching the old descriptor and
      intro points. Bug reported and fixed by gitlab user
      @hyunsoo.kim676. Fixes bug 40858; bugfix on 0.4.7.5-alpha.

  o Minor features (debugging, compression):
    - Log the input and output buffer sizes when we detect a potential
      compression bomb. Diagnostic for ticket 40739.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on September 18, 2023.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2023/09/18.

  o Minor bugfix (defensive programming):
    - Disable multiple BUG warnings of a missing relay identity key when
      starting an instance of Tor compiled without relay support. Fixes
      bug 40848; bugfix on 0.4.3.1-alpha.

  o Minor bugfixes (bridge authority):
    - When reporting a pseudo-networkstatus as a bridge authority, or
      answering "ns/purpose/*" controller requests, include accurate
      published-on dates from our list of router descriptors. Fixes bug
      40855; bugfix on 0.4.8.1-alpha.

  o Minor bugfixes (compression, zstd):
    - Use less frightening language and lower the log-level of our run-
      time ABI compatibility check message in our Zstd compression
      subsystem. Fixes bug 40815; bugfix on 0.4.3.1-alpha.

Changes in version 0.4.8.5 - 2023-08-30
  Quick second release after the first stable few days ago fixing minor
  annoying bugfixes creating log BUG stacktrace. We also fix BSD compilation
  failures and PoW unit test.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on August 30, 2023.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2023/08/30.

  o Minor bugfix (NetBSD, compilation):
    - Fix compilation issue on NetBSD by avoiding an unnecessary
      dependency on "huge" page mappings in Equi-X. Fixes bug 40843;
      bugfix on 0.4.8.1-alpha.

  o Minor bugfix (NetBSD, testing):
    - Fix test failures in "crypto/hashx" and "slow/crypto/equix" on
      x86_64 and aarch64 NetBSD hosts, by adding support for
      PROT_MPROTECT() flags. Fixes bug 40844; bugfix on 0.4.8.1-alpha.

  o Minor bugfixes (conflux):
    - Demote a relay-side warn about too many legs to ProtocolWarn, as
      there are conditions that it can briefly happen during set
      construction. Also add additional set logging details for all
      error cases. Fixes bug 40841; bugfix on 0.4.8.1-alpha.
    - Prevent non-fatal assert stacktrace caused by using conflux sets
      during their teardown process. Fixes bug 40842; bugfix
      on 0.4.8.1-alpha.


To generate a diff of this commit:
cvs rdiff -u -r1.182 -r1.183 pkgsrc/net/tor/Makefile
cvs rdiff -u -r1.126 -r1.127 pkgsrc/net/tor/distinfo
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/net/tor/patches/patch-src_ext_equix_hashx_src_virtual__memory.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/tor/Makefile
diff -u pkgsrc/net/tor/Makefile:1.182 pkgsrc/net/tor/Makefile:1.183
--- pkgsrc/net/tor/Makefile:1.182       Tue Oct 24 22:10:35 2023
+++ pkgsrc/net/tor/Makefile     Thu Nov  9 07:56:37 2023
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.182 2023/10/24 22:10:35 wiz Exp $
+# $NetBSD: Makefile,v 1.183 2023/11/09 07:56:37 wiz Exp $
 
-DISTNAME=      tor-0.4.8.4
-PKGREVISION=   1
+DISTNAME=      tor-0.4.8.8
 CATEGORIES=    net security
 MASTER_SITES=  https://dist.torproject.org/
 
@@ -10,7 +9,8 @@ HOMEPAGE=      https://www.torproject.org/
 COMMENT=       Anonymizing overlay network for TCP
 LICENSE=       modified-bsd
 
-USE_LANGUAGES=         c99
+USE_LANGUAGES=         c
+USE_CC_FEATURES=       c99
 USE_PKGLOCALEDIR=      yes
 USE_TOOLS+=            perl:test pkg-config bash:test
 GNU_CONFIGURE=         yes

Index: pkgsrc/net/tor/distinfo
diff -u pkgsrc/net/tor/distinfo:1.126 pkgsrc/net/tor/distinfo:1.127
--- pkgsrc/net/tor/distinfo:1.126       Thu Aug 24 18:56:42 2023
+++ pkgsrc/net/tor/distinfo     Thu Nov  9 07:56:37 2023
@@ -1,6 +1,5 @@
-$NetBSD: distinfo,v 1.126 2023/08/24 18:56:42 wiz Exp $
+$NetBSD: distinfo,v 1.127 2023/11/09 07:56:37 wiz Exp $
 
-BLAKE2s (tor-0.4.8.4.tar.gz) = eb7678e72897deabc47aadd33997981da0c430ea6afc1ade19f6a877ad3d28ec
-SHA512 (tor-0.4.8.4.tar.gz) = a27380b3e0f33148fe86aa8815a9ff6476fe1531427990508d7cbe1770ddedbde56ac797674154a7ca590eb7ce08ebc56e0a4d84f9e27f6eaf1faf3a836faa8b
-Size (tor-0.4.8.4.tar.gz) = 8288772 bytes
-SHA1 (patch-src_ext_equix_hashx_src_virtual__memory.c) = f8a99bfb726923682fa61c57ddcaf1c75c805d95
+BLAKE2s (tor-0.4.8.8.tar.gz) = 703fc0331c16faf7de2055158f6f9649720b0d4b6c442225afab982d7812bc09
+SHA512 (tor-0.4.8.8.tar.gz) = 780c507ea3aaa66dafb5cd34551009979c6621217acb3c1b11727b5f5d7fb0edd08d7e79b9991014a95a185f4ee6fdd53098d2df587e3d801fb2d5100b9b6e23
+Size (tor-0.4.8.8.tar.gz) = 8261891 bytes