[pkgsrc/trunk]: pkgsrc/net/tor Changes in version 0.3.0.7 - 2017-05-15

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/a5f966fd4d6b
branches:  trunk
changeset: 362502:a5f966fd4d6b
user:      adam <adam%pkgsrc.org@localhost>
date:      Wed May 17 07:13:37 2017 +0000

description:
Changes in version 0.3.0.7 - 2017-05-15
  Tor 0.3.0.7 fixes a medium-severity security bug in earlier versions
  of Tor 0.3.0.x, where an attacker could cause a Tor relay process to
  exit. Relays running earlier versions of Tor 0.3.0.x should upgrade;
  clients are not affected.

  o Major bugfixes (hidden service directory, security):
    - Fix an assertion failure in the hidden service directory code,
      which could be used by an attacker to remotely cause a Tor relay
      process to exit. Relays running earlier versions of Tor 0.3.0.x
      should upgrade. This security issue is tracked as TROVE-2017-002.
      Fixes bug 22246; bugfix on 0.3.0.1-alpha.

  o Minor features:
    - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2
      Country database.

  o Minor features (future-proofing):
    - Tor no longer refuses to download microdescriptors or descriptors
      if they are listed as "published in the future". This change will
      eventually allow us to stop listing meaningful "published" dates
      in microdescriptor consensuses, and thereby allow us to reduce the
      resources required to download consensus diffs by over 50%.
      Implements part of ticket 21642; implements part of proposal 275.

  o Minor bugfixes (Linux seccomp2 sandbox):
    - The getpid() system call is now permitted under the Linux seccomp2
      sandbox, to avoid crashing with versions of OpenSSL (and other
      libraries) that attempt to learn the process's PID by using the
      syscall rather than the VDSO code. Fixes bug 21943; bugfix
      on 0.2.5.1-alpha.

diffstat:

 net/tor/Makefile |   8 ++++----
 net/tor/distinfo |  10 +++++-----
 2 files changed, 9 insertions(+), 9 deletions(-)

diffs (38 lines):

diff -r efcbe7599edf -r a5f966fd4d6b net/tor/Makefile
--- a/net/tor/Makefile  Wed May 17 07:09:53 2017 +0000
+++ b/net/tor/Makefile  Wed May 17 07:13:37 2017 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.120 2017/05/14 16:03:23 leot Exp $
+# $NetBSD: Makefile,v 1.121 2017/05/17 07:13:37 adam Exp $
 
-DISTNAME=              tor-0.3.0.6
+DISTNAME=              tor-0.3.0.7
 CATEGORIES=            net security
 MASTER_SITES=          http://www.torproject.org/dist/
 
@@ -41,8 +41,8 @@
 CONF_FILES+=           ${PREFIX}/share/examples/tor/torrc.sample       \
                                ${PKG_SYSCONFDIR}/torrc
 
-PRINT_PLIST_AWK+=       /^man\/man/ { $$0 = "$${PLIST.doc}" $$0 }
-PRINT_PLIST_AWK+=       /^share\/doc/ { $$0 = "$${PLIST.doc}" $$0 }
+PRINT_PLIST_AWK+=      /^man\/man/ { $$0 = "$${PLIST.doc}" $$0 }
+PRINT_PLIST_AWK+=      /^share\/doc/ { $$0 = "$${PLIST.doc}" $$0 }
 
 FILES_SUBST+=          PKG_HOME=${PKG_HOME.${TOR_USER}}
 FILES_SUBST+=          TOR_USER=${TOR_USER} TOR_GROUP=${TOR_GROUP}
diff -r efcbe7599edf -r a5f966fd4d6b net/tor/distinfo
--- a/net/tor/distinfo  Wed May 17 07:09:53 2017 +0000
+++ b/net/tor/distinfo  Wed May 17 07:13:37 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.80 2017/05/02 11:16:02 wiz Exp $
+$NetBSD: distinfo,v 1.81 2017/05/17 07:13:37 adam Exp $
 
-SHA1 (tor-0.3.0.6.tar.gz) = f336546a9a8d561735d1e7fdb669cedb0839d6ba
-RMD160 (tor-0.3.0.6.tar.gz) = 2cf502b8be630e8e6dbf2cdebb6fe960ab95d663
-SHA512 (tor-0.3.0.6.tar.gz) = 33983f8c0a32fc32e5586cb1da9a99c93b0502eecfb9db289723b275543ea01168cf1dd335e4c1c42ccf7991dd1d584286e764c1881f7d6ece928bbd109781cc
-Size (tor-0.3.0.6.tar.gz) = 5779422 bytes
+SHA1 (tor-0.3.0.7.tar.gz) = a8c52e943f05761a9687ee84aff1c3a9c9bf3c33
+RMD160 (tor-0.3.0.7.tar.gz) = 40e17ff81474e2eae6ea60cfb601c62763cb1e3c
+SHA512 (tor-0.3.0.7.tar.gz) = f6538e6d8dd444d2eb01f0cce48ec51a0e9ab533027d8941f1577f31136782685a4e317ff62bf21dfb52666df8d04f5dc996c5a0ceadccb2ba4fd91653989ccd
+Size (tor-0.3.0.7.tar.gz) = 5793734 bytes