CVS commit: pkgsrc/net/tor

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Fri Nov 10 08:06:47 UTC 2023

Modified Files:
        pkgsrc/net/tor: Makefile distinfo

Log Message:
tor: update to 0.4.8.9.

Changes in version 0.4.8.9 - 2023-11-09
  This is another security release fixing a high severity bug affecting onion
  services which is tracked by TROVE-2023-006. We are also releasing a guard
  major bugfix as well. If you are an onion service operator, we strongly
  recommend to update as soon as possible.

  o Major bugfixes (guard usage):
    - When Tor excluded a guard due to temporary circuit restrictions,
      it considered *additional* primary guards for potential usage by
      that circuit. This could result in more than the specified number
      of guards (currently 2) being used, long-term, by the tor client.
      This could happen when a Guard was also selected as an Exit node,
      but it was exacerbated by the Conflux guard restrictions. Both
      instances have been fixed. Fixes bug 40876; bugfix
      on 0.3.0.1-alpha.

  o Major bugfixes (onion service, TROVE-2023-006):
    - Fix a possible hard assert on a NULL pointer when recording a
      failed rendezvous circuit on the service side for the MetricsPort.
      Fixes bug 40883; bugfix on 0.4.8.1-alpha

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on November 09, 2023.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2023/11/09.


To generate a diff of this commit:
cvs rdiff -u -r1.183 -r1.184 pkgsrc/net/tor/Makefile
cvs rdiff -u -r1.127 -r1.128 pkgsrc/net/tor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/tor/Makefile
diff -u pkgsrc/net/tor/Makefile:1.183 pkgsrc/net/tor/Makefile:1.184
--- pkgsrc/net/tor/Makefile:1.183       Thu Nov  9 07:56:37 2023
+++ pkgsrc/net/tor/Makefile     Fri Nov 10 08:06:47 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.183 2023/11/09 07:56:37 wiz Exp $
+# $NetBSD: Makefile,v 1.184 2023/11/10 08:06:47 wiz Exp $
 
-DISTNAME=      tor-0.4.8.8
+DISTNAME=      tor-0.4.8.9
 CATEGORIES=    net security
 MASTER_SITES=  https://dist.torproject.org/
 

Index: pkgsrc/net/tor/distinfo
diff -u pkgsrc/net/tor/distinfo:1.127 pkgsrc/net/tor/distinfo:1.128
--- pkgsrc/net/tor/distinfo:1.127       Thu Nov  9 07:56:37 2023
+++ pkgsrc/net/tor/distinfo     Fri Nov 10 08:06:47 2023
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.127 2023/11/09 07:56:37 wiz Exp $
+$NetBSD: distinfo,v 1.128 2023/11/10 08:06:47 wiz Exp $
 
-BLAKE2s (tor-0.4.8.8.tar.gz) = 703fc0331c16faf7de2055158f6f9649720b0d4b6c442225afab982d7812bc09
-SHA512 (tor-0.4.8.8.tar.gz) = 780c507ea3aaa66dafb5cd34551009979c6621217acb3c1b11727b5f5d7fb0edd08d7e79b9991014a95a185f4ee6fdd53098d2df587e3d801fb2d5100b9b6e23
-Size (tor-0.4.8.8.tar.gz) = 8261891 bytes
+BLAKE2s (tor-0.4.8.9.tar.gz) = 28c15e095b236dac22a4eb3fed818846e3ca6231a74ac491b9106dc386b83923
+SHA512 (tor-0.4.8.9.tar.gz) = b8c38368f80091d8dcf378d9a243952308f756902da23afe40df4f1bed30f0b274c2bd2abc47d80d6bc0b8939fd09dd19a4def4b91da1eeb55a4ee1687e2795b
+Size (tor-0.4.8.9.tar.gz) = 8266806 bytes