CVS commit: pkgsrc/net/tor

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Apr 16 13:12:33 UTC 2026

Modified Files:
        pkgsrc/net/tor: Makefile distinfo

Log Message:
tor: updated to 0.4.8.23

Changes in version 0.4.8.23 - 2026-03-25
  This is a security release fixing major bugfixes that could possibly lead to
  remote crashing relays. We strongly recommend upgrading as soon as possible.

  o Major bugfix (security, conflux):
    - Fix a memory compare using the wrong length. This could lead to a
      remote crash when using the conflux subsystem. TROVE-2026-004.
      Fixes bug 41232; bugfix on 0.4.8.1-alpha.

  o Minor bugfixes (security):
    - Fix a series of defense in depth security issues found across the
      codebase. Fixes bug 41228; bugfix on 0.3.5.1-alpha.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on March 25, 2026.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2026/03/25.


To generate a diff of this commit:
cvs rdiff -u -r1.195 -r1.196 pkgsrc/net/tor/Makefile
cvs rdiff -u -r1.139 -r1.140 pkgsrc/net/tor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/tor/Makefile
diff -u pkgsrc/net/tor/Makefile:1.195 pkgsrc/net/tor/Makefile:1.196
--- pkgsrc/net/tor/Makefile:1.195       Fri Jan 30 11:08:35 2026
+++ pkgsrc/net/tor/Makefile     Thu Apr 16 13:12:33 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.195 2026/01/30 11:08:35 leot Exp $
+# $NetBSD: Makefile,v 1.196 2026/04/16 13:12:33 adam Exp $
 
-DISTNAME=      tor-0.4.8.22
+DISTNAME=      tor-0.4.8.23
 CATEGORIES=    net security
 MASTER_SITES=  https://dist.torproject.org/
 

Index: pkgsrc/net/tor/distinfo
diff -u pkgsrc/net/tor/distinfo:1.139 pkgsrc/net/tor/distinfo:1.140
--- pkgsrc/net/tor/distinfo:1.139       Fri Jan 30 11:08:35 2026
+++ pkgsrc/net/tor/distinfo     Thu Apr 16 13:12:33 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.139 2026/01/30 11:08:35 leot Exp $
+$NetBSD: distinfo,v 1.140 2026/04/16 13:12:33 adam Exp $
 
-BLAKE2s (tor-0.4.8.22.tar.gz) = 4b6ccdafaece15afee6f93d21ce4a4b0d0129fce0237dd0b37a181a50fcb88ad
-SHA512 (tor-0.4.8.22.tar.gz) = c7c6bfc7a2c10d045903c3e60fcff076983949fdbdf884d3f8e3eb6dc01c3e8a75abdc6e8e8efe7ac409d77932e034551ff0f6309851edd75c1134f1828aa8b3
-Size (tor-0.4.8.22.tar.gz) = 10625231 bytes
+BLAKE2s (tor-0.4.8.23.tar.gz) = f00ed9ce44acd42d0af6df42c426ef87b4997e78b76269687c4e2925130baafe
+SHA512 (tor-0.4.8.23.tar.gz) = bd6efac5c331485fb9cdb0c8947dee6f60b5fe9dac641ef96bfdb336558fd588c9f03c6d3b0a29a484aba3df28b726ccc7f2892d6f8ae1707cd99001c34a4eb5
+Size (tor-0.4.8.23.tar.gz) = 10688085 bytes