Tor: update to 0.4.6.9

Message ID aa8839f0-5e62-5d22-986b-2bbf640199f9@ipfire.org
State Accepted
Commit 48834bfa071b229b0b3543323e3f05c6ae0e1122
Headers
Series Tor: update to 0.4.6.9 |

Commit Message

Peter Müller Dec. 18, 2021, 4:23 p.m. UTC
  Full changelog as per https://gitweb.torproject.org/tor.git/plain/ChangeLog:

Changes in version 0.4.6.9 - 2021-12-15
  This version fixes several bugs from earlier versions of Tor. One important
  piece is the removal of DNS timeout metric from the overload general signal.
  See below for more details.

  o Major bugfixes (relay, overload):
    - Don't make Tor DNS timeout trigger an overload general state.
      These timeouts are different from DNS server timeout. They have to
      be seen as timeout related to UX and not because of a network
      problem. Fixes bug 40527; bugfix on 0.4.6.1-alpha.

  o Minor feature (reproducible build):
    - The repository can now build reproducible tarballs which adds the
      build command "make dist-reprod" for that purpose. Closes
      ticket 26299.

  o Minor features (compilation):
    - Give an error message if trying to build with a version of
      LibreSSL known not to work with Tor. (There's an incompatibility
      with LibreSSL versions 3.2.1 through 3.4.0 inclusive because of
      their incompatibility with OpenSSL 1.1.1's TLSv1.3 APIs.) Closes
      ticket 40511.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on December 15, 2021.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2021/12/15.

  o Minor bugfixes (compilation):
    - Fix our configuration logic to detect whether we had OpenSSL 3:
      previously, our logic was reversed. This has no other effect than
      to change whether we suppress deprecated API warnings. Fixes bug
      40429; bugfix on 0.3.5.13.

  o Minor bugfixes (relay):
    - Reject IPv6-only DirPorts. Our reachability self-test forces
      DirPorts to be IPv4, but our configuration parser allowed them to
      be IPv6-only, which led to an assertion failure. Fixes bug 40494;
      bugfix on 0.4.5.1-alpha.

  o Documentation (man, relay):
    - Missing "OverloadStatistics" in tor.1 manpage. Fixes bug 40504;
      bugfix on 0.4.6.1-alpha.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 lfs/tor | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
  

Comments

Michael Tremer Dec. 19, 2021, 9:59 a.m. UTC | #1
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>

> On 18 Dec 2021, at 17:23, Peter Müller <peter.mueller@ipfire.org> wrote:
> 
> Full changelog as per https://gitweb.torproject.org/tor.git/plain/ChangeLog:
> 
> Changes in version 0.4.6.9 - 2021-12-15
>  This version fixes several bugs from earlier versions of Tor. One important
>  piece is the removal of DNS timeout metric from the overload general signal.
>  See below for more details.
> 
>  o Major bugfixes (relay, overload):
>    - Don't make Tor DNS timeout trigger an overload general state.
>      These timeouts are different from DNS server timeout. They have to
>      be seen as timeout related to UX and not because of a network
>      problem. Fixes bug 40527; bugfix on 0.4.6.1-alpha.
> 
>  o Minor feature (reproducible build):
>    - The repository can now build reproducible tarballs which adds the
>      build command "make dist-reprod" for that purpose. Closes
>      ticket 26299.
> 
>  o Minor features (compilation):
>    - Give an error message if trying to build with a version of
>      LibreSSL known not to work with Tor. (There's an incompatibility
>      with LibreSSL versions 3.2.1 through 3.4.0 inclusive because of
>      their incompatibility with OpenSSL 1.1.1's TLSv1.3 APIs.) Closes
>      ticket 40511.
> 
>  o Minor features (fallbackdir):
>    - Regenerate fallback directories generated on December 15, 2021.
> 
>  o Minor features (geoip data):
>    - Update the geoip files to match the IPFire Location Database, as
>      retrieved on 2021/12/15.
> 
>  o Minor bugfixes (compilation):
>    - Fix our configuration logic to detect whether we had OpenSSL 3:
>      previously, our logic was reversed. This has no other effect than
>      to change whether we suppress deprecated API warnings. Fixes bug
>      40429; bugfix on 0.3.5.13.
> 
>  o Minor bugfixes (relay):
>    - Reject IPv6-only DirPorts. Our reachability self-test forces
>      DirPorts to be IPv4, but our configuration parser allowed them to
>      be IPv6-only, which led to an assertion failure. Fixes bug 40494;
>      bugfix on 0.4.5.1-alpha.
> 
>  o Documentation (man, relay):
>    - Missing "OverloadStatistics" in tor.1 manpage. Fixes bug 40504;
>      bugfix on 0.4.6.1-alpha.
> 
> Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
> ---
> lfs/tor | 6 +++---
> 1 file changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/lfs/tor b/lfs/tor
> index 1c41ef89d..aca9c0c92 100644
> --- a/lfs/tor
> +++ b/lfs/tor
> @@ -24,7 +24,7 @@
> 
> include Config
> 
> -VER        = 0.4.6.8
> +VER        = 0.4.6.9
> 
> THISAPP    = tor-$(VER)
> DL_FILE    = $(THISAPP).tar.gz
> @@ -32,7 +32,7 @@ DL_FROM    = $(URL_IPFIRE)
> DIR_APP    = $(DIR_SRC)/$(THISAPP)
> TARGET     = $(DIR_INFO)/$(THISAPP)
> PROG       = tor
> -PAK_VER    = 65
> +PAK_VER    = 66
> 
> DEPS       = libseccomp
> 
> @@ -44,7 +44,7 @@ objects = $(DL_FILE)
> 
> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
> 
> -$(DL_FILE)_MD5 = e65cbb78aece2c135f635970e555506a
> +$(DL_FILE)_MD5 = 6a8bb8f6c6f7c6d80a50de8f9f8be8c4
> 
> install : $(TARGET)
> 
> -- 
> 2.26.2
  

Patch

diff --git a/lfs/tor b/lfs/tor
index 1c41ef89d..aca9c0c92 100644
--- a/lfs/tor
+++ b/lfs/tor
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 0.4.6.8
+VER        = 0.4.6.9
 
 THISAPP    = tor-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -32,7 +32,7 @@  DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = tor
-PAK_VER    = 65
+PAK_VER    = 66
 
 DEPS       = libseccomp
 
@@ -44,7 +44,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = e65cbb78aece2c135f635970e555506a
+$(DL_FILE)_MD5 = 6a8bb8f6c6f7c6d80a50de8f9f8be8c4
 
 install : $(TARGET)