• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7

• Files Changed
• Browse Source

tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues
    + Disable the dump_desc() function that we used to dump unparseable
      information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
      document that could be used to crash a directory authority
      (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database

• Files Changed
• Browse Source

Upgrade to new stable version tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- tor 0.4.3.6
  * Fix a crash due to an out-of-bound memory access (CVE-2020-15572)
  * Some minor fixes

• Files Changed
• Browse Source