GNU bug report logs - #67115
[PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 67115 in the body.
You can then email your comments to 67115 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].
Date: Sat, 11 Nov 2023 19:20:41 -0300

* gnu/packages/tor.scm (tor): Update to 0.4.8.9.

This release fixes two high severity security vulnerabilities.
The first one affects client connections to Guard relays and the
other one affects Onion Services (TROVE-2023-006).

See https://gitlab.torproject.org/tpo/core/tor/-/issues/40876 and
https://gitlab.torproject.org/tpo/core/tor/-/issues/40883
---
 gnu/packages/tor.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/tor.scm b/gnu/packages/tor.scm
index 71f32b3f43..d4bf27a790 100644
--- a/gnu/packages/tor.scm
+++ b/gnu/packages/tor.scm
@@ -63,14 +63,14 @@ (define-module (gnu packages tor)
 (define-public tor
   (package
     (name "tor")
-    (version "0.4.8.8")
+    (version "0.4.8.9")
     (source (origin
              (method url-fetch)
              (uri (string-append "https://dist.torproject.org/tor-"
                                  version ".tar.gz"))
              (sha256
               (base32
-               "0140d0zcjxi4vijvr2gk3kmnd4xa80sjj9kdcc2gzazyr84fkfr1"))))
+               "0rfgn88izn74nh6gy42ggwmiicnylp73skrlwm61n4znj247vfsr"))))
     (build-system gnu-build-system)
     (arguments
      (list #:configure-flags

base-commit: 3f83dc5587573f173b1f61864c9b510f05de84b1
-- 
2.41.0

Message #10 received at 67115-done <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: André Batista <nandre <at> riseup.net>
Cc: 67115-done <at> debbugs.gnu.org
Subject: Re: [bug#67115] [PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].
Date: Wed, 15 Nov 2023 18:25:34 +0100

André Batista <nandre <at> riseup.net> skribis:

> * gnu/packages/tor.scm (tor): Update to 0.4.8.9.
>
> This release fixes two high severity security vulnerabilities.
> The first one affects client connections to Guard relays and the
> other one affects Onion Services (TROVE-2023-006).
>
> See https://gitlab.torproject.org/tpo/core/tor/-/issues/40876 and
> https://gitlab.torproject.org/tpo/core/tor/-/issues/40883

Applied, thanks!

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.