GNU bug report logs - #67115
[PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].

Previous Next

Package: guix-patches;

Reported by: André Batista <nandre <at> riseup.net>

Date: Sat, 11 Nov 2023 22:22:02 UTC

Severity: normal

Tags: patch

Done: Ludovic Courtès <ludo <at> gnu.org>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#67115: closed ([PATCH] gnu: tor: Update to 0.4.8.9 [security
 fixes].)
Date: Wed, 15 Nov 2023 17:26:02 +0000
[Message part 1 (text/plain, inline)]
Your message dated Wed, 15 Nov 2023 18:25:34 +0100
with message-id <874jhn7wtt.fsf <at> gnu.org>
and subject line Re: [bug#67115] [PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].
has caused the debbugs.gnu.org bug report #67115,
regarding [PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
67115: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=67115
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
From: André Batista <nandre <at> riseup.net>
To: guix-patches <at> gnu.org
Cc: André Batista <nandre <at> riseup.net>
Subject: [PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].
Date: Sat, 11 Nov 2023 19:20:41 -0300
* gnu/packages/tor.scm (tor): Update to 0.4.8.9.

This release fixes two high severity security vulnerabilities.
The first one affects client connections to Guard relays and the
other one affects Onion Services (TROVE-2023-006).

See https://gitlab.torproject.org/tpo/core/tor/-/issues/40876 and
https://gitlab.torproject.org/tpo/core/tor/-/issues/40883
---
 gnu/packages/tor.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/tor.scm b/gnu/packages/tor.scm
index 71f32b3f43..d4bf27a790 100644
--- a/gnu/packages/tor.scm
+++ b/gnu/packages/tor.scm
@@ -63,14 +63,14 @@ (define-module (gnu packages tor)
 (define-public tor
   (package
     (name "tor")
-    (version "0.4.8.8")
+    (version "0.4.8.9")
     (source (origin
              (method url-fetch)
              (uri (string-append "https://dist.torproject.org/tor-"
                                  version ".tar.gz"))
              (sha256
               (base32
-               "0140d0zcjxi4vijvr2gk3kmnd4xa80sjj9kdcc2gzazyr84fkfr1"))))
+               "0rfgn88izn74nh6gy42ggwmiicnylp73skrlwm61n4znj247vfsr"))))
     (build-system gnu-build-system)
     (arguments
      (list #:configure-flags

base-commit: 3f83dc5587573f173b1f61864c9b510f05de84b1
-- 
2.41.0



[Message part 3 (message/rfc822, inline)]
From: Ludovic Courtès <ludo <at> gnu.org>
To: André Batista <nandre <at> riseup.net>
Cc: 67115-done <at> debbugs.gnu.org
Subject: Re: [bug#67115] [PATCH] gnu: tor: Update to 0.4.8.9 [security fixes].
Date: Wed, 15 Nov 2023 18:25:34 +0100
André Batista <nandre <at> riseup.net> skribis:

> * gnu/packages/tor.scm (tor): Update to 0.4.8.9.
>
> This release fixes two high severity security vulnerabilities.
> The first one affects client connections to Guard relays and the
> other one affects Onion Services (TROVE-2023-006).
>
> See https://gitlab.torproject.org/tpo/core/tor/-/issues/40876 and
> https://gitlab.torproject.org/tpo/core/tor/-/issues/40883

Applied, thanks!


This bug report was last modified 1 year and 246 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.