./net/tor, Anonymizing overlay network for TCP

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2020Q4, Version: 0.4.4.7, Package name: tor-0.4.4.7, Maintainer: pkgsrc-users

The simple version: Tor provides a distributed network of servers ("onion
routers"). Users bounce their TCP streams (web traffic, FTP, SSH, etc.) around
the routers. This makes it hard for recipients, observers, and even the onion
routers themselves to track the source of the stream.

The complex version: Onion Routing is a connection-oriented anonymizing
communication service. Users choose a source-routed path through a set of
nodes, and negotiate a "virtual circuit" through the network, in which each
node knows its predecessor and successor, but no others. Traffic flowing down
the circuit is unwrapped by a symmetric key at each node, which reveals the
downstream node.



Package options: doc

Master sites:

SHA1: 5e360c61792320e8306db3c5d12ff81780b03104
RMD160: 6a9fa849da4229a417c24e52dfe67ec0d8a96614
Filesize: 7629.536 KB

Version history: (Expand)

CVS history: (Expand)


   2021-02-04 16:35:11 by Benny Siegert | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket #6418 - requested by wiz
net/tor: security fix

Revisions pulled up:
- net/tor/Makefile                                              1.159
- net/tor/distinfo                                              1.111
- net/tor/options.mk                                            1.15

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed Feb  3 19:55:28 UTC 2021

   Modified Files:
   	pkgsrc/net/tor: Makefile distinfo options.mk

   Log message:
   tor: update to 0.4.4.7.

   Changes in version 0.4.4.7 - 2021-02-03
     Tor 0.4.4.7 backports numerous bugfixes from later releases,
     including one that made v3 onion services more susceptible to
     denial-of-service attacks, and a feature that makes some kinds of
     DoS attacks harder to perform.

     o Major bugfixes (onion service v3, backport from 0.4.5.3-rc):
       - Stop requiring a live consensus for v3 clients and services, and
         allow a "reasonably live" consensus instead. This allows v3 onion
         services to work even if the authorities fail to generate a
         consensus for more than 2 hours in a row. Fixes bug 40237; bugfix
         on 0.3.5.1-alpha.

     o Major feature (exit, backport from 0.4.5.5-rc):
       - Re-entry into the network is now denied at the Exit level to all
         relays' ORPorts and authorities' ORPorts and DirPorts. This change
         should help mitgate a set of denial-of-service attacks. Closes
         ticket 2667.

     o Minor feature (build system, backport from 0.4.5.4-rc):
       - New "make lsp" command to generate the compile_commands.json file
         used by the ccls language server. The "bear" program is needed for
         this. Closes ticket 40227.

     o Minor features (compilation, backport from 0.4.5.2-rc):
       - Disable deprecation warnings when building with OpenSSL 3.0.0 or
         later. There are a number of APIs newly deprecated in OpenSSL
         3.0.0 that Tor still requires. (A later version of Tor will try to
         stop depending on these APIs.) Closes ticket 40165.

     o Minor features (crypto, backport from 0.4.5.3-rc):
       - Fix undefined behavior on our Keccak library. The bug only
         appeared on platforms with 32-byte CPU cache lines (e.g. armv5tel)
         and would result in wrong digests. Fixes bug 40210; bugfix on
         0.2.8.1-alpha. Thanks to Bernhard ?belacker, Arnd Bergmann and
         weasel for diagnosing this.

     o Minor bugfixes (compatibility, backport from 0.4.5.1-rc):
       - Strip '\r' characters when reading text files on Unix platforms.
         This should resolve an issue where a relay operator migrates a
         relay from Windows to Unix, but does not change the line ending of
         Tor's various state files to match the platform, and the CRLF line
         endings from Windows end up leaking into other files such as the
         extra-info document. Fixes bug 33781; bugfix on 0.0.9pre5.

     o Minor bugfixes (compilation, backport from 0.4.5.3-rc):
       - Fix a compilation warning about unreachable fallthrough
         annotations when building with "--enable-all-bugs-are-fatal" on
         some compilers. Fixes bug 40241; bugfix on 0.3.5.4-alpha.

     o Minor bugfixes (SOCKS5, backport from 0.4.5.3-rc):
       - Handle partial SOCKS5 messages correctly. Previously, our code
         would send an incorrect error message if it got a SOCKS5 request
         that wasn't complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha.

     o Minor bugfixes (testing, backport from 0.4.5.2-alpha):
       - Fix the `config/parse_tcp_proxy_line` test so that it works
         correctly on systems where the DNS provider hijacks invalid
         queries. Fixes part of bug 40179; bugfix on 0.4.3.1-alpha.
       - Fix our Python reference-implementation for the v3 onion service
         handshake so that it works correctly with the version of hashlib
         provided by Python 3.9. Fixes part of bug 40179; bugfix
         on 0.3.1.6-rc.
       - Fix the `tortls/openssl/log_one_error` test to work with OpenSSL
         3.0.0. Fixes bug 40170; bugfix on 0.2.8.1-alpha.