On Sat, 23 Sep 2017 21:03:52 +0200, Klemens Nanni wrote:
> 0.3.0.11 fixed CVE-2017-0380, TROVE-2017-008 (only affects onion
> services with SafeLogging set to 0).
> 
> Directory traffic can now be compressed, pkg-config is used to detect
> zstd and lzma at bulid time.
> 
> There are lots of other important changes, see
> https://blog.torproject.org/tor-0317-now-released for a full changelog.
> 
> My hidden services and clients continue to work after this update, both
> on running -CURRENT on amd64.
> 
> Tests pass on amd64:
> 
>       =================================
>       Testsuite summary for tor 0.3.1.7
>       =================================
>       # TOTAL: 18
>       # PASS:  12
>       # SKIP:  6
>       # XFAIL: 0
>       # FAIL:  0
>       # XPASS: 0
>       # ERROR: 0
>       =================================
> 
> More testing and feedback welcome.
> 

This now picks up liblzma when installed.  I think we want to disable
that unless someone really needs the feature.  Thoughts?


Index: Makefile
===================================================================
RCS file: /cvs/ports/net/tor/Makefile,v
retrieving revision 1.105
diff -u -p -r1.105 Makefile
--- Makefile    3 Aug 2017 12:21:26 -0000       1.105
+++ Makefile    27 Sep 2017 13:11:40 -0000
@@ -2,7 +2,7 @@
 
 COMMENT=       anonymity service using onion routing
 
-DISTNAME=      tor-0.3.0.10
+DISTNAME=      tor-0.3.1.7
 CATEGORIES=    net
 HOMEPAGE=      https://www.torproject.org/
 
@@ -20,7 +20,8 @@ CONFIGURE_STYLE=gnu
 # anyway on FRAME_GROWS_DOWN archs.
 CONFIGURE_ARGS=        --with-ssl-dir=/usr \
                --with-libevent-dir="${LOCALBASE}" \
-               --disable-gcc-hardening
+               --disable-gcc-hardening \
+               --disable-lzma
 CONFIGURE_ENV+=ac_cv_member_struct_ssl_method_st_get_cipher_by_char=no
 
 LIB_DEPENDS=   devel/libevent2
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/tor/distinfo,v
retrieving revision 1.86
diff -u -p -r1.86 distinfo
--- distinfo    3 Aug 2017 12:21:26 -0000       1.86
+++ distinfo    27 Sep 2017 13:11:40 -0000
@@ -1,2 +1,2 @@
-SHA256 (tor-0.3.0.10.tar.gz) = mo5uSaFoja5k3KEPhKQU7JpPOT+yJWrijgwuMjkYWrE=
-SIZE (tor-0.3.0.10.tar.gz) = 5845205
+SHA256 (tor-0.3.1.7.tar.gz) = HfXdSJS7L14NyWxGaVUUY1PPM6xQzZl8/Bso6j7ZwI8=
+SIZE (tor-0.3.1.7.tar.gz) = 6058284

Reply via email to