On Sat, 23 Sep 2017 21:03:52 +0200, Klemens Nanni wrote: > 0.3.0.11 fixed CVE-2017-0380, TROVE-2017-008 (only affects onion > services with SafeLogging set to 0). > > Directory traffic can now be compressed, pkg-config is used to detect > zstd and lzma at bulid time. > > There are lots of other important changes, see > https://blog.torproject.org/tor-0317-now-released for a full changelog. > > My hidden services and clients continue to work after this update, both > on running -CURRENT on amd64. > > Tests pass on amd64: > > ================================= > Testsuite summary for tor 0.3.1.7 > ================================= > # TOTAL: 18 > # PASS: 12 > # SKIP: 6 > # XFAIL: 0 > # FAIL: 0 > # XPASS: 0 > # ERROR: 0 > ================================= > > More testing and feedback welcome. >
This now picks up liblzma when installed. I think we want to disable that unless someone really needs the feature. Thoughts? Index: Makefile =================================================================== RCS file: /cvs/ports/net/tor/Makefile,v retrieving revision 1.105 diff -u -p -r1.105 Makefile --- Makefile 3 Aug 2017 12:21:26 -0000 1.105 +++ Makefile 27 Sep 2017 13:11:40 -0000 @@ -2,7 +2,7 @@ COMMENT= anonymity service using onion routing -DISTNAME= tor-0.3.0.10 +DISTNAME= tor-0.3.1.7 CATEGORIES= net HOMEPAGE= https://www.torproject.org/ @@ -20,7 +20,8 @@ CONFIGURE_STYLE=gnu # anyway on FRAME_GROWS_DOWN archs. CONFIGURE_ARGS= --with-ssl-dir=/usr \ --with-libevent-dir="${LOCALBASE}" \ - --disable-gcc-hardening + --disable-gcc-hardening \ + --disable-lzma CONFIGURE_ENV+=ac_cv_member_struct_ssl_method_st_get_cipher_by_char=no LIB_DEPENDS= devel/libevent2 Index: distinfo =================================================================== RCS file: /cvs/ports/net/tor/distinfo,v retrieving revision 1.86 diff -u -p -r1.86 distinfo --- distinfo 3 Aug 2017 12:21:26 -0000 1.86 +++ distinfo 27 Sep 2017 13:11:40 -0000 @@ -1,2 +1,2 @@ -SHA256 (tor-0.3.0.10.tar.gz) = mo5uSaFoja5k3KEPhKQU7JpPOT+yJWrijgwuMjkYWrE= -SIZE (tor-0.3.0.10.tar.gz) = 5845205 +SHA256 (tor-0.3.1.7.tar.gz) = HfXdSJS7L14NyWxGaVUUY1PPM6xQzZl8/Bso6j7ZwI8= +SIZE (tor-0.3.1.7.tar.gz) = 6058284