deepcrayon
/
buildroot
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

package/tor: security bump to version 0.4.3.7 

Fixes the following security issue:

- TROVE-2020-005: When completing a channel, relays now check more
  thoroughly to make sure that it matches any pending circuits before
  attaching those circuits.  Previously, address correctness and Ed25519
  identities were not checked in this case, but only when extending circuits
  on an existing channel

For more details, see the release notes:
https://blog.torproject.org/node/1952

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020.08.x
Peter Korsgaard 2020-11-16 13:25:21 +01:00
parent 5110efaa33
commit c57a3463cd
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/tor/tor.hash
View File

@ -1,3 +1,3 @@
# Locally computed
sha256 6a2d0637d4e514be2ec574723a05065245cce51da78a21cec1dc831be5ccac62 tor-0.4.3.6.tar.gz
sha256 b20f0b55a7058a952b167fcd2ed75b1a380ade95efce9a509f570c4636c2117a tor-0.4.3.7.tar.gz
sha256 ae2afe6cd3fd9d512afbaa1ef218757eb00aa6b6aa5e2dfc2774b6837e373fa1 LICENSE

2
package/tor/tor.mk
View File

@ -4,7 +4,7 @@
#
################################################################################
TOR_VERSION = 0.4.3.6
TOR_VERSION = 0.4.3.7
TOR_SITE = https://dist.torproject.org
TOR_LICENSE = BSD-3-Clause
TOR_LICENSE_FILES = LICENSE