Hello community, here is the log from the commit of package tor for openSUSE:Factory checked in at 2014-05-18 21:37:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tor (Old) and /work/SRC/openSUSE:Factory/.tor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tor" Changes: -------- --- /work/SRC/openSUSE:Factory/tor/tor.changes 2014-04-20 11:37:21.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.tor.new/tor.changes 2014-05-18 21:37:04.000000000 +0200 @@ -1,0 +2,27 @@ +Sat May 17 23:13:54 UTC 2014 - [email protected] + +- tor 0.2.4.22: + Backports numerous high-priority fixes. These include blocking + all authority signing keys that may have been affected by the + OpenSSL "heartbleed" bug, choosing a far more secure set of TLS + ciphersuites by default, closing a couple of memory leaks that + could be used to run a target relay out of RAM. +- Major features (security) + - Block authority signing keys that were used on authorities + vulnerable to the "heartbleed" bug in OpenSSL (CVE-2014-0160). +- Major bugfixes (security, OOM): + - Fix a memory leak that could occur if a microdescriptor parse + fails during the tokenizing step. +- Major bugfixes (TLS cipher selection): + - The relay ciphersuite list is now generated automatically based + on uniform criteria, and includes all OpenSSL ciphersuites with + acceptable strength and forward secrecy. + - Relays now trust themselves to have a better view than clients + of which TLS ciphersuites are better than others. + - Clients now try to advertise the same list of ciphersuites as + Firefox 28. +- further minor bug fixes, see ChangeLog +- fix logrotate on systemd-only setups without init scripts, + work tor-0.2.2.37-logrotate.patch to tor-0.2.4.x-logrotate.patch + +------------------------------------------------------------------- Old: ---- tor-0.2.2.37-logrotate.patch tor-0.2.4.21.tar.gz tor-0.2.4.21.tar.gz.asc New: ---- tor-0.2.4.22.tar.gz tor-0.2.4.22.tar.gz.asc tor-0.2.4.x-logrotate.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tor.spec ++++++ --- /var/tmp/diff_new_pack.XIw2uQ/_old 2014-05-18 21:37:05.000000000 +0200 +++ /var/tmp/diff_new_pack.XIw2uQ/_new 2014-05-18 21:37:05.000000000 +0200 @@ -23,7 +23,7 @@ %define torgroup %{name} %define home_dir %{_localstatedir}/lib/empty Name: tor -Version: 0.2.4.21 +Version: 0.2.4.22 Release: 0 Summary: Anonymizing overlay network for TCP (The onion router) License: BSD-3-Clause @@ -35,8 +35,7 @@ Source2: tor.keyring Source3: tor.service Source4: tor.tmpfiles -# PATCH-FIX-UPSTREAM tor-0.2.2.37-logrotate.patch -- add su to logrotate config to fix W: suse-logrotate-user-writable-log-dir -Patch0: tor-0.2.2.37-logrotate.patch +Patch0: tor-0.2.4.x-logrotate.patch %if %{with_upnp} BuildRequires: libminiupnpc-devel %endif @@ -54,11 +53,6 @@ %else BuildRequires: libevent-devel %endif -# -%if 0%{?suse_version} >= 1230 -BuildRequires: gpg-offline -%endif -# %if 0%{?with_systemd} BuildRequires: pkgconfig(systemd) %{?systemd_requires} @@ -89,9 +83,8 @@ for high-stakes anonymity. %prep -%{?gpg_verify: %gpg_verify %{SOURCE1}} %setup -q -%patch0 +%patch0 -p1 %build %configure \ ++++++ tor-0.2.4.21.tar.gz -> tor-0.2.4.22.tar.gz ++++++ ++++ 6947 lines of diff (skipped) ++++++ tor-0.2.4.x-logrotate.patch ++++++ From: Andreas Stieger <[email protected]> Subject: openSUSE specific logrotate fixes Date: Sun, 18 May 2014 00:10:32 +0100 Upstream: no References: * add su to logrotate config to fix W: suse-logrotate-user-writable-log-dir * use "service tor" instead of "/etc/init.d/tor" to reload after logrotate to fix logrotate on systemd-only setups without init script (by seife) --- contrib/tor.logrotate.in | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) Index: tor-0.2.4.22/contrib/tor.logrotate.in =================================================================== --- tor-0.2.4.22.orig/contrib/tor.logrotate.in 2013-01-16 06:47:59.000000000 +0000 +++ tor-0.2.4.22/contrib/tor.logrotate.in 2014-05-18 00:09:09.000000000 +0100 @@ -7,8 +7,9 @@ notifempty # you may need to change the username/groupname below create 0640 _tor _tor + su _tor _tor sharedscripts postrotate - /etc/init.d/tor reload > /dev/null + /usr/sbin/service tor reload > /dev/null endscript } -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
