Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tor for openSUSE:Factory checked in at 2026-08-24 12:11:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tor (Old) and /work/SRC/openSUSE:Factory/.tor.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tor" Mon Aug 24 12:11:14 2026 rev:136 rq:1373271 version:0.4.9.11 Changes: -------- --- /work/SRC/openSUSE:Factory/tor/tor.changes 2026-07-24 22:06:43.280597908 +0200 +++ /work/SRC/openSUSE:Factory/.tor.new.1258/tor.changes 2026-08-24 12:16:49.032101165 +0200 @@ -1,0 +2,21 @@ +Sun Aug 23 11:05:02 UTC 2026 - Bernhard Wiedemann <[email protected]> + +- Update to 0.4.9.11 + * Major bugfixes + + onion services: Prevent a race condition (boo#1275918, CVE-2026-77638) + + client: no longer assert and exit if an onion service encodes an + all-zero public key for one of its introduction points + + directory authorities: Stop allowing 0 as a port in exit policy lines + + security, conflux: Fix a use-after-free (and potential double free) + (boo#1275919, CVE-2026-77587, TROVE-2026-026) + +- Update to 0.4.9.10 + * Major bugfixes + + conflux, security: Reject a CONFLUX_LINK cell that arrives on a circuit + which already has attached streams. (boo#1275920, CVE-2026-77584, TROVE-2026-025) + + client: Resume warning about unsafe socks protocols when SafeSocks + is not set. Also resume warning every time when TestSocks is set. + + Make clients more consistently expire entry guards 48 to 60 days + after they are first used. + +------------------------------------------------------------------- Old: ---- tor-0.4.9.9.tar.gz tor-0.4.9.9.tar.gz.sha256sum tor-0.4.9.9.tar.gz.sha256sum.asc New: ---- tor-0.4.9.11.tar.gz tor-0.4.9.11.tar.gz.sha256sum tor-0.4.9.11.tar.gz.sha256sum.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tor.spec ++++++ --- /var/tmp/diff_new_pack.tJqIRC/_old 2026-08-24 12:16:50.505153629 +0200 +++ /var/tmp/diff_new_pack.tJqIRC/_new 2026-08-24 12:16:50.510153807 +0200 @@ -20,7 +20,7 @@ %define toruser %{name} %define torgroup %{name} Name: tor -Version: 0.4.9.9 +Version: 0.4.9.11 Release: 0 Summary: Anonymizing overlay network for TCP (The onion router) License: BSD-3-Clause ++++++ tor-0.4.9.9.tar.gz -> tor-0.4.9.11.tar.gz ++++++ /work/SRC/openSUSE:Factory/tor/tor-0.4.9.9.tar.gz /work/SRC/openSUSE:Factory/.tor.new.1258/tor-0.4.9.11.tar.gz differ: char 12, line 1 ++++++ tor-0.4.9.9.tar.gz.sha256sum -> tor-0.4.9.11.tar.gz.sha256sum ++++++ --- /work/SRC/openSUSE:Factory/tor/tor-0.4.9.9.tar.gz.sha256sum 2026-06-02 16:10:27.998165198 +0200 +++ /work/SRC/openSUSE:Factory/.tor.new.1258/tor-0.4.9.11.tar.gz.sha256sum 2026-08-24 12:16:48.995099847 +0200 @@ -1 +1 @@ -bd75ba7fd68f607c7806fcf70156a300aa926e9ad69a5e56a8e6414f5227e833 tor-0.4.9.9.tar.gz +2e6c1720118c812acf0079fd47cf91b6bfaba5d766c321c4d3d2a28d6a11a8ed tor-0.4.9.11.tar.gz
