Hello community, here is the log from the commit of package tor for openSUSE:Factory checked in at 2019-02-26 22:20:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tor (Old) and /work/SRC/openSUSE:Factory/.tor.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tor" Tue Feb 26 22:20:08 2019 rev:71 rq:678960 version:0.3.5.8 Changes: -------- --- /work/SRC/openSUSE:Factory/tor/tor.changes 2019-01-10 15:21:12.398463109 +0100 +++ /work/SRC/openSUSE:Factory/.tor.new.28833/tor.changes 2019-02-26 22:21:33.850083977 +0100 @@ -1,0 +2,18 @@ +Mon Feb 25 15:55:39 UTC 2019 - [email protected] + +- Add tor-0.3.5.8-nonetwork.patch to fix test failures + without network + +------------------------------------------------------------------- +Fri Feb 22 15:04:30 UTC 2019 - [email protected] + +- tor 0.3.5.8: + * CVE-2019-8955 prevent attackers from making tor run + out of memory and crash + * Allow SOCKS5 with empty username+password + * Update geoip and geoip6 to the February 5 2019 Maxmind + GeoLite2 Country database + * Select guards even if the consensus has expired, as long + as the consensus is still reasonably live + +------------------------------------------------------------------- Old: ---- tor-0.3.5.7.tar.gz tor-0.3.5.7.tar.gz.asc New: ---- tor-0.3.5.8-nonetwork.patch tor-0.3.5.8.tar.gz tor-0.3.5.8.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tor.spec ++++++ --- /var/tmp/diff_new_pack.CR1mJf/_old 2019-02-26 22:21:34.538083732 +0100 +++ /var/tmp/diff_new_pack.CR1mJf/_new 2019-02-26 22:21:34.542083732 +0100 @@ -20,7 +20,7 @@ %define torgroup %{name} %define home_dir %{_localstatedir}/lib/empty Name: tor -Version: 0.3.5.7 +Version: 0.3.5.8 Release: 0 Summary: Anonymizing overlay network for TCP (The onion router) License: BSD-3-Clause @@ -34,6 +34,7 @@ Source4: tor.tmpfiles Source5: tor.firewall Patch0: tor-0.2.5.x-logrotate.patch +Patch1: tor-0.3.5.8-nonetwork.patch BuildRequires: openssl-devel >= 1.0.1 BuildRequires: pkgconfig >= 0.9.0 BuildRequires: pwdutils @@ -74,6 +75,7 @@ %prep %setup -q %patch0 -p1 +%patch1 -p1 %build %configure \ ++++++ tor-0.3.5.8-nonetwork.patch ++++++ commit d32e4079761f0076cd9e704a7f9996aa5b599f60 Author: Nick Mathewson <[email protected]> Date: Tue Feb 19 14:02:32 2019 -0500 Downgrade some LOG_ERR messages in the address/* tests to warnings Fixes bug 29530, where the LOG_ERR messages were occurring when we had no configured network, and so we were failing the unit tests because of the recently-merged #28668. Bug not in any released Tor. diff --git a/src/test/test_address.c b/src/test/test_address.c index d9304a0cf..bf9ca047d 100644 --- a/src/test/test_address.c +++ b/src/test/test_address.c @@ -746,7 +746,7 @@ test_address_get_if_addrs_list_internal(void *arg) (void)arg; - results = get_interface_address_list(LOG_ERR, 1); + results = get_interface_address_list(LOG_WARN, 1); tt_ptr_op(results, OP_NE, NULL); /* When the network is down, a system might not have any non-local @@ -777,7 +777,7 @@ test_address_get_if_addrs_list_no_internal(void *arg) (void)arg; - results = get_interface_address_list(LOG_ERR, 0); + results = get_interface_address_list(LOG_WARN, 0); tt_ptr_op(results, OP_NE, NULL); /* Work even on systems with only internal IPv4 addresses */ @@ -988,7 +988,7 @@ test_address_get_if_addrs(void *arg) (void)arg; - rv = get_interface_address(LOG_ERR, &addr_h); + rv = get_interface_address(LOG_WARN, &addr_h); /* When the network is down, a system might not have any non-local * non-multicast IPv4 addresses, not even internal ones. ++++++ tor-0.3.5.7.tar.gz -> tor-0.3.5.8.tar.gz ++++++ /work/SRC/openSUSE:Factory/tor/tor-0.3.5.7.tar.gz /work/SRC/openSUSE:Factory/.tor.new.28833/tor-0.3.5.8.tar.gz differ: char 5, line 1
