diff mbox series

[bug#67115] gnu: tor: Update to 0.4.8.9 [security fixes].

Message ID 20231111222041.5600-1-nandre@riseup.net
State New
Headers show
Series [bug#67115] gnu: tor: Update to 0.4.8.9 [security fixes]. | expand

Commit Message

André Batista Nov. 11, 2023, 10:20 p.m. UTC
* gnu/packages/tor.scm (tor): Update to 0.4.8.9.

This release fixes two high severity security vulnerabilities.
The first one affects client connections to Guard relays and the
other one affects Onion Services (TROVE-2023-006).

See https://gitlab.torproject.org/tpo/core/tor/-/issues/40876 and
https://gitlab.torproject.org/tpo/core/tor/-/issues/40883
---
 gnu/packages/tor.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)


base-commit: 3f83dc5587573f173b1f61864c9b510f05de84b1

Comments

Ludovic Courtès Nov. 15, 2023, 5:25 p.m. UTC | #1
André Batista <nandre@riseup.net> skribis:

> * gnu/packages/tor.scm (tor): Update to 0.4.8.9.
>
> This release fixes two high severity security vulnerabilities.
> The first one affects client connections to Guard relays and the
> other one affects Onion Services (TROVE-2023-006).
>
> See https://gitlab.torproject.org/tpo/core/tor/-/issues/40876 and
> https://gitlab.torproject.org/tpo/core/tor/-/issues/40883

Applied, thanks!
diff mbox series

Patch

diff --git a/gnu/packages/tor.scm b/gnu/packages/tor.scm
index 71f32b3f43..d4bf27a790 100644
--- a/gnu/packages/tor.scm
+++ b/gnu/packages/tor.scm
@@ -63,14 +63,14 @@  (define-module (gnu packages tor)
 (define-public tor
   (package
     (name "tor")
-    (version "0.4.8.8")
+    (version "0.4.8.9")
     (source (origin
              (method url-fetch)
              (uri (string-append "https://dist.torproject.org/tor-"
                                  version ".tar.gz"))
              (sha256
               (base32
-               "0140d0zcjxi4vijvr2gk3kmnd4xa80sjj9kdcc2gzazyr84fkfr1"))))
+               "0rfgn88izn74nh6gy42ggwmiicnylp73skrlwm61n4znj247vfsr"))))
     (build-system gnu-build-system)
     (arguments
      (list #:configure-flags