[Buildroot] [PATCH 1/1] package/tor: bump version to 0.2.9.10

Peter Korsgaard peter at korsgaard.com
Mon Mar 13 23:22:00 UTC 2017


>>>>> "Thomas" == Thomas Petazzoni <thomas.petazzoni at free-electrons.com> writes:

 > Hello,
 > On Sat, 11 Mar 2017 17:32:59 +0100, Bernd Kuhls wrote:
 >> Signed-off-by: Bernd Kuhls <bernd.kuhls at t-online.de>
 >> ---
 >> package/tor/tor.hash | 2 +-
 >> package/tor/tor.mk   | 2 +-
 >> 2 files changed, 2 insertions(+), 2 deletions(-)

 > Applied to master, thanks.

 > I wondered if that one has a security fix. It does have one according
 > to https://blog.torproject.org/blog/tor-02910-released:

 > """

 > Tor 0.2.9.10 backports a security fix for users who build Tor with the
 > --enable-expensive-hardening option. It also includes fixes for some
 > major issues affecting directory authorities, LibreSSL compatibility,
 > and IPv6 correctness.

 > """

 > But we don't pass --enable-expensive-hardening in Buildroot, so users
 > of our LTS branch should not be affected by this.

 > Peter: I leave it up to you to decide if we want this bump on the LTS
 > branch or not.

The release mentions several major bugfixes, so I've committed it to
2017.02.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list