[Buildroot] [PATCH] tor: security bump to 0.2.8.12

[Buildroot] [PATCH] tor: security bump to 0.2.8.12

[Peter Korsgaard]

Fixes CVE-2016-1254 - One byte past an allocated buffer read while parsing
hidden service descriptors:

https://blog.torproject.org/blog/tor-02812-released

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/tor/tor.hash | 2 +-
 package/tor/tor.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/tor/tor.hash b/package/tor/tor.hash
index b13fc4a..4fdb82c 100644
--- a/package/tor/tor.hash
+++ b/package/tor/tor.hash
@@ -1,2 +1,2 @@
 # Locally computed
-sha256 c88b8c57b34ebf44b731df5d68f73eb6b6708bcf4e42cf7b4817fd4e304c9c4d  tor-0.2.8.10.tar.gz
+sha256 b35748f2839cf8ce9910b677ea873463495ac88689244c007ed038f6887f4aaf  tor-0.2.8.12.tar.gz
diff --git a/package/tor/tor.mk b/package/tor/tor.mk
index 4f33522..5606cc2 100644
--- a/package/tor/tor.mk
+++ b/package/tor/tor.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-TOR_VERSION = 0.2.8.10
+TOR_VERSION = 0.2.8.12
 TOR_SITE = https://dist.torproject.org
 TOR_LICENSE = BSD-3c
 TOR_LICENSE_FILES = LICENSE
-- 
2.10.2

[Buildroot] [PATCH] tor: security bump to 0.2.8.12

[Peter Korsgaard]

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

 > Fixes CVE-2016-1254 - One byte past an allocated buffer read while parsing
 > hidden service descriptors:

 > https://blog.torproject.org/blog/tor-02812-released

 > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Committed, thanks.

-- 
Bye, Peter Korsgaard

[Buildroot] [PATCH] tor: security bump to 0.2.8.12

[Baruch Siach]

Hi Peter,

On Tue, Dec 20, 2016 at 09:25:02PM +0100, Peter Korsgaard wrote:
> >>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:
> 
>  > Fixes CVE-2016-1254 - One byte past an allocated buffer read while parsing
>  > hidden service descriptors:
> 
>  > https://blog.torproject.org/blog/tor-02812-released
> 
>  > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> 
> Committed, thanks.

This commit is not in master as of 325f79bb033 (busybox: adjust nommu 
swaponoff handling for busybox 1.26.0+).

baruch

-- 
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.52.368.4656, http://www.tkos.co.il -

[Buildroot] [PATCH] tor: security bump to 0.2.8.12

[Peter Korsgaard]

>>>>> "Baruch" == Baruch Siach <baruch@tkos.co.il> writes:

 > Hi Peter,
 > On Tue, Dec 20, 2016 at 09:25:02PM +0100, Peter Korsgaard wrote:
 >> >>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:
 >> 
 >> > Fixes CVE-2016-1254 - One byte past an allocated buffer read while parsing
 >> > hidden service descriptors:
 >> 
 >> > https://blog.torproject.org/blog/tor-02812-released
 >> 
 >> > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 >> 
 >> Committed, thanks.

 > This commit is not in master as of 325f79bb033 (busybox: adjust nommu 
 > swaponoff handling for busybox 1.26.0+).

You are right - Thanks. I've added it now.

-- 
Bye, Peter Korsgaard