diff --git a/_service b/_service index f7613af..9c3a33e 100644 --- a/_service +++ b/_service @@ -3,9 +3,9 @@ https://gitlab.torproject.org/tpo/core/arti.git @PARENT_TAG@~@TAG_OFFSET@ git - arti-1.2.1 + arti-v1.2.4 * - arti-(\d+\.\d+\.\d+) + arti-v(\d+\.\d+\.\d+) \1 enable @@ -16,7 +16,7 @@ zst true - @@ -33,7 +33,7 @@ @@ -46,7 +46,7 @@ experimental). --> RUSTSEC-2024-0014 - + diff --git a/_servicedata b/_servicedata index d8fbbaa..388c365 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://gitlab.torproject.org/tpo/core/arti.git - 305f74b9bbe187ea2a48003ca93b5bde4b4d6e09 \ No newline at end of file + 5217447873011338a5426898fcc8b96c8665babf \ No newline at end of file diff --git a/arti-1.2.1~0.obscpio b/arti-1.2.1~0.obscpio deleted file mode 100644 index ca0a3ba..0000000 --- a/arti-1.2.1~0.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:53050008a4e11ac5ad9b693f8431aa8f1f7811376cbdb250c1319bc1a8ca3369 -size 60273678 diff --git a/arti-1.2.4~0.obscpio b/arti-1.2.4~0.obscpio new file mode 100644 index 0000000..37430f9 --- /dev/null +++ b/arti-1.2.4~0.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5a0dbd802da3a948fb2a36c87acd209d1ba64e930612b810fd34361e20acc519 +size 60828686 diff --git a/arti.changes b/arti.changes index 7860e5c..b14ccff 100644 --- a/arti.changes +++ b/arti.changes @@ -1,3 +1,41 @@ +------------------------------------------------------------------- +Thu Jun 06 23:38:53 UTC 2024 - Eyad Issa + +- Update to version 1.2.4: + * Development on onion services, and on the RPC subsystem. + * This release restores the faravahar directory authority, + which has a new location and keys. + * Fixed two-medium security issues, tracked as TROVE-2024-005 + and TROVE-2024-006. + * For a full changelog, refer to the installed package changelog + (/usr/share/doc/packages/arti/CHANGELOG.md) + + +- Update to version 1.2.3: + * Fixes a high-severity issue affecting onion services and + clients connecting to onion services with 'lite' vanguards + (the default) enabled. TROVE-2024-003 + * This release also fixes a medium-severity issue affecting + 'full' vanguards. TROVE-2024-004 + * For a full changelog, refer to the installed package changelog + (/usr/share/doc/packages/arti/CHANGELOG.md) + + +- Update to version 1.2.2: + * Arti now supports Vanguards for improved security + against guard discovery for onion service circuits. + By default, we use the vanguards-lite algorithm; + the vanguards-full algorithm can be configured. + * Update to use the new identity key for the tor26 directory + authority. + * Fix an inadvertent recursion bug when converting TorAddrError + to arti_client::Error. + * Improve reliability of bootstrap status reporting. + * Convert to use figment instead of config-rs as our + configuration backend, for improved error messages. + * For a full changelog, refer to the installed package changelog + (/usr/share/doc/packages/arti/CHANGELOG.md) + ------------------------------------------------------------------- Thu Apr 4 15:40:41 UTC 2024 - Guillaume GARDET @@ -20,14 +58,14 @@ Tue Apr 02 16:00:31 UTC 2024 - Eyad Issa which are needed to improve onion service security. This is not yet complete. * Added support for unmanaged pluggable transports - * Begun work to improve Tor's relay cell protocol with support + * Begun work to improve Tor's relay cell protocol with support for packed and fragmented messages - Update to version 1.2.0 * Initial support for running onion services. * Fixed a number of bugs and security issues. * Made the onion-service-service feature non-experimental. - + For a full changelog, refer to the package changelog (/usr/share/doc/packages/arti/CHANGELOG.md) diff --git a/arti.obsinfo b/arti.obsinfo index 2f8759d..5dbb827 100644 --- a/arti.obsinfo +++ b/arti.obsinfo @@ -1,4 +1,4 @@ name: arti -version: 1.2.1~0 -mtime: 1712066536 -commit: 305f74b9bbe187ea2a48003ca93b5bde4b4d6e09 +version: 1.2.4~0 +mtime: 1717606582 +commit: 5217447873011338a5426898fcc8b96c8665babf diff --git a/arti.spec b/arti.spec index 681c187..29ace54 100644 --- a/arti.spec +++ b/arti.spec @@ -17,7 +17,7 @@ Name: arti -Version: 1.2.1~0 +Version: 1.2.4~0 Release: 0 Summary: An implementation of Tor, in Rust. License: Apache-2.0 OR MIT diff --git a/vendor.tar.zst b/vendor.tar.zst index e3fb939..f78c1b1 100644 --- a/vendor.tar.zst +++ b/vendor.tar.zst @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:fa461218f81d8ab6d781a8379286233f8627559a59b727a305fe29530b579a14 -size 57700877 +oid sha256:8cec5a70eea1c9359f0fc032efb0a1638868346062382dbc59a0aaf9abd7ae08 +size 58087078