Eyad Issa
a8c6c8aa52
- Added LICENSE-APACHE and LICENSE-MIT to %files
- Added README.md and CHANGELOG.md to %files
- Update to version 1.2.1:
* Reorganize onion service code.
* Design work for out-of-memory handling, which is necessary for
onion service security.
* Initial implementation work for onion service [vanguards],
which are needed to improve onion service security.
This is not yet complete.
* Added support for unmanaged pluggable transports
* Begun work to improve Tor's relay cell protocol with support
for packed and fragmented messages
- Update to version 1.2.0
* Initial support for running onion services.
* Fixed a number of bugs and security issues.
* Made the onion-service-service feature non-experimental.
For a full changelog, refer to the package changelog
(/usr/share/doc/packages/arti/CHANGELOG.md)
OBS-URL: https://build.opensuse.org/request/show/1164178
OBS-URL: https://build.opensuse.org/package/show/network/arti?expand=0&rev=14
59 lines
2.2 KiB
Plaintext
59 lines
2.2 KiB
Plaintext
<services>
|
|
<service name="obs_scm" mode="manual">
|
|
<param name="url">https://gitlab.torproject.org/tpo/core/arti.git</param>
|
|
<param name="versionformat">@PARENT_TAG@~@TAG_OFFSET@</param>
|
|
<param name="scm">git</param>
|
|
<param name="revision">arti-1.2.1</param>
|
|
<param name="match-tag">*</param>
|
|
<param name="versionrewrite-pattern">arti-(\d+\.\d+\.\d+)</param>
|
|
<param name="versionrewrite-replacement">\1</param>
|
|
<param name="changesgenerate">enable</param>
|
|
</service>
|
|
|
|
<service name="set_version" mode="manual" />
|
|
<service name="cargo_vendor" mode="manual">
|
|
<param name="srcdir">arti</param>
|
|
<param name="compression">zst</param>
|
|
<param name="update">true</param>
|
|
|
|
<!--
|
|
From https://gitlab.torproject.org/tpo/core/arti/-/blob/2db5ccf16d2f977c073ba3f142513b920fb7b6a1/maint/cargo_audit
|
|
-->
|
|
|
|
<!--
|
|
This is a real but theoretical unaligned read. It might happen only on
|
|
Windows and only with a custom global allocator, which we don't do in our
|
|
arti binary. The bad crate is depended on by env-logger and clap.
|
|
This is being discussed by those crates' contributors here:
|
|
https://github.com/clap-rs/clap/pull/4249
|
|
https://github.com/rust-cli/env_logger/pull/246
|
|
-->
|
|
<param name="i-accept-the-risk">RUSTSEC-2021-0145</param>
|
|
|
|
<!--
|
|
As of 28 Nov 2023, all versions of the rsa crate have a variable
|
|
timing attack that can leak private keys.
|
|
|
|
We do not use (yet) do any private-key rsa operations in arti:
|
|
we only use it to verify signatures.
|
|
-->
|
|
<param name="i-accept-the-risk">RUSTSEC-2023-0071</param>
|
|
|
|
|
|
<!--
|
|
This is not a vulnerability but an unmaintained warning for
|
|
`generational-arena`. It is only used by arti-rpcserver (which is
|
|
experimental).
|
|
-->
|
|
<param name="i-accept-the-risk">RUSTSEC-2024-0014</param>
|
|
|
|
</service>
|
|
|
|
<service name="cargo_audit" mode="manual">
|
|
<param name="srcdir">arti</param>
|
|
</service>
|
|
|
|
|
|
<service name="tar" mode="buildtime" />
|
|
</services>
|