ubuntu/+source/tor:ubuntu/zesty-devel

Last commit made on 2017-08-24
Get this branch:
git clone -b ubuntu/zesty-devel https://git.launchpad.net/ubuntu/+source/tor
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/zesty-devel
Repository:
lp:ubuntu/+source/tor

Recent commits

7b49f67... by Simon D├ęziel on 2017-08-15

Import patches-unapplied version 0.2.9.11-1ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 9797bd0806ef63033e3c5e4c6265b8614956bd0b

New changelog entries:
  * Backport from Debian Stretch to Zesty. Ubuntu Delta: (LP: #1710753)
    - Limit the seccomp build-dependency to [amd64 i386 armhf].
    - Drop build-conflicts.
    - Update debian/micro-revision.i to match 0.2.9.11 commit ID.
    - Use DAC_READ_SEARCH instead of DAC_OVERRIDE for Apparmor and
      systemd units. Cherry picked from 0.3.0.10-1 and 0.3.0.4-rc-1.

9797bd0... by Peter Palfrader on 2017-06-09

Import patches-unapplied version 0.2.9.11-1~deb9u1 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: bff8a1ffaf47b29dcb0489c735c0bcd5fab74b03

New changelog entries:
  * Get fix for CVE-2017-0376 into stretch via -security.

bff8a1f... by Peter Palfrader on 2017-06-08

Import patches-unapplied version 0.2.9.11-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 5a81d26d7a9a41a4a7e6e883d929de895ba6e4ca

New changelog entries:
  * New upstream version.
    - Fix a remotely triggerable assertion failure caused by receiving a
      BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug
      22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix
      on 0.2.2.1-alpha. (closes: #864424)

5a81d26... by Peter Palfrader on 2017-03-04

Import patches-unapplied version 0.2.9.10-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 3fb7cc9954bf5cdcb3579a4d9935bc53913d53e1

New changelog entries:
  * New upstream version.
    - Stop rejecting all IPv6 traffic on Exits whose exit policy rejects
      any IPv6 addresses.
    - Fix an integer underflow bug when comparing malformed Tor
      versions. Underlying issue of TROVE-2017-001, mitigated in the
      previous release.

3fb7cc9... by Peter Palfrader on 2017-01-23

Import patches-unapplied version 0.2.9.9-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 4f47074d5456340f609f39fb8202b6c35fad02a7

New changelog entries:
  * New upstream version.
    + Downgrade the "-ftrapv" option from "always on" to "only on when
      --enable-expensive-hardening is provided." (re: TROVE-2017-001).

4f47074... by Peter Palfrader on 2016-12-19

Import patches-unapplied version 0.2.9.8-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 06d94e93ea83eea4ba6b599b72892655ee0b2d81

New changelog entries:
  * Actually target unstable.
  * New upstream version, upload 0.2.9.x tree to unstable.
  * Add a comment to tor@.service explaining why we cannot limit to
    /var/lib/tor-instances/<instance> but only to /var/lib/tor-instances --
    systemd does not do instance expansion in ReadWriteDirectories lines --
    cf. #781730.
  * Update README.Debian to mention a good location to put onion service
    UNIX sockets. Note that neither systemd nor apparmor limits access
    to them -- cf. #846275.
  * Use -Z (Apply SE-Linux labels) to install when creating instance datadirs
    in tor-instance-create.

06d94e9... by Peter Palfrader on 2016-12-12

Import patches-unapplied version 0.2.9.7-rc-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 71510ba8cb75d42b1d090324e0d25f7b8df76c79

New changelog entries:
  * New upstream version.
  * Remove CAP_CHOWN, CAP_FOWNER from the systemd service files'
    CapabilityBoundingSet. We may no longer need them. The upstream
    changelog says that Tor changed some logic with 0.2.8.1-alpha that made
    CAP_CHOWN CAP_FOWNER no longer needed.
    CAP_DAC_OVERRIDE is still needed: Tor checks properties of hidden service
    directories as root before changing its UID to debian-tor, and those trees
    are owned by debian-tor and go-rwx (see #847598).

71510ba... by Peter Palfrader on 2016-12-02

Import patches-unapplied version 0.2.9.6-rc-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 13bae02171bba7d5c6a88b8878b425b889dfb349

New changelog entries:
  * New upstream version.

13bae02... by Peter Palfrader on 2016-11-08

Import patches-unapplied version 0.2.9.5-alpha-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 95a4b9b23f6c7e3ed5851dd2077fb79adcb497e8

New changelog entries:
  * New upstream version.
  * Raise Standards-Version to 3.9.8 - no changes needed.
  * Use command -v $foo instead of [ -x /sbin/$foo ] in maintainer script.

95a4b9b... by Peter Palfrader on 2016-10-17

Import patches-unapplied version 0.2.9.4-alpha-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 727ffa59f7f6d90008a5822acd4517e725245b0b

New changelog entries:
  * New upstream version.