BSD Ports

net/tor 0.4.9.12 NetBSD

Anonymizing overlay network for TCP

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
61a1b13af2
License
modified-bsd
Categories
net, security
Package size
3562.4 KiB, 30322.7 KiB installed

Description

The simple version: Tor provides a distributed network of servers ("onion routers"). Users bounce their TCP streams (web traffic, FTP, SSH, etc.) around the routers. This makes it hard for recipients, observers, and even the onion routers themselves to track the source of the stream.

The complex version: Onion Routing is a connection-oriented anonymizing communication service. Users choose a source-routed path through a set of nodes, and negotiate a "virtual circuit" through the network, in which each node knows its predecessor and successor, but no others. Traffic flowing down the circuit is unwrapped by a symmetric key at each node, which reveals the downstream node.

In the other systems

SystemPortVersion
NetBSDnet/tor0.4.9.12
FreeBSDsecurity/tor0.4.9.14
OpenBSDnet/tor0.4.9.14
DragonFlysecurity/tor0.4.8.16
MidnightBSDsecurity/tor0.4.9.13

Install

Binary package:

pkgin install tor

From pkgsrc:

cd /usr/pkgsrc/net/tor && make install clean

Dependencies

Run dependencies 2

No port depends on this one.

Commit history 3

DateCommitCreditsLog message
61a1b13af2 wiz tor: update to 0.4.9.14.
Changes in version 0.4.9.14 - 2026-10-07 Another week, another security release. This again contains major bugfixes related to high severity issues. The fixes affect all Tor components: relay, client, onion service and authority. We strongly recommend upgrading as soon as possible. o Major bugfixes (conflux, relay, security): - Only accept a CONFLUX_LINK cell on a plain OR circuit, and refuse to turn a (pending) conflux leg into an introduction or rendezvous point. Previously a client could link a rendezvous-point circuit into a conflux set and then, with a forged sequence number in the LINK cell, make the relay tear the set down from inside the rendezvous splice, triggering a fatal assertion in …
2a13debc6a wiz tor: update to 0.4.9.13.
Changes in version 0.4.9.13 - 2026-09-23 This security release includes several high severity fixes, once again originating from the LLM report firehose. The fixes affect all Tor components: relays, clients, and onion services. We strongly recommend upgrading as soon as possible. o Major bugfixes (security): - Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. Fixes bug 41381; bugfix on 0.1.0.1-rc. Tracked as TROVE-2026-051. - Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response addresses incorrectly, and defaulted to caching when the address …
4a9d98750c adam tor: updated to 0.4.9.12
Changes in version 0.4.9.12 - 2026-09-08 Another security release containing several high security fixes reported by the exciting and controversial world of LLMs. One important note is that new protocol versions are recommended for clients and relays (41316). Furthermore, authorities will NOT accept relay descriptor containing TAP keys anymore hence the importance for all relays to upgrade to the latest 0.4.9.x stable version. We very strongly recommend upgrading as soon as possible. o Major bugfixes (security): - Do not purge memory for OOM from within low-level code. Previously, we would handle OOM conditions from within append_cell_to_circuit_queue, which could appear at various places within our call stack, and lead to objects being freed at …