• https://www.torproject.org/dist/ (Download)

• (2021-03-24) Updated to version: tor-0.4.5.7
• (2021-03-03) Updated to version: tor-0.4.5.6
• (2020-11-26) Updated to version: tor-0.4.4.6
• (2020-07-20) Updated to version: tor-0.4.3.6
• (2020-05-28) Updated to version: tor-0.4.3.5
• (2020-03-19) Updated to version: tor-0.4.2.7
• (2019-12-28) Updated to version: tor-0.4.2.5
• (2019-09-23) Updated to version: tor-0.4.1.6
• (2019-05-15) Updated to version: tor-0.4.0.5
• (2019-02-23) Updated to version: tor-0.3.5.8

Log message:
Update to tor 0.4.5.7, fixes two DoS bugs (TROVE-2021-001 and TROVE-2021-002).

Log message:
Update to new tor release 0.4.5.6.
Changelog:
https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html

Log message:
update patch, no functional change

Log message:
Update to tor-0.4.4.6
update from Martin Ziemer <horrad at horrad dot de>
maintainer timeout

Log message:
Update to Tor 0.4.3.6.
Minor bugfixes, and a DoS which does NOT affect us.

Log message:
Update to tor 0.4.3.5 (new stable release series).  Release notes:
https://lists.torproject.org/pipermail/tor-announce/2020-May/000199.html
reminded by "clematis", ok solene.

Log message:
Update to tor 0.4.1.9.  This fixes CVE-2020-10592 and CVE-2020-10593.
Same diff from Tom Kuijsten, thanks!

Log message:
SECURITY update to tor 0.4.2.7.
Fixes CVE-2020-10592 and CVE-2020-10593.
See https://lists.torproject.org/pipermail/tor-announce/2020-March/000196.html
for details.

Log message:
Update to tor 0.4.2.5.
Reminded and diff by benno@

Log message:
Update to tor 0.4.1.6.

Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes

Log message:
Update to new major release Tor 0.4.0.5.  For a full changelog, see:
https://lists.torproject.org/pipermail/tor-announce/2019-May/000178.html

Log message:
SECURITY update to 0.3.4.11.
Tested and ok stsp@

Log message:
Update to tor 0.3.5.8.  Fixes security issue TROVE-2019-001 (remote DoS).
Complete announcement:
https://lists.torproject.org/pipermail/tor-announce/2019-February/000174.html

Log message:
Update to tor 0.3.5.7.

Log message:
Bugfix update to tor-0.3.4.9
From upstream changelog:
Tor 0.3.4.9 is the second stable release in its series; it backports
numerous fixes, including a fix for a bandwidth management bug that was
causing memory exhaustion on relays. Anyone running an earlier version
of Tor 0.3.4.9 should upgrade.
Diff & prodding from George Rosamond, ok pascal@ (maintainer)

Log message:
Update to tor 0.3.4.9.

Log message:
Update to tor 0.3.4.8.
For a full list of changes since 0.3.3.x, see:
https://lists.torproject.org/pipermail/tor-announce/2018-September/000164.html

Log message:
Update to tor 0.3.2.11. New bridge authority.
OK pascal@ (MAINTAINER).

Log message:
Update to tor 0.3.3.9.  Same diff from juanfra@.

Log message:
Backout, my tree wasn't as fresh as it should.
pointed out by sthen@ and aja@

Log message:
Put @rcscript back to its place, restoring correct install prefix.
okay pascal@ (MAINTAINER)

Log message:
Update to tor 0.3.3.8.  Prevent picking up archivers/zstd.

Log message:
Install doc/TUNING
Some error messages point to this file containing useful bits system
resource limits such as `kern.maxfiles' (sysctl.conf) and `openfiles'
(login.conf).
OK jca pascal (maintainer)

Log message:
Update to tor 0.3.3.7.

Log message:
Update to tor 0.3.3.6.

Log message:
Remove use of the -fasynchronous-unwind-tables compiler option from net/tor.
Upstream added it for backtrace support but this does not (yet?) work here.
Fixes the build on armv7. Package bump for good measure.
ok sthen@ jca@ phessler@

Log message:
sync hunk offsets in patch with tor release tarball

Log message:
Unbreak tor after my clumsy retroshare removal commit.

Log message:
Remove net/retroshare
Heavily outdated, broken with new clang (again) and noone seems to care.
OK stsp, landry

Log message:
Update -stable tor to 0.3.2.10, as there are no more security updates for
the 0.3.0.x series.
This update fixes TROVE-2018-001 through 004.
ok kn@

Log message:
Update to tor 0.3.2.10; fixes TROVE-2018-001 through 004.

Log message:
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d
daemon scripts and bump subpackages that contain the *.rc scripts.
discussed with and OK aja@
OK tb

Log message:
Update to new Tor release 0.3.2.9.  Complete list of changes can be found
here: https://gitweb.torproject.org/tor.git/tree/ReleaseNotes?h=tor-0.3.2.9&id=9e8b762fcecfece64aae70ae640aaa59fd227ca5

Log message:
Update to tor-0.3.0.13
This provides fixes for:
TROVE-2017-009: Replay-cache ineffective for v2 onion services
TROVE-2017-010: Remote DoS attack against directory authorities
TROVE-2017-011: An attacker can make Tor ask for a password
TROVE-2017-012: Relays can pick themselves in a circuit path
TROVE-2017-013: Use-after-free in onion service v2

Log message:
Backport net/tor 0.3.0.10 update.
Includes quite a few bug fixes, including an OpenBSD specific DoS.
OK robert@

Log message:
Update to tor 0.3.0.10, fixes TROVE-2017-007.
same diff from pirofti@

Log message:
SECURITY update to 0.3.0.9.  Fixes CVE-2017-0377.

Log message:
SECURITY update to tor 0.2.9.11; fixes CVE-2017-0375 and CVE-2017-0376.
ok danj@

Log message:
SECURITY update to tor 0.3.0.8.  Fixes CVE-2017-0375 and CVE-2017-0376.

Log message:
Update to tor 0.3.0.7.  SECURITY fix for TROVE-2017-002 (relays only).

Log message:
Update to 0.3.0.6.  For a detailed list of changes, see:
https://blog.torproject.org/blog/tor-0306-released-new-series-stable

Log message:
forgot to remove this patch

Log message:
Update to tor 0.2.9.10.

Log message:
Disable tests that attempt to construct their own SSL data structures. This
requires all structs to be fully visible and completely understood by the
application, which is no longer the case with LibreSSL.
ok naddy@ pascal@

Log message:
Update to tor 0.2.9.9.  Fixes a denial of service (TROVE-2017-001).

Log message:
Update to tor 0.2.9.8.  Also fixes CVE-2016-1254.

Log message:
Update to tor 0.2.8.11; just compilation fixes that do not concern us.

Log message:
Update to tor 0.2.8.10.

Log message:
SECURITY fix for CVE-2016-8860.
ok danj@ robert@

Log message:
SECURITY update to 0.2.8.9.

Log message:
Update to tor 0.2.8.8.

Log message:
Update to tor 0.2.8.7.

Log message:
Update to 0.2.8.6.

Log message:
Adjust commented-out HiddenServiceDir directives in sample torrc.
from Michael McConville

Log message:
Update my mail address.

Log message:
Fix build on sparc64 (and probably other !amd64 64bit platforms too).

Log message:
Bugfix update to 0.2.7.6, from Vigdis.

Log message:
Update to tor 0.2.7.5.  Switch to libevent2 by default, as recommended by
upstream.
Based on diffs from Daniel Jakots.

Log message:
Tweak pkill invocation.

Log message:
No need to override the default pexp after recent rc.subr(8) change.

Log message:
Bugfix update to tor 0.2.6.10.

Log message:
In some situations, it is desirable to start multiple tor instances on the
same machine.  While this is of course done outside the rc.subr(8) framework,
the package's rc.d(8) script should not interfere with these instances.
Require exact pexp matches in order to achieve this.  Patch by "nusenu",
developer of ansible-relayor, tested by me in various situations.

Log message:
update to tor 0.2.6.9.

Log message:
Update to tor 0.2.6.8, reminded by David Hill.

Log message:
update to tor-0.2.5.12
https://blog.torproject.org/blog/tor-02512-and-0267-are-released
ok pascal@ (MAINTAINER)

Log message:
- update to tor-0.2.4.27
https://blog.torproject.org/blog/tor-02512-and-0267-are-released
ok pascal@ (MAINTAINER)

Log message:
SECURITY update to tor 0.2.6.7, fixes CVE-2015-2928 and CVE-2015-2929.

Log message:
Use SIGINT instead of SIGTERM to terminate the tor process in rc_stop().
For clients, this means no change.
For relays, this instructs tor to do a clean shutdown, leaving 30s for other
peers to find another route.  Increase daemon_timeout to one minute to give
tor a bit more time on slow machines (like my BBB).
Hint from Michael McConvill, "go ahead" ajacoutot@

Log message:
Update to next major release 0.2.6.6.
Changes in version 0.2.6.6 - 2015-03-24
Tor 0.2.6.6 is the first stable release in the 0.2.6 series.
It adds numerous safety, security, correctness, and performance
improvements. Client programs can be configured to use more kinds of
sockets, AutomapHosts works better, the multithreading backend is
improved, cell transmission is refactored, test coverage is much
higher, more denial-of-service attacks are handled, guard selection is
improved to handle long-term guards better, pluggable transports
should work a bit better, and some annoying hidden service performance
bugs should be addressed.

Log message:
- update to tor-0.2.5.11 which contains several bugfixes from the 0.2.6 branch,
including a couple of medium-level security fixes for relays and exit nodes.
It also updates the list of directory authorities.
ok pascal@ (MAINTAINER) who had the same diff

Log message:
- update to tor-0.2.4.26, which includes an updated list of directory
authorities. It also backports a couple of stability and security bugfixes
from 0.2.5 and beyond.
ok pascal@ (MAINTAINER) who had the same diff

Log message:
Fix crash on startup on sparc64, patch from upstream.

Log message:
update to tor 0.2.5.11

Log message:
Update to tor 0.2.5.10.

Log message:
bump for pfioc_natlook changes

Log message:
Bugfix update to tor-0.2.1.30.
* amongst other things, add a tweak to Tor's TLS handshake that makes
relays and bridges that run this new version reachable from Iran.
Add an rc script.
from Pascal Stumpf.
MAINTAINER timeout.

Log message:
SECURITY update of tor 0.2.1.29
Fixes a heap overflow vulnerability.
More information: http://archives.seul.org/or/announce/Jan-2011/msg00000.html
from robert AT @openbsd.pap.st

Log message:
SECURITY update of tor 0.2.1.29
Fixes a heap overflow vulnerability.
More information: http://archives.seul.org/or/announce/Jan-2011/msg00000.html
from robert AT @openbsd.pap.st

Log message:
SECURITY update of tor to 0.2.1.28 : CVE-2010-1676

Log message:
- update tor to 0.2.1.28
- maintainer timeout
SECURITY update of tor to 0.2.1.28 : CVE-2010-1676

Log message:
- update tor to 0.2.1.27
- maintainer timeout

Log message:
USE_GROFF=Yes

Log message:
- update tor to 0.2.1.26
ok rui@

Log message:
- update tor to 0.2.1.25
- update patches
ok rui@

Log message:
Update tor to 0.2.1.22; from robert at openbsd dot pap dot st, thanks!
"Some of their directories were compromised and they changed keys:
http://archives.seul.org/or/talk/Jan-2010/msg00161.html"
ok ajacoutot@ jasper@ espie@

Log message:
- update tor to 0.2.1.21
ok rui@

Log message:
- update tor to 0.2.1.20
- add patches using the new SSL/TLS renegotiation.
ok rui@, ajacoutot@

Log message:
- update tor to 0.2.1.19
- update patch
ok rui@, ajacoutot@

Log message:
SECURITY UPDATE of tor to 0.2.0.35
for the full announcement, see: http://archives.seul.org/or/announce/Jun-2009/msg00000.html
ok rui@ (MAINTAINER), naddy@

Log message:
Security: update tor to 0.2.0.34 which fixes Multiple Vulnerabilities.
Reference: http://secunia.com/advisories/33880/
ok merdely@

Log message:
Security: update tor to 0.2.0.33 which fixes an important security-related bug.
Reference: http://secunia.com/Advisories/33635
I got almost the same diff from merdely@ and robert at openbsd dot pap dot st
ok merdely@

Log message:
SECURITY: update tor to 0.2.0.32 which fixes a major security problem
Reference: http://secunia.com/advisories/33025/
ok jasper@

Log message:
- update tor to 0.2.0.31.
- addresses two potential anonymity issues.
- starts to fix a bug where in rare cases traffic from one Tor stream gets mixed into another stream.
- fixes a variety of smaller issues.
ok fgsch@

Log message:
- maintenance update to 0.1.2.19.
- update my email address while there.

Log message:
tweak FAKE_FLAGS semantics to saner defaults.

Log message:
update tor to 0.1.2.18. Changelog:
http://archives.seul.org/or/announce/Oct-2007/msg00000.html
ok merdely@

Log message:
update tor to 0.1.2.17, lots of bugfixes. Check the Changelog for more information.
ok jcs@

Log message:
MFC (original commit rui@):
- security update to version 0.1.2.16

Log message:
MFC (original commit rui@):
- security update to version 0.1.2.16
ok sturm@

Log message:
SECURITY: update tor to 0.1.2.16 and fix a Security Bypass.
ok pvalchev@

Log message:
update tor to 0.1.2.15
- fixes several crash bugs
- fixes some anonymity-related problems
- fixes compilation on BSD
- fixes a variety of other bugs
ok jcs@

Log message:
update tor to 0.1.2.14
ok jcs@

Log message:
update to tor 0.1.2.13, regen patches while here
ok robert@

Log message:
base64 checksums.

Log message:
update to tor-0.1.1.26; from maintainer

Log message:
update to tor 0.1.1.25
from rui reis

Log message:
tor-0.1.1.24; from maintainer Rui Reis

Log message:
update to tor-0.1.1.23, from maintainer

Log message:
Create data directory for tor.  Also daemonize and log to syslog by
default.
OK maintainer Rui Reis <rui at rui dot cx>

Log message:
update to tor-0.1.1.22, from maintainer
make default config drop privs to _tor user and group

Log message:
MFC:
SECURITY update to tor 0.1.1.20
fixes CVE-2006-0414
for details, see http://secunia.com/advisories/18576/

Log message:
MFC:
SECURITY update to tor 0.1.1.20
fixes CVE-2006-0414
for details, see http://secunia.com/advisories/18576/

Log message:
SECURITY update to tor 0.1.1.20
fixes CVE-2006-0414
for details, see http://secunia.com/advisories/18576/

Log message:
update to tor 0.1.0.17
from new maintainer Rui Reis (rui at rui dot cx)

Log message:
bugfix update to tor-0.1.0.16
from maintainer Jon Trembley <jon at brain-box.net>

Log message:
now that we have a dynamic libevent, it needs to go into WANTLIB

Log message:
Update to 0.1.0.15
>From Jon Trembley <jon@brain-box.net> (MAINTAINER)

Log message:
bump PKGNAME so that 3.7 won't have higher PKGNAMEs than 3.8
suggested by espie@, ok pval@

Log message:
updated packages for these ports where not build in a sane environment
bump PKGNAME for fixed packages

Log message:
SECURITY: update tor-0.1.0.14
http://www.vuxml.org/openbsd/e5d8e2be-0825-11da-a6c1-00065bd5b0b6.html
this one actually fixes the previous security vulnerability.
ok brad@

Log message:
SECURITY: update tor-0.1.0.14
http://www.vuxml.org/openbsd/e5d8e2be-0825-11da-a6c1-00065bd5b0b6.html
this one actually fixes the previous security vulnerability.

Log message:
SECURITY update to 0.1.0.13
http://www.vuxml.org/openbsd/e5d8e2be-0825-11da-a6c1-00065bd5b0b6.html
ok brad@

Log message:
SECURITY update to 0.1.0.13
- http://archives.seul.org/or/announce/Aug-2005/msg00000.html
>From Jon Trembley <jon@brain-box.net> (MAINTAINER)

Log message:
Update to 0.1.0.12
>From Jon Trembley <jon@brain-box.net> (MAINTAINER)

Log message:
Update to 0.1.0.11 (bugfix release)
>From Jon Trembley <jon@brain-box.net> (MAINTAINER)

Log message:
SECURITY: update to 0.1.0.10
http://www.vuxml.org/openbsd/10085106-e2a5-11d9-824c-00065bd5b0b6.html
ok brad@

Log message:
SECURITY: update to 0.1.0.10
http://www.vuxml.org/openbsd/10085106-e2a5-11d9-824c-00065bd5b0b6.html
fix the MASTER_SITE and the HOMEPAGE and add pthread to WANTLIB
from MAINTAINER

Log message:
Update to 0.0.9.9
>From Jon Trembley <jon@brain-box.net> (new MAINTAINER)

Log message:
Update to 0.0.9.8
>From Jon Trembley <jon@brain-box.net>

Log message:
Update to 0.0.9.7:
- http://archives.seul.org/or/announce/Apr-2005/msg00000.html
- http://archives.seul.org/or/announce/Mar-2005/msg00000.html
>From Jon Trembley <jon@brain-box.net>

Log message:
maintenance update to 0.0.9.5; prodding from Christian David

Log message:
update to 0.0.9.3; based on submission from Jon Trembley <jon@brain-box.net>

Log message:
SIZE

Log message:
update to tor 0.0.9.1
mostly from Jon Trembley <jon at brain-box.net>

Log message:
Add WANTLIB markers

Log message:
update to tor 0.0.8.1
from Jon Trembley <jon at brain-box.net>