mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v2.5.0 2026-06-30T13:42:13Z 2026-06-30T13:42:13Z Nick Mathewson nickm@torproject.org 2026-06-30T13:42:13Z urn:sha1:245b03f5a48b4e58f8c84f072920160fc87be500 Closes #2617. We've lucked out this time, and it turns out that every one of our published crates gets a minor bump. So this was generated with: ``` for cr in $(./maint/list-crates); do cargo set-version -p $cr --bump minor done ``` 2026-06-29T15:11:24Z Steven Engler opara@torproject.org 2026-06-29T15:10:52Z urn:sha1:91932c2a3409ff0c2267160a7fb64790d11127c7 This resolves unsoundness in anyhow (RUSTSEC-2026-0190). https://rustsec.org/advisories/RUSTSEC-2026-0190.html > Affected versions of this crate violate borrow rules, resulting in > undefined behavior, when the user adds context to an error via > `Error::context` and then later calls `Error::downcast_mut` on the > returned `Error`. I don't see us calling `downcast_mut()` on any errors. It's possible something outside of the arti code base is calling it, but I think it's unlikely. 2026-06-24T08:59:53Z Clara Engler cve@cve.cx 2026-06-17T12:57:56Z urn:sha1:49442709a1ba610af36295d3ccfa2f8c21de8f8d We will make use of it in the next commit. 2026-06-23T13:49:26Z Ian Jackson iwj@torproject.org 2026-06-23T13:49:26Z urn:sha1:6c5922c4800fd8d7a4ea327582fe6310b86a736b tor-netdoc: addr policy: Overhaul and fix /0 bug Closes #2589 See merge request tpo/core/arti!4128 2026-06-23T09:47:56Z Clara Engler cve@cve.cx 2026-06-23T09:47:56Z urn:sha1:855c299e7f499bc628102f628455f8b50e5c05dd This commit upgrades memmap2 to 0.9.11 in order to fix an unchecked pointer offset in the memmap2 crate. We are not directly affected by this, as `tor-dirmgr`, the only crate making use of this dependency, does not call the affected functions listed on rustsec.org. 2026-06-22T14:53:27Z Ian Jackson iwj@torproject.org 2026-06-22T14:53:27Z urn:sha1:215812f536dcd63989e85b33c55f3a19244af289 Create dirauth crates (empty) See merge request tpo/core/arti!4122 2026-06-22T14:27:48Z Ian Jackson ijackson@chiark.greenend.org.uk 2026-06-16T17:20:55Z urn:sha1:c3efaa7115addf3f34e6a9543eeab32a3ca440f4 2026-06-22T14:23:21Z Ian Jackson ijackson@chiark.greenend.org.uk 2026-06-17T11:23:42Z urn:sha1:627c7ae0defaf42b9f487df26e96fa372f4fc39b Let's start this now. 2026-06-22T14:23:21Z Ian Jackson ijackson@chiark.greenend.org.uk 2026-06-17T11:17:31Z urn:sha1:b5b16fba7eba1d42906dfbe75baf5202fe8f13fa 2026-06-18T12:06:18Z Ian Jackson ijackson@chiark.greenend.org.uk 2026-06-18T10:08:49Z urn:sha1:86ea79faa746b73f8b55f040e20d794e5dd61e86 ipnet is a very widely used crate which is already in our dependency stack.