BSD relay operators, like everyone else, should be aware that upgrading tor to 0.4.7.7 is critical for exit relays. The source is available now at:

https://dist.torproject.org/tor-0.4.7.7.tar.gz

Specifically for the BSD ports, here is the current status and workings. Any corrections appreciated.

* DragonflyBSD https://github.com/DragonFlyBSD/DPorts/tree/master/security/tor

Downstreams from FreeBSD quarterly updates, so may not have a 0.4.7.7 package or port for security/tor until July.

* FreeBSD https://www.freshports.org/security/tor https://cgit.freebsd.org/ports/tree/security/tor https://svnweb.freebsd.org/ports/head/security/tor/

Updated to 0.4.7.7 already, and can be installed from security/tor now. Working fine at this point.

For pkg(8) users, ensure that /etc/pkg/FreeBSD.conf line 11 is set to "latest", as opposed to "quarterly", which should be the case regardless of this security/tor release:

url: "pkg+http://pkg.FreeBSD.org/$%7BABI%7D/latest",

* NetBSD https://pkgsrc.se/net/tor

pkgsrc's current port of net/tor was updated to 0.4.7.7. The stable port is still on 0.4.6.10 at https://cdn.netbsd.org/pub/pkgsrc/stable/pkgsrc/net/tor/Makefile

* OpenBSD https://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net/tor/

The -current net/tor has been updated to 0.4.7.7 and the package is available.

For users running 7.1-stable, net/tor 0.4.7.7 will hopefully be officially backported. Users can also update net/tor from ports on -stable themselves easily enough. If you're not on 7.1-stable, consider upgrading immediately.

Thanks.

g