vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit 097e9379436a4808ffa41ecbfaeaa4c87e3b5d0f
Author: yangfl <yangfl@users.noreply.github.com>
Date: Fri Mar 28 11:39:38 2025 +0800
debian: update to 0.2.20
commit e70df8fb079ca2a660cdfb9f746b540a3194625c
Merge: 4abb566 dfb1345
Author: yangfl <yangfl@users.noreply.github.com>
Date: Fri Mar 28 11:37:35 2025 +0800
Merge tag 'upstream/0.2.20'
commit dfb1345a764ed2ad4fc7db48fd818b5556d72bc6
Author: yangfl <yangfl@users.noreply.github.com>
Date: Fri Mar 28 11:34:56 2025 +0800
New upstream version 0.2.20
commit 934a8301113e6c6cb2bf1fb6791135cade908c72
Author: Robin Linden <dev@robinlinden.eu>
Date: Mon Nov 11 00:54:53 2024 +0100
chore: Release 0.2.20
commit 3acef4bf0441214e232d2bd55126d6268b079f33
Author: iphydf <iphydf@users.noreply.github.com>
Date: Sat Nov 9 14:02:01 2024 +0000
fix: Add missing free in dht_get_nodes_response event.
This was added everywhere except here.
commit 55752a2e2ef894bfa6d7a2a21a0278e3f2bede7d
Author: Green Sky <green@g-s.xyz>
Date: Fri Nov 8 11:43:30 2024 +0100
fix(toxav): pass video bit rate as kbit
Previously we unintentionally made it Mbit.
commit 7e573280a7593c859d0af957d1644845cafcea03
Author: Green Sky <green@g-s.xyz>
Date: Sat Apr 27 12:09:05 2024 +0200
docs(toxav): fix docs of toxav.h
- fix units to be more readable
- use width before height consistently
- video -> audio typo
commit 5f88a084e8c67ea8d8aa733cbb57aabb5082e6d3
Author: Green Sky <green@g-s.xyz>
Date: Thu Oct 10 17:10:42 2024 +0200
fix: friend_connections leak on allocation failure
clean up when it only contains connections in the NONE state
commit 6d27a1ae178edc4c2ebb8768bb3c455a6baac467
Author: Green Sky <Green-Sky@users.noreply.github.com>
Date: Fri Nov 8 17:28:00 2024 +0100
fix: wrong comment for closelist
commit ce4f29e80367580cfec24ad2b4f72ffd69e6f6f1
Author: iphydf <iphydf@users.noreply.github.com>
Date: Fri Nov 8 17:14:48 2024 +0000
cleanup: Fix all `-Wsign-compare` warnings.
commit 4d4251c397f2738d1bfcb09304d12ee34addc75b
Author: Green Sky <green@g-s.xyz>
Date: Fri Nov 8 16:09:49 2024 +0100
chore: lower cirrus ci timeout drastically
commit 4067628450744bb17b8ada1a11ad35480a386012
Author: Green Sky <green@g-s.xyz>
Date: Wed Oct 9 12:48:41 2024 +0200
fix: events leak that can occur if allocation fails
rare in practice, found by fuzzing
commit 9610ac31c5f00f24f137478819d67e3eda832bec
Author: iphydf <iphydf@users.noreply.github.com>
Date: Fri Nov 8 11:39:55 2024 +0000
fix: Return an error instead of crashing on nullptr args in NGC.
commit a57c2c8f956fb5f577a9791802c019e391e743cb
Author: zoff99 <zoff99@users.noreply.github.com>
Date: Wed Feb 7 22:47:27 2024 +0000
refactor: Make ToxAV independent of toxcore internals.
commit 5752fc29f867e66d548ac87543534f71f8ec5a97
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Fri Feb 16 18:56:28 2024 -0500
refactor: Make tox-bootstrapd use bool instead of int
A continuation of the cleanup done in
b7404f24f63054c00c26abab4bd0b9dc58f96efb.
tox-bootrstrapd historically had used ints for boolean values, as it was
initially written in C89 which has no stdbool.h. Since then it has
modernized and moved on to using C11, but the usage of the int type to
represent boolean values, "boolean ints", remained. Recently, driven by
a desire to eliminate implicit int-to-bool conversion, @iphydf did a
cleanup in b7404f24f63054c00c26abab4bd0b9dc58f96efb, changing some of
the boolean ints to bools and doing manual int-to-bool conversion on the
remaining boolean ints. This left the codebase in an inconsistent state
of both ints and bools now being used to represent boolean values, not
to mention that the explicit int-to-bool conversions are a bit ugly. The
only boolean ints that remained are those stemming from libconfig's
config_lookup_bool() taking an *int parameter to return a boolean value,
as libconfig still uses C89. This commit adds a wrapper function around
libconfig's config_lookup_bool() that takes a *bool instead, eliminating
the remaining boolean ints and majority of the explicit int-to-bool
conversions in tox-bootstrapd.
commit df675786eb2ae5aa0c1858d1f655e0e604678e66
Author: iphydf <iphydf@users.noreply.github.com>
Date: Wed Nov 6 23:55:40 2024 +0000
chore: Add release-drafter github action.
commit 03fd7a69dcf46cb66424c3045a687d7cf13fcffc
Author: iphydf <iphydf@users.noreply.github.com>
Date: Wed Nov 6 15:50:01 2024 +0000
chore: Use toktok's cmp instead of upstream.
There are a few minor modifications in there that make it aligned with
cimple's standards.
commit 350c0ba1205469c40c6e1d3141a2cfd91b0cb389
Author: iphydf <iphydf@users.noreply.github.com>
Date: Wed Nov 6 15:43:33 2024 +0000
cleanup: Sort apk/apt install commands in Dockerfiles.
CodeQL scanning is complaining about this.
commit 8c1bda502cb7cb25dd923523a6ccf4efe9acb177
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed Nov 6 15:06:20 2024 +0000
chore(deps): bump golang.org/x/net
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.23.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
commit ddb9d3210da40645097b1446160ce7303c649755
Author: iphydf <iphydf@users.noreply.github.com>
Date: Wed Nov 6 13:23:01 2024 +0000
chore: Upgrade to FreeBSD 14.1 in cirrus build.
14.0 is EOL.
commit e9076f45bd3385e44b32d1e75ee6e3d8afd00c1f
Author: Green Sky <green@g-s.xyz>
Date: Tue Jul 16 11:26:31 2024 +0200
chore(cmake): set options changes as cache and with force
Without this, changes will not propergate to a parent if
toxcore is used as a subdirectory.
commit 03e9fbf3703e430d21138c4f69e9ac7dbefb7564
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Fri May 10 01:07:43 2024 -0400
fix: Use Opus in the CBR mode
VBR is susceptible to a transcription attack, where words can be
deducted from bandwidth fluctuations, even despite the audio being
encrypted. Toxcore does add padding, but it's just 0-7 bytes, to pad to
a 8 byte boundary, which might not be enough. CBR is safe from this
attack, it is the industry recommendation to use CBR: "Applications
conveying highly sensitive unstructured information SHOULD NOT use
codecs in VBR mode."[1], and is what other secure messengers use too,
e.g. Signal.
Here are some papers on this topic:
- A. M. White, A. R. Matthews, K. Z. Snow and F. Monrose, "Phonotactic
Reconstruction of Encrypted VoIP Conversations: Hookt on Fon-iks,"
2011 IEEE Symposium on Security and Privacy, Oakland, CA, USA, 2011,
pp. 3-18, doi: 10.1109/SP.2011.34.
- L. A. Khan, M. S. Baig, and Amr M. Youssef. Speaker recognition
from encrypted VoIP communications. Digit. Investig. 7, 1–2 (October,
2010), 65–73. https://doi.org/10.1016/j.diin.2009.10.001
- C. V. Wright, L. Ballard, S. E. Coull, F. Monrose and G. M. Masson,
"Spot Me if You Can: Uncovering Spoken Phrases in Encrypted VoIP
Conversations," 2008 IEEE Symposium on Security and Privacy (sp 2008),
Oakland, CA, USA, 2008, pp. 35-49, doi: 10.1109/SP.2008.21.
Thanks to an IRC user who asked to remain anonymous for sending the
diff.
[1] https://datatracker.ietf.org/doc/html/rfc6562#section-3
commit 671b1f92332a8314dccf76d5df93c0b6c1230636
Author: Green Sky <green@g-s.xyz>
Date: Tue Sep 17 15:46:33 2024 +0200
fix: toxav rtp temp buffer allocation size was too large
and cast from 32bit to 16bit, causing a overflow and making the
allocated size too small
commit 258148bd4e115801d169f0d1a4398db500b75342
Author: Green Sky <green@g-s.xyz>
Date: Tue Sep 17 16:15:22 2024 +0200
chore(ci): new minimum for all android versions is 21
commit d369c93c48905eb7481cc01ade16662097e36987
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Sat Jul 13 09:50:47 2024 -0400
chore: Fix Emscripten build failing with no host specified
commit 51b24d1c23996867eecfd5db6b29911a07608cfd
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Sat Jul 13 09:05:18 2024 -0400
chore: Run CompCert on the stable branch of libsodium
The master branch might include staging code that is subject to change,
e.g. code including VLAs, which CompCert does not support and thus would
fail on, which will be changed to not use VLAs once merged into the
stable branch.
See https://github.com/jedisct1/libsodium/pull/1188#issuecomment-2221660989
commit cab1f7d522b07fcf5499cc543b220c5d9458b648
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Sat Jul 13 09:00:26 2024 -0400
chore: Update WineHQ's apt key hash
commit 102a1fa9b82a32274ab86583f3716139ba92295c
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Sat Apr 27 12:15:40 2024 -0400
chore: Fix -Werror=maybe-uninitialized in a test
commit cc9515da9c776f10132c82574e0c2c2448e896fb
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Sat Apr 27 10:54:44 2024 -0400
chore: Fix cpplint failing to install
commit 3485b5feef36525012af1eb1faaf76a8f826ff04
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Sat Apr 27 10:37:37 2024 -0400
chore: Disable -Wswitch-default and -Wunsafe-buffer-usage
commit 719041e04b6abc54c003eef5e4858d729eb32284
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Sat Apr 27 09:19:08 2024 -0400
chore: Fix Circle CI failing on a missing clang lib
The ubsan build fails due to the missing
/usr/lib/llvm-18/lib/clang/18/lib/linux/libclang_rt.ubsan_standalone-x86_64.a
which is provided by the libclang-rt-18-dev package, which would be
installed if we didn't disallow recommends.
Installing it manually is not practical, as using libclang-rt-18-dev
once clang updates to version 19 would be wrong, and installing
libclang-rt-*-dev would attempt to install all of them, either failing
or installing all of the clang version available along with them. Thus
allowing apt to automatically install recommended packages seems like
best solution.
commit 5344d7f84d060311f2147b343cdd3fd4c433d7dd
Author: Maxim Biro <nurupo.contributions@gmail.com>
Date: Wed Apr 3 23:20:12 2024 -0400
fix: Memory leak in the bootstrap daemon
commit fa201681e188ef28b8397f6b20dbf8ceb998e962
Author: jfreegman <jfreegman@gmail.com>
Date: Wed Feb 28 09:40:50 2024 -0500
cleanup: Remove useless if clause
commit 7572888a218964e8deb6602b096c99a0f9040dc2
Author: Robin Linden <dev@robinlinden.eu>
Date: Tue Mar 26 20:47:05 2024 +0100
chore: Fix GitHub actions deprecation warnings
actions/github-script@v6 is a Node.js 16 action, and Node.js 16 actions
have been deprecated.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/libt/libtoxcore.png){kind=link}