Deltadroid

In tor's source code, lib_compress.md states that zlib is mandatory while zstd and lzma are only optional.

From the changelogs, all of these version updates are only for bugfixes and do not include any ABI changes.

I have been testing these updated library versions on the arm64 variant for several months without any issues. The only thing I have not been able to test are hidden...

Also, we should update tor to 0.4.6.8. Worth noting for tor 0.4.6.8 is a fix on how we use DNS timeout to report general overload. I did not include tor...

There are always 12 additional patches applied to the tor submodule for the orbot interface. Here is an example of a tor branch that is rebased against those 12 additional...

Because the tor submodule is getting rebased each time there is a new tor version, it is not possible to reference it without permission to the guardian project tor repo....

I assume those two failures about "On Android, LOCALSTATEDIR should be set to static path" are unrelated?

The latest stable branch for xz is "v5.2" which fixes the following cve: https://git.tukaani.org/?p=xz.git;a=commit;h=69d1b3fc29677af8ade8dc15dba83f0589cb63d6 So, it is safe to assume the current version of xz used here is vulnerable.

This seems to fix the issue https://github.com/guardianproject/orbot/pull/733

``` --- gai.conf.org 2018-02-01 17:17:18.000000000 +0100 +++ gai.conf 2020-10-25 21:09:21.330391035 +0100 @@ -19,14 +19,15 @@ # Add another rule to the RFC 3484 label table. See section 2.1 in #...