obfs4: 0.0.12 -> 0.0.14-tor2

[ghost]

Description of changes

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 22.11 Release Notes (or backporting 22.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
  • (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes
• Fits CONTRIBUTING.md.

[ghost]

CC @thoughtpolice

[taku0]

It works on my machine.
nyx reports ServerTransportPlugin obfs4 exec /nix/store/c43java7gyigh67fj5dvwz471cjxsb5h-obfs4-0.0.14-tor2/bin/obfs4proxy managed and it establishes inbound and outbound connections.

[taku0]

0.0.14 fixes important obfuscation bugs. The Tor Anti-Censoship Team sent the following mail to Tor Bridge operators:

Hello,

I'm contacting you as you operate a Tor Bridge. First thank you for running the
bridge and helping others with it.

There is a new version of obfs4proxy (0.0.14) that fixes some important
obfuscation bugs, the details of will be published soon. Please upgrade as soon
as possible, to keep users safe.

If you use debian you can find the Debian package in stable-backports:
https://packages.debian.org/stable-backports/obfs4proxy

If you use docker you'll find the latest version in docker hub:
https://hub.docker.com/r/thetorproject/obfs4-bridge/

We are providing a package for ubuntu jammy:
https://people.torproject.org/~meskio/jammy/obfs4proxy_0.0.14-1_amd64.deb

Or you can find the source code in the upstream repository:
https://gitlab.com/yawning/obfs4

If you need help upgrading your relay, please use the tor-relays mailing list:
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Or the Tor Forum:
https://forum.torproject.net/c/support/relay-operator/17

We appreciate a lot your effort and time!
Thank you

The Tor Anti-Censoship Team

[ghost]

Noteworthy as well that this likely needs a backport to 22.05.

[ghost]

I think maybe ofborg got stuck.

@ofborg eval

[taku0]

#203929 is merged. Closing.