Finding Tor difficult to upgrade

Support Relay Operator
1

I’ve operated 6 exit relays and 6 bridges for nearly 10 years but I’m finding it harder and harder to upgrade recently. For example, a recent try on ubuntu 24.03, I received reply: The following packages have unmet dependencies:
tor : Depends: libc6 (>= 2.38) but 2.35-0ubuntu3.13 is to be installed
Depends: libevent-2.1-7t64 (>= 2.1.8-stable) but it is not installable
Depends: libssl3t64 (>= 3.0.0) but it is not installable
Depends: libzstd1 (>= 1.5.5) but 1.4.8+dfsg-3build1 is to be installed
Recommends: tor-geoipdb but it is not going to be installed

I purged and re-installed Tor with the same result. Can anyone steer me to a correct install/upgrade procedure?

1 Like
2

Hi, are you using tor packages from Ubuntu’s universe? Or did you configure the Tor Project Debian package repository?

3

24.03? Do you mean 24.04 ( Noble Numbat)?

Did you upgrade Tor by apt update then apt install tor? Before upgrading Tor, you should first do a full system upgrade. Partial upgrade (upgrade only a part of the upgradable packages) is tricky and prone to breakage. After this, you can just do a full system upgrade (apt upgrade) to make sure all softwares on your server (including Tor) are up-to-date.

And libc6 has already reached version 2.39 a year ago in Ubuntu, with multiple security updates after that that you’ve missed. You shouldn’t be running on libc 2.38 or earlier, that could make your server vulnerable.
https://changelogs.ubuntu.com/changelogs/pool/main/g/glibc/glibc_2.39-0ubuntu8.7/changelog

1 Like