pkg/42541: [UPDATE by Maintainer] net/tor 0.2.1.20 -> 0.2.1.21

[athaba%inode.at@localhost]

>Number:         42541
>Category:       pkg
>Synopsis:       [UPDATE by Maintainer] net/tor 0.2.1.20 -> 0.2.1.21
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 29 17:05:00 +0000 2009
>Originator:     Christian Sturm
>Release:        
>Organization:
>Environment:
>Description:
The attached patch updates net/tor to 0.2.1.21

Since it contains only bufixes (which lead to 'compatibility' with recent 
OpenSSL and fix a crash - see changes) it may be wise to think about pulling 
the new version over to current stable.

Changes in version 0.2.1.21 - 2009-12-21
  o Major bugfixes:
    - Work around a security feature in OpenSSL 0.9.8l that prevents our
      handshake from working unless we explicitly tell OpenSSL that we
      are using SSL renegotiation safely. We are, of course, but OpenSSL
      0.9.8l won't work unless we say we are.
    - Avoid crashing if the client is trying to upload many bytes and the
      circuit gets torn down at the same time, or if the flip side
      happens on the exit relay. Bugfix on 0.2.0.1-alpha; fixes bug 1150.

  o Minor bugfixes:
    - Do not refuse to learn about authority certs and v2 networkstatus
      documents that are older than the latest consensus. This bug might
      have degraded client bootstrapping. Bugfix on 0.2.0.10-alpha.
      Spotted and fixed by xmux.
    - Fix a couple of very-hard-to-trigger memory leaks, and one hard-to-
      trigger platform-specific option misparsing case found by Coverity
      Scan.
    - Fix a compilation warning on Fedora 12 by removing an impossible-to-
      trigger assert. Fixes bug 1173.

>How-To-Repeat:

>Fix:
begin 644 tor.patch.gz
M'XL("$0Q.DL``W1O<BYP871C:`"]D5U+Y#`4AJ_MK\BE"[9-<DZ;1!Q%5-"+
M\<+9/W"2G`QEEG9)R_CQZ^V`@[.Z<[6P@9`#(<_[/N1*/`]Y4SSTD5_.Q9(V
MG+I?7"S^?15/-RNQ@YV+.FS'/`Q3_7NS'G.H>Y[J:<CU/NYL6V2><L?;KE^+
M/!]C-_1"5:TI8I>2*/-N_JR'`8L+<?NP^OEXO;Q;G)S,M%)6NE*5ED59EL7E
MD5NU5XW=.'5]&OZ3ZC[NJ"H<J(+YK`=G39CWK+NZOU;B]-"TFBA7Z[<?8B%\
M"FTP[$)@UD`^(#L3"#TY2P04C;&H6SUSGI:WJI5'2<1(2%[K1(Y]$Z12H6UT
MC%&!!$!I$EIN:->H>^.C'(U*R\8)_SKQ^/$GWQ34P8-&!2#I("KTSLV!+8`T
M%CQ8+UVRK44*UO',^8O"(2F21DD1T%*@9&U$KX`P(:I&@W8N,8=HFEVCKPKJ
0#P5IG84/A7<<2[1G*P,`````
`
end