pkg/43302: Maintainer update: net/tor to 0.2.1.26

[athaba%users.sourceforge.net@localhost]

>Number:         43302
>Category:       pkg
>Synopsis:       Maintainer update: net/tor to 0.2.1.26
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Thu May 13 18:50:00 +0000 2010
>Originator:     Christian Sturm
>Release:        
>Organization:
>Environment:
>Description:
The attached patch updates tor to 0.2.1.26 and also change the maintainer email 
address, to be independent from an ISP.

A pull-up is a good idea, because it only contains bugfixes and the OpenSSL 
fixes will make the package more portable.


Changes in version 0.2.1.26 - 2010-05-02
  Tor 0.2.1.26 addresses the recent connection and memory overload
  problems we've been seeing on relays, especially relays with their
  DirPort open. If your relay has been crashing, or you turned it off
  because it used too many resources, give this release a try.

  This release also fixes yet another instance of broken OpenSSL libraries
  that was causing some relays to drop out of the consensus.

  o Major bugfixes:
    - Teach relays to defend themselves from connection overload. Relays
      now close idle circuits early if it looks like they were intended
      for directory fetches. Relays are also more aggressive about closing
      TLS connections that have no circuits on them. Such circuits are
      unlikely to be re-used, and tens of thousands of them were piling
      up at the fast relays, causing the relays to run out of sockets
      and memory. Bugfix on 0.2.0.22-rc (where clients started tunneling
      their directory fetches over TLS).
    - Fix SSL renegotiation behavior on OpenSSL versions like on Centos
      that claim to be earlier than 0.9.8m, but which have in reality
      backported huge swaths of 0.9.8m or 0.9.8n renegotiation
      behavior. Possible fix for some cases of bug 1346.
    - Directory mirrors were fetching relay descriptors only from v2
      directory authorities, rather than v3 authorities like they should.
      Only 2 v2 authorities remain (compared to 7 v3 authorities), leading
      to a serious bottleneck. Bugfix on 0.2.0.9-alpha. Fixes bug 1324.

  o Minor bugfixes:
    - Finally get rid of the deprecated and now harmful notion of "clique
      mode", where directory authorities maintain TLS connections to
      every other relay.

  o Testsuite fixes:
    - In the util/threads test, no longer free the test_mutex before all
      worker threads have finished. Bugfix on 0.2.1.6-alpha.
    - The master thread could starve the worker threads quite badly on
      certain systems, causing them to run only partially in the allowed
      window. This resulted in test failures. Now the master thread sleeps
      occasionally for a few microseconds while the two worker-threads
      compete for the mutex. Bugfix on 0.2.0.1-alpha.

>How-To-Repeat:

>Fix:
begin 644 tor-0.2.1.26.patch.gz
M'XL(".Y&[$L``W1O<BTP+C(N,2XR-BYP871C:`"]D<MJPS`01=?Q5VC90FSK
M,=+(H2F$IM`LTD72'Y"L43`I=K%-://U=6A*TD=6A0H&"0TZ<P]:U(%>)VSI
MMA2K9TJF?U_)ZF[-#K`)R\M=US9-G[]L-UU;YC7U>=^T^>>X\2YIJ6\KVE7U
MAK7#UE5-S42&,@E5C"QM#^=3/"@AN6'SQ?KI<;:\GXY&`RWEF<Q$)G62IFER
M>Z%KDL6':JBZOJIC\T^JG^,NJH(XJ8(XQ5-C70XUZ*X?9H)=G9MFO6NSS?Z:
M39D0I4"C$#P!6JD]>(R.<Z^-!HD8N%662SEP5LNY,/PBB4PA?,&!>`!`KZ(N
M>!14$`H/P;G`)??!AD.B:D\7.1*X*:QF_JVG[O@G/Q3,V0.++J)S1EM$X$H$
M884";L$ZBYH@!DL2?1PXORB<DTPDKJ@$9R/*LJ#@P`$JY.3]$"MXM,.-*@Z)
3OBN8KPH:H3@JO`--A-Z@)`,`````
`
end