Subject: CVS commit: pkgsrc/net/tor
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 06/22/2005 15:53:24
Module Name: pkgsrc
Committed By: salo
Date: Wed Jun 22 15:53:24 UTC 2005
Modified Files:
pkgsrc/net/tor: Makefile distinfo
Log Message:
Security update to version 0.0.9.10
Changes:
Bugfixes on 0.0.9.x (backported from 0.1.0.10):
- Refuse relay cells that claim to have a length larger than the
maximum allowed. This prevents a potential attack that could read
arbitrary memory (e.g. keys) from an exit server's process.
Bugfixes on 0.0.9.x:
- If unofficial Tor clients connect and send weird TLS certs, our
Tor server triggers an assert. This release contains a minimal
backport from the broader fix that we put into 0.1.0.4-rc.
Approved by <jlam>
To generate a diff of this commit:
cvs rdiff -r1.13 -r1.14 pkgsrc/net/tor/Makefile
cvs rdiff -r1.9 -r1.10 pkgsrc/net/tor/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.