Subject: CVS commit: pkgsrc/net/tor
To: None <pkgsrc-changes@NetBSD.org>
From: Todd Vierling <tv@netbsd.org>
List: pkgsrc-changes
Date: 12/17/2006 21:53:44
Module Name:	pkgsrc
Committed By:	tv
Date:		Sun Dec 17 21:53:44 UTC 2006

Modified Files:
	pkgsrc/net/tor: Makefile distinfo

Log Message:
Update to 0.1.1.26 to fix information disclosure vuln.

Changes in version 0.1.1.26 - 2006-12-14
 o Security bugfixes:
   - Stop sending the HttpProxyAuthenticator string to directory
     servers when directory connections are tunnelled through Tor.
   - Clients no longer store bandwidth history in the state file.
   - Do not log introduction points for hidden services if SafeLogging
     is set.

 o Minor bugfixes:
   - Fix an assert failure when a directory authority sets
     AuthDirRejectUnlisted and then receives a descriptor from an
     unlisted router (reported by seeess).


To generate a diff of this commit:
cvs rdiff -r1.37 -r1.38 pkgsrc/net/tor/Makefile
cvs rdiff -r1.22 -r1.23 pkgsrc/net/tor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.