CVS commit: [pkgsrc-2010Q4] pkgsrc/net/tor

["Steven Drake" <sbd%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   sbd
Date:           Wed Jan 19 00:13:25 UTC 2011

Modified Files:
        pkgsrc/net/tor [pkgsrc-2010Q4]: Makefile distinfo

Log Message:
Pullup ticket #3328 - requested by drochner
tor security update

Revisions pulled up:
- pkgsrc/net/tor/Makefile       1.77
- pkgsrc/net/tor/distinfo       1.47

-------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Mon Jan 17 14:06:54 UTC 2011

   Modified Files:
           pkgsrc/net/tor: Makefile distinfo

   Log Message:
   update to 0.2.1.29
   changes:
   -Fix a heap overflow (probably allows remote code execution)
    (CVE-2011-0427)
   -Prevent a denial-of-service attack by disallowing any
    zlib-compressed data whose compression factor is implausibly
    high
   -Zero out a few more keys in memory before freeing them
   -bugfixes
   -Update to the January 1 2011 Maxmind GeoLite Country db
   -Introduce output size checks on all of our decryption functions


To generate a diff of this commit:
cvs rdiff -u -r1.76 -r1.76.2.1 pkgsrc/net/tor/Makefile
cvs rdiff -u -r1.46 -r1.46.2.1 pkgsrc/net/tor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.