pkg/42311: net/tor update to tor-0.2.1.20 by maintainer

[athaba%inode.at@localhost]

>Number:         42311
>Category:       pkg
>Synopsis:       net/tor update to tor-0.2.1.20 by maintainer
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Fri Nov 13 13:00:00 +0000 2009
>Originator:     Christian Sturm
>Release:        
>Organization:
>Environment:
>Description:
The attached patch updates net/tor to 0.2.1.20

Changes in version 0.2.1.20 - 2009-10-15
  o Major bugfixes:
    - Send circuit or stream sendme cells when our window has decreased
      by 100 cells, not when it has decreased by 101 cells. Bug uncovered
      by Karsten when testing the "reduce circuit window" performance
      patch. Bugfix on the 54th commit on Tor -- from July 2002,
      before the release of Tor 0.0.0. This is the new winner of the
      oldest-bug prize.
    - Fix a remotely triggerable memory leak when a consensus document
      contains more than one signature from the same voter. Bugfix on
      0.2.0.3-alpha.
    - Avoid segfault in rare cases when finishing an introduction circuit
      as a client and finding out that we don't have an introduction key
      for it. Fixes bug 1073. Reported by Aaron Swartz.

  o Major features:
    - Tor now reads the "circwindow" parameter out of the consensus,
      and uses that value for its circuit package window rather than the
      default of 1000 cells. Begins the implementation of proposal 168.

  o New directory authorities:
    - Set up urras (run by Jacob Appelbaum) as the seventh v3 directory
      authority.
    - Move moria1 and tonga to alternate IP addresses.

  o Minor bugfixes:
    - Fix a signed/unsigned compile warning in 0.2.1.19.
    - Fix possible segmentation fault on directory authorities. Bugfix on
      0.2.1.14-rc.
    - Fix an extremely rare infinite recursion bug that could occur if
      we tried to log a message after shutting down the log subsystem.
      Found by Matt Edman. Bugfix on 0.2.0.16-alpha.
    - Fix an obscure bug where hidden services on 64-bit big-endian
      systems might mis-read the timestamp in v3 introduce cells, and
      refuse to connect back to the client. Discovered by "rotor".
      Bugfix on 0.2.1.6-alpha.
    - We were triggering a CLOCK_SKEW controller status event whenever
      we connect via the v2 connection protocol to any relay that has
      a wrong clock. Instead, we should only inform the controller when
      it's a trusted authority that claims our clock is wrong. Bugfix
      on 0.2.0.20-rc; starts to fix bug 1074. Reported by SwissTorExit.
    - We were telling the controller about CHECKING_REACHABILITY and
      REACHABILITY_FAILED status events whenever we launch a testing
      circuit or notice that one has failed. Instead, only tell the
      controller when we want to inform the user of overall success or
      overall failure. Bugfix on 0.1.2.6-alpha. Fixes bug 1075. Reported
      by SwissTorExit.
    - Don't warn when we're using a circuit that ends with a node
      excluded in ExcludeExitNodes, but the circuit is not used to access
      the outside world. This should help fix bug 1090. Bugfix on
      0.2.1.6-alpha.
    - Work around a small memory leak in some versions of OpenSSL that
      stopped the memory used by the hostname TLS extension from being
      freed.

  o Minor features:
    - Add a "getinfo status/accepted-server-descriptor" controller
      command, which is the recommended way for controllers to learn
      whether our server descriptor has been successfully received by at
      least on directory authority. Un-recommend good-server-descriptor
      getinfo and status events until we have a better design for them.

>How-To-Repeat:

>Fix:
begin 644 tor-0.2.1.20.patch.gz
M'XL("&E2_4H``W1O<BTP+C(N,2XR,"YP871C:`"-DEMO&C$0A9_C7S%2\]!J
ML[N^KKU(D:`%M3R02BSOE2]CLFT%"+8ER:^/H0%!0J2^6-:<F3/'GQS:&"'/
MYVT'MEQ@5W;+=3FQOS"VOQ'<FQ)I%P$?@'JMJ<*BP(I:K2PP2BLI29[G%WQ(
MEF67O/I]R-F-AFQW]/L$/L#U'7:?FV$/#DTW?X$5506<TKJDIF0&J.I)TZ,&
MEL[Z>X31PPJNTS`!D@_'S>QN,!G=7EVE53DM>,$*5I/LHL`I@2^#V>CK]^EX
MU"0I180-^C_KMGLD,!DTL]'T1S.>[<7[KEOURG*[W1;)8K5>_D3?%<OUO`SM
MIBO3^G")YDYL%W%Y0N!0>J&I:.0ZN$0S4"W2PR[2/`Z=TSR6_]%4.YIJ3_/(
M\M"R9RG^AR7)FV\#!A]/&1:=71?SIT]P"\8:&YE0TCKE1$2K#'+G8L00?/H7
M(J2;8YKDT\F05?1=(U'1RGNEI0W(N`W1FBB\MLS06AE3*8=4:S0I3_N$[]IP
M26MI)+C'#C<D>YV=TY->%WWE-=;>(W)AG9=8:V^EL[6Q5MB@M9&\XB1[F_W,
MR**T"0#GT=;HE*>,^4KQ$`(35`A)=90&E4UY7F4_L^&2<:KJE^S/[T--WI`#
"````
`
end