Subject: CVS commit: pkgsrc/net/tor
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 06/22/2005 15:53:24
Module Name:	pkgsrc
Committed By:	salo
Date:		Wed Jun 22 15:53:24 UTC 2005

Modified Files:
	pkgsrc/net/tor: Makefile distinfo

Log Message:
Security update to version 0.0.9.10

Changes:
Bugfixes on 0.0.9.x (backported from 0.1.0.10):
 - Refuse relay cells that claim to have a length larger than the
   maximum allowed. This prevents a potential attack that could read
   arbitrary memory (e.g. keys) from an exit server's process.

Bugfixes on 0.0.9.x:
 - If unofficial Tor clients connect and send weird TLS certs, our
   Tor server triggers an assert. This release contains a minimal
   backport from the broader fix that we put into 0.1.0.4-rc.

Approved by <jlam>


To generate a diff of this commit:
cvs rdiff -r1.13 -r1.14 pkgsrc/net/tor/Makefile
cvs rdiff -r1.9 -r1.10 pkgsrc/net/tor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.