CVS commit: pkgsrc/net/tor

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Oct 19 10:58:14 UTC 2016

Modified Files:
        pkgsrc/net/tor: Makefile distinfo

Log Message:
Updated tor to 0.2.8.9.

Changes in version 0.2.8.9 - 2016-10-17
  Tor 0.2.8.9 backports a fix for a security hole in previous versions
  of Tor that would allow a remote attacker to crash a Tor client,
  hidden service, relay, or authority. All Tor users should upgrade to
  this version, or to 0.2.9.4-alpha. Patches will be released for older
  versions of Tor.

  o Major features (security fixes, also in 0.2.9.4-alpha):
    - Prevent a class of security bugs caused by treating the contents
      of a buffer chunk as if they were a NUL-terminated string. At
      least one such bug seems to be present in all currently used
      versions of Tor, and would allow an attacker to remotely crash
      most Tor instances, especially those compiled with extra compiler
      hardening. With this defense in place, such bugs can't crash Tor,
      though we should still fix them as they occur. Closes ticket
      20384 (TROVE-2016-10-001).

  o Minor features (geoip):
    - Update geoip and geoip6 to the October 4 2016 Maxmind GeoLite2
      Country database.


To generate a diff of this commit:
cvs rdiff -u -r1.112 -r1.113 pkgsrc/net/tor/Makefile
cvs rdiff -u -r1.73 -r1.74 pkgsrc/net/tor/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/tor/Makefile
diff -u pkgsrc/net/tor/Makefile:1.112 pkgsrc/net/tor/Makefile:1.113
--- pkgsrc/net/tor/Makefile:1.112       Fri Sep 30 10:53:01 2016
+++ pkgsrc/net/tor/Makefile     Wed Oct 19 10:58:14 2016
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.112 2016/09/30 10:53:01 wiz Exp $
+# $NetBSD: Makefile,v 1.113 2016/10/19 10:58:14 wiz Exp $
 
-DISTNAME=              tor-0.2.8.8
+DISTNAME=              tor-0.2.8.9
 CATEGORIES=            net security
 MASTER_SITES=          http://www.torproject.org/dist/
 

Index: pkgsrc/net/tor/distinfo
diff -u pkgsrc/net/tor/distinfo:1.73 pkgsrc/net/tor/distinfo:1.74
--- pkgsrc/net/tor/distinfo:1.73        Fri Sep 30 10:53:01 2016
+++ pkgsrc/net/tor/distinfo     Wed Oct 19 10:58:14 2016
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.73 2016/09/30 10:53:01 wiz Exp $
+$NetBSD: distinfo,v 1.74 2016/10/19 10:58:14 wiz Exp $
 
-SHA1 (tor-0.2.8.8.tar.gz) = a9040f3eb3252569def80e6e070aa463c76f2a79
-RMD160 (tor-0.2.8.8.tar.gz) = d2be1dba56378ced5911eb7256c80e1298a9c793
-SHA512 (tor-0.2.8.8.tar.gz) = 741521663509d5983aed3561b2aaacab9355a1964b4a24f8e046c116159b22e3df9c76705c11afb84f2cedacaab77f429978ff6920306aa8fdab74fd22950cf6
-Size (tor-0.2.8.8.tar.gz) = 5093794 bytes
+SHA1 (tor-0.2.8.9.tar.gz) = fab0cb618bea15d19428dd820403ba3267b17b06
+RMD160 (tor-0.2.8.9.tar.gz) = b93b57e194d746a1fe8621a75946004f79b8c7c7
+SHA512 (tor-0.2.8.9.tar.gz) = 9a02e4f7901c2abb22f8250077bc078e9b6ae122ee54fbe7ecfb505d449e6e1766f6d9f95d7b794063471cbefe7410fece8524910f83579bff00d6da2a8ea6c1
+Size (tor-0.2.8.9.tar.gz) = 5306773 bytes