diff options
| author | sbd <sbd> | 2011-01-19 00:13:24 +0000 |
|---|---|---|
| committer | sbd <sbd> | 2011-01-19 00:13:24 +0000 |
| commit | d8b5d30a34fd2258a473c3f0d9ab3335f53b5343 (patch) | |
| tree | 0d6e025dbacefdcf520f23ac06deeb941fb71076 | |
| parent | b622ceae938ad44c446429083e00b6912999769e (diff) | |
| download | pkgsrc-d8b5d30a34fd2258a473c3f0d9ab3335f53b5343.tar.gz | |
Pullup ticket #3328 - requested by drochner
tor security update
Revisions pulled up:
- pkgsrc/net/tor/Makefile 1.77
- pkgsrc/net/tor/distinfo 1.47
-------------------------------------------------------------------------
Module Name: pkgsrc
Committed By: drochner
Date: Mon Jan 17 14:06:54 UTC 2011
Modified Files:
pkgsrc/net/tor: Makefile distinfo
Log Message:
update to 0.2.1.29
changes:
-Fix a heap overflow (probably allows remote code execution)
(CVE-2011-0427)
-Prevent a denial-of-service attack by disallowing any
zlib-compressed data whose compression factor is implausibly
high
-Zero out a few more keys in memory before freeing them
-bugfixes
-Update to the January 1 2011 Maxmind GeoLite Country db
-Introduce output size checks on all of our decryption functions
| -rw-r--r-- | net/tor/Makefile | 4 | ||||
| -rw-r--r-- | net/tor/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/net/tor/Makefile b/net/tor/Makefile index f9d27be94bd..d99f1b26db6 100644 --- a/net/tor/Makefile +++ b/net/tor/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.76 2010/12/21 00:07:28 gdt Exp $ +# $NetBSD: Makefile,v 1.76.2.1 2011/01/19 00:13:24 sbd Exp $ # -DISTNAME= tor-0.2.1.28 +DISTNAME= tor-0.2.1.29 CATEGORIES= net security MASTER_SITES= http://www.torproject.org/dist/ diff --git a/net/tor/distinfo b/net/tor/distinfo index 227930d7de2..3944a3e6d73 100644 --- a/net/tor/distinfo +++ b/net/tor/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.46 2010/12/21 00:07:28 gdt Exp $ +$NetBSD: distinfo,v 1.46.2.1 2011/01/19 00:13:24 sbd Exp $ -SHA1 (tor-0.2.1.28.tar.gz) = 31c6995314a7a205a5d685bffbe966a766c84d7b -RMD160 (tor-0.2.1.28.tar.gz) = 71cf9f3cfb0cf89de573869a694bf31059331811 -Size (tor-0.2.1.28.tar.gz) = 2471741 bytes +SHA1 (tor-0.2.1.29.tar.gz) = cd534b99c91070504f4e70008ab8940a816b5bc6 +RMD160 (tor-0.2.1.29.tar.gz) = 2587fc9162852434a395ec796ebdcee1972d9aa9 +Size (tor-0.2.1.29.tar.gz) = 2521399 bytes SHA1 (patch-aa) = 5ee3e4c23b23b1b1f203be9ed5fdd3104ecc1804 |