diff options
| author | wiz <wiz> | 2014-07-30 11:49:26 +0000 |
|---|---|---|
| committer | wiz <wiz> | 2014-07-30 11:49:26 +0000 |
| commit | b59addbd51b72b89b3b8b6aac308291ab9e26c37 (patch) | |
| tree | 2ef6107a837de054fd43440bd231a50a6ee9d252 | |
| parent | 193703ec76565e6188925f4ee6fbddba8d54dd17 (diff) | |
| download | pkgsrc-b59addbd51b72b89b3b8b6aac308291ab9e26c37.tar.gz | |
Update to 0.2.4.23:
Changes in version 0.2.4.23 - 2014-07-28
Tor 0.2.4.23 brings us a big step closer to slowing down the risk from
guard rotation, and also backports several important fixes from the
Tor 0.2.5 alpha release series.
o Major features:
- Clients now look at the "usecreatefast" consensus parameter to
decide whether to use CREATE_FAST or CREATE cells for the first hop
of their circuit. This approach can improve security on connections
where Tor's circuit handshake is stronger than the available TLS
connection security levels, but the tradeoff is more computational
load on guard relays. Implements proposal 221. Resolves ticket 9386.
- Make the number of entry guards configurable via a new
NumEntryGuards consensus parameter, and the number of directory
guards configurable via a new NumDirectoryGuards consensus
parameter. Implements ticket 12688.
o Major bugfixes:
- Fix a bug in the bounds-checking in the 32-bit curve25519-donna
implementation that caused incorrect results on 32-bit
implementations when certain malformed inputs were used along with
a small class of private ntor keys. This bug does not currently
appear to allow an attacker to learn private keys or impersonate a
Tor server, but it could provide a means to distinguish 32-bit Tor
implementations from 64-bit Tor implementations. Fixes bug 12694;
bugfix on 0.2.4.8-alpha. Bug found by Robert Ransom; fix from
Adam Langley.
o Minor bugfixes:
- Warn and drop the circuit if we receive an inbound 'relay early'
cell. Those used to be normal to receive on hidden service circuits
due to bug 1038, but the buggy Tor versions are long gone from
the network so we can afford to resume watching for them. Resolves
the rest of bug 1038; bugfix on 0.2.1.19.
- Correct a confusing error message when trying to extend a circuit
via the control protocol but we don't know a descriptor or
microdescriptor for one of the specified relays. Fixes bug 12718;
bugfix on 0.2.3.1-alpha.
- Avoid an illegal read from stack when initializing the TLS
module using a version of OpenSSL without all of the ciphers
used by the v2 link handshake. Fixes bug 12227; bugfix on
0.2.4.8-alpha. Found by "starlight".
o Minor features:
- Update geoip and geoip6 to the July 10 2014 Maxmind GeoLite2
Country database.
| -rw-r--r-- | net/tor/Makefile | 4 | ||||
| -rw-r--r-- | net/tor/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/net/tor/Makefile b/net/tor/Makefile index d8d3d3869ee..8f3823ce5d5 100644 --- a/net/tor/Makefile +++ b/net/tor/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.98 2014/06/07 09:11:36 wiz Exp $ +# $NetBSD: Makefile,v 1.99 2014/07/30 11:49:26 wiz Exp $ -DISTNAME= tor-0.2.4.22 +DISTNAME= tor-0.2.4.23 CATEGORIES= net security MASTER_SITES= http://www.torproject.org/dist/ diff --git a/net/tor/distinfo b/net/tor/distinfo index 59fd5136c8e..1338d5d7d5e 100644 --- a/net/tor/distinfo +++ b/net/tor/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.59 2014/06/25 13:08:37 drochner Exp $ +$NetBSD: distinfo,v 1.60 2014/07/30 11:49:26 wiz Exp $ -SHA1 (tor-0.2.4.22.tar.gz) = 42349e02c3f6db4e6f2cc52b8a61ea91761ac4d6 -RMD160 (tor-0.2.4.22.tar.gz) = de2ba568a182f5866cbfa00bc11f335bd8c88aba -Size (tor-0.2.4.22.tar.gz) = 2908812 bytes +SHA1 (tor-0.2.4.23.tar.gz) = 877135dcae4bacd2ce1f2a7d25fe4f614fe2ed8f +RMD160 (tor-0.2.4.23.tar.gz) = 79ec61b3c426e507af723fe394035ed0adb27c01 +Size (tor-0.2.4.23.tar.gz) = 2977006 bytes SHA1 (patch-aa) = ac774cb976e03ff4d38415e78720f2f463c210c8 |