diff options
| author | wiz <wiz> | 2016-10-19 10:58:14 +0000 |
|---|---|---|
| committer | wiz <wiz> | 2016-10-19 10:58:14 +0000 |
| commit | b50f695c8dce44bd982206611a76ecf71ccb9a9b (patch) | |
| tree | 0e4c9e8a49d728f3c63ac485e528cf7afa235d98 /net/tor/Makefile | |
| parent | 8228bb49ed4e3c14601de4f0ebf69031b22451ad (diff) | |
| download | pkgsrc-b50f695c8dce44bd982206611a76ecf71ccb9a9b.tar.gz | |
Updated tor to 0.2.8.9.
Changes in version 0.2.8.9 - 2016-10-17
Tor 0.2.8.9 backports a fix for a security hole in previous versions
of Tor that would allow a remote attacker to crash a Tor client,
hidden service, relay, or authority. All Tor users should upgrade to
this version, or to 0.2.9.4-alpha. Patches will be released for older
versions of Tor.
o Major features (security fixes, also in 0.2.9.4-alpha):
- Prevent a class of security bugs caused by treating the contents
of a buffer chunk as if they were a NUL-terminated string. At
least one such bug seems to be present in all currently used
versions of Tor, and would allow an attacker to remotely crash
most Tor instances, especially those compiled with extra compiler
hardening. With this defense in place, such bugs can't crash Tor,
though we should still fix them as they occur. Closes ticket
20384 (TROVE-2016-10-001).
o Minor features (geoip):
- Update geoip and geoip6 to the October 4 2016 Maxmind GeoLite2
Country database.
Diffstat (limited to 'net/tor/Makefile')
| -rw-r--r-- | net/tor/Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/net/tor/Makefile b/net/tor/Makefile index 2d377984fc6..a1aff00cc0d 100644 --- a/net/tor/Makefile +++ b/net/tor/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.112 2016/09/30 10:53:01 wiz Exp $ +# $NetBSD: Makefile,v 1.113 2016/10/19 10:58:14 wiz Exp $ -DISTNAME= tor-0.2.8.8 +DISTNAME= tor-0.2.8.9 CATEGORIES= net security MASTER_SITES= http://www.torproject.org/dist/ |