Log message:
Pullup ticket #2699 - requested by obache
tor: security update

Revisions pulled up:
- net/tor/Makefile				1.62
- net/tor/distinfo				1.34
- net/tor/patches/patch-ac			delete
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Sun Feb 15 07:59:02 UTC 2009

Modified Files:
	pkgsrc/net/tor: Makefile distinfo
Removed Files:
	pkgsrc/net/tor/patches: patch-ac

Log message:
Update tor to 0.2.0.34.
Patch provided by Christian Sturm and back to maintainer.

Changes in version 0.2.0.34 - 2009-02-08
  o Security fixes:
    - Fix an infinite-loop bug on handling corrupt votes under certain
      circumstances. Bugfix on 0.2.0.8-alpha.
    - Fix a temporary DoS vulnerability that could be performed by
      a directory mirror. Bugfix on 0.2.0.9-alpha; reported by lark.
    - Avoid a potential crash on exit nodes when processing malformed
      input. Remote DoS opportunity. Bugfix on 0.2.0.33.
    - Do not accept incomplete ipv4 addresses (like 192.168.0) as valid.
      Spec conformance issue. Bugfix on Tor 0.0.2pre27.

  o Minor bugfixes:
    - Fix compilation on systems where time_t is a 64-bit integer.
      Patch from Matthias Drochner.
    - Don't consider expiring already-closed client connections. Fixes
      bug 893. Bugfix on 0.0.2pre20.

Log message:
Pullup ticket #2656 - requested by drochner
tor: security update

Revisions pulled up:
- net/tor/Makefile		1.61
- net/tor/distinfo		1.32-1.33
- net/tor/patches/patch-ac	1.6
---
Module Name:    pkgsrc
Committed By:   drochner
Date:           Thu Jan 22 12:46:51 UTC 2009

Modified Files:
        pkgsrc/net/tor: distinfo
Added Files:
        pkgsrc/net/tor/patches: patch-ac

Log message:
make this build with 64-bit time_t
(There are some unclean typecasts in the code, but the cases I've
seen are harmless -- as long as poll intervals, cert lifetimes etc
don't reach into y2037 which would be problematic in any case.)
---
Module Name:    pkgsrc
Committed By:   drochner
Date:           Thu Jan 22 12:50:57 UTC 2009

Modified Files:
        pkgsrc/net/tor: Makefile distinfo

Log message:
update to 0.2.0.33
changes:
-Security fix:
 Fix a heap-corruption bug that may be remotely triggerable on
 some platforms.
-many bugfixes