Subject: CVS commit: pkgsrc/net/tor
From: Greg Troxel
Date: 2010-12-21 01:07:28
Message id: 20101221000728.9A03E175DD@cvs.netbsd.org

Log Message:
Update to 0.2.1.28, resolving CVE-2010-1676.

Changes in version 0.2.1.28 - 2010-12-17
  o Major bugfixes:
    - Fix a remotely exploitable bug that could be used to crash instances
      of Tor remotely by overflowing on the heap. Remote-code execution
      hasn't been confirmed, but can't be ruled out. Everyone should
      upgrade. Bugfix on the 0.1.1 series and later.

  o Directory authority changes:
    - Change IP address and ports for gabelmoo (v3 directory authority).

  o Minor features:
    - Update to the December 1 2010 Maxmind GeoLite Country database.

Files:
RevisionActionfile
1.76modifypkgsrc/net/tor/Makefile
1.46modifypkgsrc/net/tor/distinfo