Path to this page:
Subject: CVS commit: pkgsrc/net/tor
From: Greg Troxel
Date: 2010-12-21 01:07:28
Message id: 20101221000728.9A03E175DD@cvs.netbsd.org
Log Message:
Update to 0.2.1.28, resolving CVE-2010-1676.
Changes in version 0.2.1.28 - 2010-12-17
o Major bugfixes:
- Fix a remotely exploitable bug that could be used to crash instances
of Tor remotely by overflowing on the heap. Remote-code execution
hasn't been confirmed, but can't be ruled out. Everyone should
upgrade. Bugfix on the 0.1.1 series and later.
o Directory authority changes:
- Change IP address and ports for gabelmoo (v3 directory authority).
o Minor features:
- Update to the December 1 2010 Maxmind GeoLite Country database.
Files: