Path to this page:
./
net/tor,
Anonymizing overlay network for TCP
Branch: pkgsrc-2010Q4,
Version: 0.2.1.29,
Package name: tor-0.2.1.29,
Maintainer: athabaThe simple version: Tor provides a distributed network of servers ("onion
routers"). Users bounce their TCP streams (web traffic, FTP, SSH, etc.) around
the routers. This makes it hard for recipients, observers, and even the onion
routers themselves to track the source of the stream.
The complex version: Onion Routing is a connection-oriented anonymizing
communication service. Users choose a source-routed path through a set of
nodes, and negotiate a "virtual circuit" through the network, in which each
node knows its predecessor and successor, but no others. Traffic flowing down
the circuit is unwrapped by a symmetric key at each node, which reveals the
downstream node.
Package options: threads
Master sites:
SHA1: cd534b99c91070504f4e70008ab8940a816b5bc6
RMD160: 2587fc9162852434a395ec796ebdcee1972d9aa9
Filesize: 2462.304 KB
Version history: (Expand)
- (2011-01-25) Package added to pkgsrc.se, version tor-0.2.1.29 (created)
CVS history: (Expand)
2011-01-19 01:13:25 by Steven Drake | Files touched by this commit (2) | |
Log message:
Pullup ticket #3328 - requested by drochner
tor security update
Revisions pulled up:
- pkgsrc/net/tor/Makefile 1.77
- pkgsrc/net/tor/distinfo 1.47
-------------------------------------------------------------------------
Module Name: pkgsrc
Committed By: drochner
Date: Mon Jan 17 14:06:54 UTC 2011
Modified Files:
pkgsrc/net/tor: Makefile distinfo
Log message:
update to 0.2.1.29
changes:
-Fix a heap overflow (probably allows remote code execution)
(CVE-2011-0427)
-Prevent a denial-of-service attack by disallowing any
zlib-compressed data whose compression factor is implausibly
high
-Zero out a few more keys in memory before freeing them
-bugfixes
-Update to the January 1 2011 Maxmind GeoLite Country db
-Introduce output size checks on all of our decryption functions
|