---
- branch: MAIN
  date: Sun Jul 19 12:04:48 UTC 2015
  files:
  - new: '1.105'
    old: '1.104'
    path: pkgsrc/net/tor/Makefile
    pathrev: pkgsrc/net/tor/Makefile@1.105
    type: modified
  - new: '1.66'
    old: '1.65'
    path: pkgsrc/net/tor/distinfo
    pathrev: pkgsrc/net/tor/distinfo@1.66
    type: modified
  id: 20150719T120448Z.a459644bd9f5974a720c559225c6e886a4bc936b
  log: |
    Update to 0.2.6.10:

    Changes in version 0.2.6.10 - 2015-07-12
      Tor version 0.2.6.10 fixes some significant stability and hidden
      service client bugs, bulletproofs the cryptography init process, and
      fixes a bug when using the sandbox code with some older versions of
      Linux. Everyone running an older version, especially an older version
      of 0.2.6, should upgrade.

      o Major bugfixes (hidden service clients, stability):
        - Stop refusing to store updated hidden service descriptors on a
          client. This reverts commit 9407040c59218 (which indeed fixed bug
          14219, but introduced a major hidden service reachability
          regression detailed in bug 16381). This is a temporary fix since
          we can live with the minor issue in bug 14219 (it just results in
          some load on the network) but the regression of 16381 is too much
          of a setback. First-round fix for bug 16381; bugfix
          on 0.2.6.3-alpha.

      o Major bugfixes (stability):
        - Stop crashing with an assertion failure when parsing certain kinds
          of malformed or truncated microdescriptors. Fixes bug 16400;
          bugfix on 0.2.6.1-alpha. Found by "torkeln"; fix based on a patch
          by "cypherpunks_backup".
        - Stop random client-side assertion failures that could occur when
          connecting to a busy hidden service, or connecting to a hidden
          service while a NEWNYM is in progress. Fixes bug 16013; bugfix
          on 0.1.0.1-rc.

      o Minor features (geoip):
        - Update geoip to the June 3 2015 Maxmind GeoLite2 Country database.
        - Update geoip6 to the June 3 2015 Maxmind GeoLite2 Country database.

      o Minor bugfixes (crypto error-handling):
        - Check for failures from crypto_early_init, and refuse to continue.
          A previous typo meant that we could keep going with an
          uninitialized crypto library, and would have OpenSSL initialize
          its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced
          when implementing ticket 4900. Patch by "teor".

      o Minor bugfixes (Linux seccomp2 sandbox):
        - Allow pipe() and pipe2() syscalls in the seccomp2 sandbox: we need
          these when eventfd2() support is missing. Fixes bug 16363; bugfix
          on 0.2.6.3-alpha. Patch from "teor".
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/net/tor'
  unixtime: '1437307488'
  user: wiz