Received: by mail.netbsd.org (Postfix, from userid 605) id 3720F84D54; Sun, 4 Mar 2018 07:46:08 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 35DAA84D50 for ; Sun, 4 Mar 2018 07:46:07 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id 6kND1_4MiSdg for ; Sun, 4 Mar 2018 07:46:06 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 7B57A84CED for ; Sun, 4 Mar 2018 07:46:06 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 7468AFB40; Sun, 4 Mar 2018 07:46:06 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_152014956648230" MIME-Version: 1.0 Date: Sun, 4 Mar 2018 07:46:06 +0000 From: "Thomas Klausner" Subject: CVS commit: pkgsrc/net/tor To: pkgsrc-changes@NetBSD.org Reply-To: wiz@netbsd.org X-Mailer: log_accum Message-Id: <20180304074606.7468AFB40@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_152014956648230 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: wiz Date: Sun Mar 4 07:46:06 UTC 2018 Modified Files: pkgsrc/net/tor: Makefile distinfo Log Message: tor: update to 0.3.2.10. Changes in version 0.3.2.10 - 2018-03-03 Tor 0.3.2.10 is the second stable release in the 0.3.2 series. It backports a number of bugfixes, including important fixes for security issues. It includes an important security fix for a remote crash attack against directory authorities, tracked as TROVE-2018-001. Additionally, it backports a fix for a bug whose severity we have upgraded: Bug 24700, which was fixed in 0.3.3.2-alpha, can be remotely triggered in order to crash relays with a use-after-free pattern. As such, we are now tracking that bug as TROVE-2018-002 and CVE-2018-0491, and backporting it to earlier releases. This bug affected versions 0.3.2.1-alpha through 0.3.2.9, as well as version 0.3.3.1-alpha. This release also backports our new system for improved resistance to denial-of-service attacks against relays. This release also fixes several minor bugs and annoyances from earlier releases. Relays running 0.3.2.x SHOULD upgrade to one of the versions released today, for the fix to TROVE-2018-002. Directory authorities should also upgrade. (Relays on earlier versions might want to update too for the DoS mitigations.) To generate a diff of this commit: cvs rdiff -u -r1.128 -r1.129 pkgsrc/net/tor/Makefile cvs rdiff -u -r1.88 -r1.89 pkgsrc/net/tor/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_152014956648230 Content-Disposition: inline Content-Length: 1520 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/net/tor/Makefile diff -u pkgsrc/net/tor/Makefile:1.128 pkgsrc/net/tor/Makefile:1.129 --- pkgsrc/net/tor/Makefile:1.128 Tue Jan 9 15:13:25 2018 +++ pkgsrc/net/tor/Makefile Sun Mar 4 07:46:06 2018 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.128 2018/01/09 15:13:25 wiz Exp $ +# $NetBSD: Makefile,v 1.129 2018/03/04 07:46:06 wiz Exp $ -DISTNAME= tor-0.3.2.9 +DISTNAME= tor-0.3.2.10 CATEGORIES= net security MASTER_SITES= http://www.torproject.org/dist/ Index: pkgsrc/net/tor/distinfo diff -u pkgsrc/net/tor/distinfo:1.88 pkgsrc/net/tor/distinfo:1.89 --- pkgsrc/net/tor/distinfo:1.88 Tue Jan 9 15:13:25 2018 +++ pkgsrc/net/tor/distinfo Sun Mar 4 07:46:06 2018 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.88 2018/01/09 15:13:25 wiz Exp $ +$NetBSD: distinfo,v 1.89 2018/03/04 07:46:06 wiz Exp $ -SHA1 (tor-0.3.2.9.tar.gz) = 62c7d15b04c63c19453af7b2c39d638cb49b652e -RMD160 (tor-0.3.2.9.tar.gz) = e2276ac6f01b7165c63ff11892b4fe3a378548c5 -SHA512 (tor-0.3.2.9.tar.gz) = 60b8d93eee8d0b04b49a8fa941ea3489e8cd9b3f3923d9da39865caa1f5bce6666c1db06594520aa3726151a54c9c0c30bb8d9b25fb38d7172ffb15a011d6c8c -Size (tor-0.3.2.9.tar.gz) = 6250442 bytes +SHA1 (tor-0.3.2.10.tar.gz) = 3fda950a95186cc82f8e465bda9dceb7108c329c +RMD160 (tor-0.3.2.10.tar.gz) = 28cd1c677503bf766870ce8fbb1dc37ff8e7082d +SHA512 (tor-0.3.2.10.tar.gz) = b916173b13fbca71a1b859d0cb1b090a063b27039ce88cedcf4b17ab282bfaa2edf0bb9f213fc20f82af856c880e0747a593e3d8fe1bc17319dc5cd8ac4490df +Size (tor-0.3.2.10.tar.gz) = 6421984 bytes --_----------=_152014956648230--