CVSROOT:        /cvs
Module name:    ports
Changes by:     pas...@cvs.openbsd.org  2013/12/24 02:51:15

Modified files:
        net/tor        : Makefile distinfo 

Log message:
SECURITY update to 0.2.4.20.  From the ChangeLog:

Tor 0.2.4.20 fixes potentially poor random number generation for users
who 1) use OpenSSL 1.0.0 or later, 2) set "HardwareAccel 1" in their
torrc file, 3) have "Sandy Bridge" or "Ivy Bridge" Intel processors,
and 4) have no state file in their DataDirectory (as would happen on
first start). Users who generated relay or hidden service identity
keys in such a situation should discard them and generate new ones.

(no CVE assigned yet)

Reply via email to