[e-privacy] Tor 0.2.2.39 is released

[Marco Calamari]

-------- Forwarded Message --------
From: Roger Dingledine <arma at mit.edu>
To: tor-announce at lists.torproject.org
Subject: [tor-announce] Tor 0.2.2.39 is released
Date: Sat, 15 Sep 2012 07:12:08 -0400

Tor 0.2.2.39 fixes two more opportunities for remotely triggerable
assertions.

https://www.torproject.org/download/download

Changes in version 0.2.2.39 - 2012-09-11
  o Security fixes:
    - Fix an assertion failure in tor_timegm() that could be triggered
      by a badly formatted directory object. Bug found by fuzzing with
      Radamsa. Fixes bug 6811; bugfix on 0.2.0.20-rc.
    - Do not crash when comparing an address with port value 0 to an
      address policy. This bug could have been used to cause a remote
      assertion failure by or against directory authorities, or to
      allow some applications to crash clients. Fixes bug 6690; bugfix
      on 0.2.1.10-alpha.

_______________________________________________
tor-announce mailing list
tor-announce at lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-announce

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.winstonsmith.org/pipermail/e-privacy/attachments/20120917/fe3db4ca/attachment.pgp>