From 40bd6467a5ab127b9d1b67a6cd990a04498e32cd Mon Sep 17 00:00:00 2001 From: Roger Dingledine Date: Thu, 9 Mar 2006 01:42:42 +0000 Subject: [PATCH] first cut of a 0.1.1.15-rc changelog svn:r6108 --- ChangeLog | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/ChangeLog b/ChangeLog index d86965992b..e413343214 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,35 @@ +Changes in version 0.1.1.15-rc - 2006-03-09 + o Bugfixes and cleanups on 0.1.1.x: + - When we're printing strings from the network, don't try to print + non-printable characters. This protects us against shell escape + sequence exploits, and also against attacks to fool humans into + misreading their logs. + - Fix a bug where Tor would fail to establish any connections if you + left it off for 24 hours and then started it: we were happy with + the obsolete network statuses, but they all referred to router + descriptors that were too old to fetch, so we ended up with no + valid router descriptors. + - Fix a seg fault in the controller's "getinfo orconn-status" command + while listing status on incoming handshaking connections. Introduce + a status name "NEW" for these connections. + - Don't abandon entry guards until they've been down or gone for + a whole month. + - Cleaner and quieter log messages. + + o New features: + - New controller signal NEWNYM that makes new application requests + use clean circuits. + - Add a new circuit purpose 'controller' to let the controller ask + for a circuit that Tor won't try to use. Extend the EXTENDCIRCUIT + controller command to let you specify the purpose if you're starting + a new circuit. Add a new SETCIRCUITPURPOSE controller command to + let you change a circuit's purpose after it's been created. + - Accept "private:*" in routerdesc exit policies; not generated yet + because older Tors do not understand it. + - Add BSD-style contributed startup script "rc.subr" from Peter + Thoenen. + + Changes in version 0.1.1.14-alpha - 2006-02-20 o Bugfixes on 0.1.1.x: - Don't die if we ask for a stdout or stderr log (even implicitly)