nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-24 04:13:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Re-flow the changelog.

Browse Source
This commit is contained in:
Nick Mathewson 2017-11-30 14:44:04 -05:00
parent 26f5da96b2
commit 87012d076e
1 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
ChangeLog
View File

@ -9,10 +9,9 @@ Changes in version 0.3.2.6-alpha - 2017-12-01
malformed directory object to cause a Tor instance to pause while malformed directory object to cause a Tor instance to pause while
OpenSSL would try to read a passphrase from the terminal. (Tor OpenSSL would try to read a passphrase from the terminal. (Tor
instances run without a terminal, which is the case for most Tor instances run without a terminal, which is the case for most Tor
packages, are not impacted.) Fixes bug packages, are not impacted.) Fixes bug 24246; bugfix on every
24246; bugfix on every version of Tor. Also tracked as TROVE-2017- version of Tor. Also tracked as TROVE-2017-011 and CVE-2017-8821.
011 and CVE-2017-8821. Found by OSS-Fuzz as Found by OSS-Fuzz as testcase 6360145429790720.
testcase 6360145429790720.
- Fix a denial of service issue where an attacker could crash a - Fix a denial of service issue where an attacker could crash a
directory authority using a malformed router descriptor. Fixes bug directory authority using a malformed router descriptor. Fixes bug
24245; bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2017-010 24245; bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2017-010
@ -38,10 +37,9 @@ Changes in version 0.3.2.6-alpha - 2017-12-01
version of our descriptor appearing in the consensus. Fixes part version of our descriptor appearing in the consensus. Fixes part
of bug 21534; bugfix on 0.2.0.1-alpha. This issue is also tracked of bug 21534; bugfix on 0.2.0.1-alpha. This issue is also tracked
as TROVE-2017-012 and CVE-2017-8822. as TROVE-2017-012 and CVE-2017-8822.
- When running as a relay, make sure that we never choose - When running as a relay, make sure that we never choose ourselves
ourselves as a guard. Fixes part of as a guard. Fixes part of bug 21534; bugfix on 0.3.0.1-alpha. This
bug 21534; bugfix on 0.3.0.1-alpha. This issue is also tracked as issue is also tracked as TROVE-2017-012 and CVE-2017-8822.
TROVE-2017-012 and CVE-2017-8822.
o Minor feature (relay statistics): o Minor feature (relay statistics):
- Change relay bandwidth reporting stats interval from 4 hours to 24 - Change relay bandwidth reporting stats interval from 4 hours to 24