tor/changes
Nick Mathewson b7c172c9ec Disable extending to private/internal addresses by default
This is important, since otherwise an attacker can use timing info
to probe the internal network.

Also, add an option (ExtendAllowPrivateAddresses) so that
TestingTorNetwork won't break.

Fix for bug 6710; bugfix on all released versions of Tor.
2012-08-27 11:19:29 -04:00
..
bug6043 changelog for bug6043 2012-07-31 11:49:20 -04:00
bug6218 Fix port range in parse_port_range(). 2012-07-06 08:02:14 -04:00
bug6244_part_c Fix wildcarded address mappings from the control port 2012-08-15 17:59:30 -04:00
bug6252_again Have the bug6252 commit message reflect its on-again/off-again status 2012-07-18 10:24:17 -04:00
bug6271 Fix a bug handling SENDME cells on nonexistent streams. 2012-07-06 07:29:54 -04:00
bug6274 Better handling of server managed proxies when Tor is not a relay. 2012-07-18 20:01:02 +02:00
bug6274_2 Better handling of server managed proxies when Tor is not a relay. 2012-07-18 20:01:02 +02:00
bug6296 On windows, ENOBUFS starts with WSA. #6296. Fix on 0.2.18-rc 2012-07-05 05:01:00 -04:00
bug6377 Allow TestingTorNetwork when alternate dir and bridge authorities are set. 2012-07-17 09:35:38 -04:00
bug6379 Fix warnings and 64-bit problems in openbsd-malloc code 2012-08-15 19:26:53 -04:00
bug6387 Improve Alternate*Authority docs. Bug 6387. 2012-07-16 11:21:20 -04:00
bug6397 Refer to the correct variable in a loop when parsing entry guard state 2012-07-16 11:49:45 -04:00
bug6404 Update description of what we did to upper limit on md size 2012-08-14 03:10:14 -04:00
bug6423 Consider IPv6 OR ports when deciding whether a routerinfo change is cosmetic. 2012-08-17 15:59:13 -04:00
bug6436 changes file for bug 6436. 2012-07-20 09:50:19 -04:00
bug6472 When iterating over connections pending DNS, skip marked ones 2012-08-17 16:46:11 -04:00
bug6475 Address Nick's comments from code review. 2012-08-16 16:29:19 -07:00
bug6480 Avoid hard (impossible?)-to-trigger double-free in dns_resolve() 2012-07-31 17:19:17 -04:00
bug6490 Warn when accounting is used in a way likely to link hidden services 2012-07-31 10:28:16 -04:00
bug6500 Fix some manpage typos 2012-07-31 10:16:03 -04:00
bug6507 Reject attempts to say FooPort and FooPort 0 in the same cfg domain 2012-08-09 16:13:03 -04:00
bug6514 Defensive programming: clear rs_out between iterations. 2012-08-01 17:25:34 -04:00
bug6530 Clarify security impact of bug 6530 2012-08-03 11:16:13 -04:00
bug6710 Disable extending to private/internal addresses by default 2012-08-27 11:19:29 -04:00
cov709056 Coverity 709056: Check return value on fputs in tor-gencert 2012-07-16 11:38:39 -04:00
pathsel-BUGGY-a Try to clarify impact of bug 6537 2012-08-03 11:54:11 -04:00
port_doc Improve message on spurious SOCKSListenAddress 2012-07-17 12:02:55 -04:00
revert-geoip-may2012 Revert to the May 2012 geoip db 2012-07-06 16:29:51 -04:00
smartlist_foreach Tweaks to 6400 changes file and docs as suggested by arma 2012-07-18 10:12:19 -04:00