aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2021-02-03 09:53:45 -0500
committerNick Mathewson <nickm@torproject.org>2021-02-03 09:53:45 -0500
commit5b0fe0ee8aec0d704809a17ba9c64bf94993c668 (patch)
tree1e899e183f09ac35e22b5a0e3cc3032e9c67ac5a
parente51724f857aca81c5c89f70369f280c1a785cf1c (diff)
downloadtor-5b0fe0ee8aec0d704809a17ba9c64bf94993c668.tar.gz
tor-5b0fe0ee8aec0d704809a17ba9c64bf94993c668.zip
Fold in the entry for 2667tor-0.4.3.8
-rw-r--r--ChangeLog9
-rw-r--r--changes/ticket26674
2 files changed, 8 insertions, 5 deletions
diff --git a/ChangeLog b/ChangeLog
index 5b25a4c97b..e5f316d8a6 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,8 @@
Changes in version 0.4.3.8 - 2021-02-03
Tor 0.4.3.8 backports numerous bugfixes from later releases,
including one that made v3 onion services more susceptible to
- denial-of-service attacks.
+ denial-of-service attacks, and a feature that makes some kinds of
+ DoS attacks harder to perform.
Note that this is, in all likelihood, the last release of Tor 0.4.3.x,
which will reach end-of-life on 15 Feb 2021.
@@ -19,6 +20,12 @@ Changes in version 0.4.3.8 - 2021-02-03
clients. Now we count traffic from both clients and services.
Fixes bug 40117; bugfix on 0.2.6.2-alpha.
+ o Major feature (exit, backport from 0.4.5.5-rc):
+ - Re-entry into the network is now denied at the Exit level to all
+ relays' ORPorts and authorities' ORPorts and DirPorts. This change
+ should help mitgate a set of denial-of-service attacks. Closes
+ ticket 2667.
+
o Minor feature (build system, backport from 0.4.5.4-rc):
- New "make lsp" command to generate the compile_commands.json file
used by the ccls language server. The "bear" program is needed for
diff --git a/changes/ticket2667 b/changes/ticket2667
deleted file mode 100644
index cc42286ef9..0000000000
--- a/changes/ticket2667
+++ /dev/null
@@ -1,4 +0,0 @@
- o Major feature (exit):
- - Re-entry into the network is now denied at the Exit level to all relays'
- ORPort and authorities' ORPort+DirPort. This is to help mitigate a series
- of attacks. See ticket for more information. Closes ticket 2667.