diff options
author | Nick Mathewson <nickm@torproject.org> | 2021-02-03 09:53:45 -0500 |
---|---|---|
committer | Nick Mathewson <nickm@torproject.org> | 2021-02-03 09:53:45 -0500 |
commit | 5b0fe0ee8aec0d704809a17ba9c64bf94993c668 (patch) | |
tree | 1e899e183f09ac35e22b5a0e3cc3032e9c67ac5a | |
parent | e51724f857aca81c5c89f70369f280c1a785cf1c (diff) | |
download | tor-5b0fe0ee8aec0d704809a17ba9c64bf94993c668.tar.gz tor-5b0fe0ee8aec0d704809a17ba9c64bf94993c668.zip |
Fold in the entry for 2667tor-0.4.3.8
-rw-r--r-- | ChangeLog | 9 | ||||
-rw-r--r-- | changes/ticket2667 | 4 |
2 files changed, 8 insertions, 5 deletions
@@ -1,7 +1,8 @@ Changes in version 0.4.3.8 - 2021-02-03 Tor 0.4.3.8 backports numerous bugfixes from later releases, including one that made v3 onion services more susceptible to - denial-of-service attacks. + denial-of-service attacks, and a feature that makes some kinds of + DoS attacks harder to perform. Note that this is, in all likelihood, the last release of Tor 0.4.3.x, which will reach end-of-life on 15 Feb 2021. @@ -19,6 +20,12 @@ Changes in version 0.4.3.8 - 2021-02-03 clients. Now we count traffic from both clients and services. Fixes bug 40117; bugfix on 0.2.6.2-alpha. + o Major feature (exit, backport from 0.4.5.5-rc): + - Re-entry into the network is now denied at the Exit level to all + relays' ORPorts and authorities' ORPorts and DirPorts. This change + should help mitgate a set of denial-of-service attacks. Closes + ticket 2667. + o Minor feature (build system, backport from 0.4.5.4-rc): - New "make lsp" command to generate the compile_commands.json file used by the ccls language server. The "bear" program is needed for diff --git a/changes/ticket2667 b/changes/ticket2667 deleted file mode 100644 index cc42286ef9..0000000000 --- a/changes/ticket2667 +++ /dev/null @@ -1,4 +0,0 @@ - o Major feature (exit): - - Re-entry into the network is now denied at the Exit level to all relays' - ORPort and authorities' ORPort+DirPort. This is to help mitigate a series - of attacks. See ticket for more information. Closes ticket 2667. |