summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2021-02-03 09:53:47 -0500
committerNick Mathewson <nickm@torproject.org>2021-02-03 09:53:47 -0500
commit37a32b7ee76e5d52439eb840e1087b2fd02dd15a (patch)
treee87a3b206e5f908ab438ef131125ae1612b318e9
parent86a55bd02fbf05a4865cc2f0f4f394c9e27c7318 (diff)
downloadtor-0.4.4.7.tar.gz
tor-0.4.4.7.zip
Fold in the entry for 2667tor-0.4.4.7
-rw-r--r--ChangeLog9
-rw-r--r--changes/ticket26674
2 files changed, 8 insertions, 5 deletions
diff --git a/ChangeLog b/ChangeLog
index 9b77493d1e..eeff4d8aa6 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,8 @@
Changes in version 0.4.4.7 - 2021-02-03
Tor 0.4.4.7 backports numerous bugfixes from later releases,
including one that made v3 onion services more susceptible to
- denial-of-service attacks.
+ denial-of-service attacks, and a feature that makes some kinds of
+ DoS attacks harder to perform.
o Major bugfixes (onion service v3, backport from 0.4.5.3-rc):
- Stop requiring a live consensus for v3 clients and services, and
@@ -10,6 +11,12 @@ Changes in version 0.4.4.7 - 2021-02-03
consensus for more than 2 hours in a row. Fixes bug 40237; bugfix
on 0.3.5.1-alpha.
+ o Major feature (exit, backport from 0.4.5.5-rc):
+ - Re-entry into the network is now denied at the Exit level to all
+ relays' ORPorts and authorities' ORPorts and DirPorts. This change
+ should help mitgate a set of denial-of-service attacks. Closes
+ ticket 2667.
+
o Minor feature (build system, backport from 0.4.5.4-rc):
- New "make lsp" command to generate the compile_commands.json file
used by the ccls language server. The "bear" program is needed for
diff --git a/changes/ticket2667 b/changes/ticket2667
deleted file mode 100644
index cc42286ef9..0000000000
--- a/changes/ticket2667
+++ /dev/null
@@ -1,4 +0,0 @@
- o Major feature (exit):
- - Re-entry into the network is now denied at the Exit level to all relays'
- ORPort and authorities' ORPort+DirPort. This is to help mitigate a series
- of attacks. See ticket for more information. Closes ticket 2667.