diff options
| author | teor <teor@torproject.org> | 2019-08-09 13:53:52 +1000 |
|---|---|---|
| committer | teor <teor@torproject.org> | 2019-08-09 13:53:52 +1000 |
| commit | 1a9555e28352c0807527126a2e5b3fd6b95fe8a0 (patch) | |
| tree | 419daf8fd1e9fe3c8c97e8ce8533cd969b8ac627 /changes | |
| parent | 6205810f8ed93c15f3f7be7fbb98d1cad15ae29c (diff) | |
| parent | 08ddf1f62bf62aa3dc044e0570fb368477223688 (diff) | |
| download | tor-1a9555e28352c0807527126a2e5b3fd6b95fe8a0.tar.gz tor-1a9555e28352c0807527126a2e5b3fd6b95fe8a0.zip | |
Merge remote-tracking branch 'tor-github/pr/763' into maint-0.3.5
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug28525 | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/changes/bug28525 b/changes/bug28525 new file mode 100644 index 0000000000..392a9265e5 --- /dev/null +++ b/changes/bug28525 @@ -0,0 +1,8 @@ + o Minor bugfixes (address selection): + - Make Tor aware of the RFC 6598 (Carrier Grade NAT) IP range, which is the + subnet 100.64.0.0/10. This is deployed by many ISPs as an alternative to + RFC 1918 that does not break existing internal networks. This patch fixes + security issues caused by RFC 6518 by blocking control ports on these + addresses and warns users if client ports or ExtORPorts are listening on + a RFC 6598 address. Fixes bug 28525; bugfix on 0.4.1.1-alpha. Patch by + Neel Chauhan. |