diff options
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug2385 | 9 | ||||
| -rw-r--r-- | changes/bug3842 | 3 | ||||
| -rw-r--r-- | changes/bug4195 | 6 | ||||
| -rw-r--r-- | changes/bug4971 | 2 |
4 files changed, 20 insertions, 0 deletions
diff --git a/changes/bug2385 b/changes/bug2385 new file mode 100644 index 0000000000..5d571d910f --- /dev/null +++ b/changes/bug2385 @@ -0,0 +1,9 @@ + o Minor features (security): + - Clear keys and key-derived material left on the stack in + rendservice.c and rendclient.c. This should make us more + forward-secure against cold-boot attacks and the like. Fix for + bug 2385. + + - Check return value of crypto_pk_write_private_key_to_string() in + end_service_load_keys(). This should make us more forward-secure + against cold-boot attacks and the like. Fix for bug 2385. diff --git a/changes/bug3842 b/changes/bug3842 new file mode 100644 index 0000000000..9a67b0d454 --- /dev/null +++ b/changes/bug3842 @@ -0,0 +1,3 @@ + o Minor feature: + - Add a "GETINFO signal/names" command to control port. + diff --git a/changes/bug4195 b/changes/bug4195 new file mode 100644 index 0000000000..2e7a724871 --- /dev/null +++ b/changes/bug4195 @@ -0,0 +1,6 @@ + o Minor features: + - Enhance our internal sscanf replacement so that we can eliminate + the last remaining uses of the system sscanf. (Though those uses + of sscanf were safe, sscanf itself is generally error prone, so + we want to eliminate when we can.) Fixes ticket 4195 and Coverity + CID 448. diff --git a/changes/bug4971 b/changes/bug4971 new file mode 100644 index 0000000000..8c7d830ca4 --- /dev/null +++ b/changes/bug4971 @@ -0,0 +1,2 @@ + o Minor Feature: + - Provide default values for all options via "GETINFO config/defaults" |