diff options
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/19271 | 2 | ||||
| -rw-r--r-- | changes/bug15823 | 4 | ||||
| -rw-r--r-- | changes/bug17772 | 7 | ||||
| -rw-r--r-- | changes/bug17781 | 3 | ||||
| -rw-r--r-- | changes/bug17906 | 4 | ||||
| -rw-r--r-- | changes/bug18089 | 6 | ||||
| -rw-r--r-- | changes/bug18162 | 7 | ||||
| -rw-r--r-- | changes/bug21018 | 11 | ||||
| -rw-r--r-- | changes/geoip-april2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-august2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-december2015 | 4 | ||||
| -rw-r--r-- | changes/geoip-december2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-february2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-january2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-january2017 | 4 | ||||
| -rw-r--r-- | changes/geoip-july2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-jun2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-march2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-may2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-november2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-october2016 | 4 | ||||
| -rw-r--r-- | changes/geoip-september2016 | 4 |
22 files changed, 100 insertions, 0 deletions
diff --git a/changes/19271 b/changes/19271 new file mode 100644 index 0000000000..dc06ead999 --- /dev/null +++ b/changes/19271 @@ -0,0 +1,2 @@ + o Directory authority changes: + - Urras is no longer a directory authority. Closes ticket 19271. diff --git a/changes/bug15823 b/changes/bug15823 new file mode 100644 index 0000000000..987de5d9ac --- /dev/null +++ b/changes/bug15823 @@ -0,0 +1,4 @@ + o Minor bugfixes (hidden service): + - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells + on a client authorized hidden service. Fixes bug 15823; bugfix + on 0.2.1.6-alpha. diff --git a/changes/bug17772 b/changes/bug17772 new file mode 100644 index 0000000000..54d457c601 --- /dev/null +++ b/changes/bug17772 @@ -0,0 +1,7 @@ + o Major bugfixes (guard selection): + - Actually look at the Guard flag when selecting a new directory + guard. When we implemented the directory guard design, we + accidentally started treating all relays as if they have the Guard + flag during guard selection, leading to weaker anonymity and worse + performance. Fixes bug 17222; bugfix on 0.2.4.8-alpha. Discovered + by Mohsen Imani. diff --git a/changes/bug17781 b/changes/bug17781 new file mode 100644 index 0000000000..01ed231b0a --- /dev/null +++ b/changes/bug17781 @@ -0,0 +1,3 @@ + o Compilation fixes: + - Fix a compilation warning with Clang 3.6: Do not check the + presence of an address which can never be NULL. Fixes bug 17781. diff --git a/changes/bug17906 b/changes/bug17906 new file mode 100644 index 0000000000..fff76d1c59 --- /dev/null +++ b/changes/bug17906 @@ -0,0 +1,4 @@ + o Minor features (authorities): + - Update the V3 identity key for dannenberg, it was changed on + 18 November 2015. + Closes task #17906. Patch by "teor". diff --git a/changes/bug18089 b/changes/bug18089 new file mode 100644 index 0000000000..c1fb342f77 --- /dev/null +++ b/changes/bug18089 @@ -0,0 +1,6 @@ + o Minor fixes (security): + - Make memwipe() do nothing when passed a NULL pointer + or zero size. Check size argument to memwipe() for underflow. + Closes bug #18089. Reported by "gk", patch by "teor". + Bugfix on 0.2.3.25 and 0.2.4.6-alpha (#7352), + commit 49dd5ef3 on 7 Nov 2012. diff --git a/changes/bug18162 b/changes/bug18162 new file mode 100644 index 0000000000..0844d6f62f --- /dev/null +++ b/changes/bug18162 @@ -0,0 +1,7 @@ + o Major bugfixes (security, pointers): + + - Avoid a difficult-to-trigger heap corruption attack when extending + a smartlist to contain over 16GB of pointers. Fixes bug #18162; + bugfix on Tor 0.1.1.11-alpha, which fixed a related bug + incompletely. Reported by Guido Vranken. + diff --git a/changes/bug21018 b/changes/bug21018 new file mode 100644 index 0000000000..49a8b47a25 --- /dev/null +++ b/changes/bug21018 @@ -0,0 +1,11 @@ + o Major bugfixes (parsing, security): + + - Fix a bug in parsing that could cause clients to read a single + byte past the end of an allocated region. This bug could be + used to cause hardened clients (built with + --enable-expensive-hardening) to crash if they tried to visit + a hostile hidden service. Non-hardened clients are only + affected depending on the details of their platform's memory + allocator. Fixes bug 21018; bugfix on 0.2.0.8-alpha. Found by + using libFuzzer. Also tracked as TROVE-2016-12-002 and as + CVE-2016-1254. diff --git a/changes/geoip-april2016 b/changes/geoip-april2016 new file mode 100644 index 0000000000..4cd03e556b --- /dev/null +++ b/changes/geoip-april2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the April 5 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-august2016 b/changes/geoip-august2016 new file mode 100644 index 0000000000..370ab64cac --- /dev/null +++ b/changes/geoip-august2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-december2015 b/changes/geoip-december2015 new file mode 100644 index 0000000000..597bcc92f8 --- /dev/null +++ b/changes/geoip-december2015 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the December 1 2015 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-december2016 b/changes/geoip-december2016 new file mode 100644 index 0000000000..60754ea21d --- /dev/null +++ b/changes/geoip-december2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the December 7 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-february2016 b/changes/geoip-february2016 new file mode 100644 index 0000000000..49a8041fad --- /dev/null +++ b/changes/geoip-february2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the February 2 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-january2016 b/changes/geoip-january2016 new file mode 100644 index 0000000000..fe2d5c7dc7 --- /dev/null +++ b/changes/geoip-january2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the January 5 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-january2017 b/changes/geoip-january2017 new file mode 100644 index 0000000000..de1a4cbe2a --- /dev/null +++ b/changes/geoip-january2017 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-july2016 b/changes/geoip-july2016 new file mode 100644 index 0000000000..d9963bd6a8 --- /dev/null +++ b/changes/geoip-july2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the July 6 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-jun2016 b/changes/geoip-jun2016 new file mode 100644 index 0000000000..8d308f6f72 --- /dev/null +++ b/changes/geoip-jun2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the June 7 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-march2016 b/changes/geoip-march2016 new file mode 100644 index 0000000000..d7b1bd42f9 --- /dev/null +++ b/changes/geoip-march2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the March 3 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-may2016 b/changes/geoip-may2016 new file mode 100644 index 0000000000..3fd42dce24 --- /dev/null +++ b/changes/geoip-may2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the May 4 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-november2016 b/changes/geoip-november2016 new file mode 100644 index 0000000000..5190ed66f4 --- /dev/null +++ b/changes/geoip-november2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the November 3 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-october2016 b/changes/geoip-october2016 new file mode 100644 index 0000000000..fff9a1eeb5 --- /dev/null +++ b/changes/geoip-october2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the October 4 2016 Maxmind GeoLite2 + Country database. + diff --git a/changes/geoip-september2016 b/changes/geoip-september2016 new file mode 100644 index 0000000000..a14c7c699f --- /dev/null +++ b/changes/geoip-september2016 @@ -0,0 +1,4 @@ + o Minor features: + - Update geoip and geoip6 to the September 6 2016 Maxmind GeoLite2 + Country database. + |