|
|
@@ -4,6 +4,13 @@ Changes in version 0.2.7.4-rc - 2015-10-21
|
|
|
on different platforms. If no further significant bounds are found,
|
|
|
the next release will the the official stable release.
|
|
|
|
|
|
+ o Major bugfixes (security, correctness):
|
|
|
+ - Fix a programming error that could cause us to read 4 bytes before
|
|
|
+ the beginning of an openssl string. This could be used to provoke
|
|
|
+ a crash on systems with an unusual malloc implementation, or
|
|
|
+ systems with unsual hardening installed. Fixes bug 17404; bugfix
|
|
|
+ on 0.2.3.6-alpha.
|
|
|
+
|
|
|
o Major bugfixes (correctness):
|
|
|
- Fix a use-after-free bug in validate_intro_point_failure(). Fixes
|
|
|
bug 17401; bugfix on 0.2.7.3-rc.
|
|
|
@@ -13,6 +20,8 @@ Changes in version 0.2.7.4-rc - 2015-10-21
|
|
|
17398; bugfix on 0.2.6.1-alpha.
|
|
|
- Fix a memory leak in rend_cache_failure_entry_free(). Fixes bug
|
|
|
17402; bugfix on 0.2.7.3-rc.
|
|
|
+ - Fix a memory leak when reading an expired signing key from disk.
|
|
|
+ Fixes bug 17403; bugfix on 0.2.7.2-rc.
|
|
|
|
|
|
o Minor features (geoIP):
|
|
|
- Update geoip and geoip6 to the October 9 2015 Maxmind GeoLite2
|
|
|
@@ -51,6 +60,8 @@ Changes in version 0.2.7.4-rc - 2015-10-21
|
|
|
|
|
|
o Documentation:
|
|
|
- Fix capitalization of SOCKS in sample torrc. Closes ticket 15609.
|
|
|
+ - Note that HiddenServicePorts can take a unix domain socket. Closes
|
|
|
+ ticket 17364.
|
|
|
|
|
|
|
|
|
Changes in version 0.2.7.3-rc - 2015-09-25
|
Nick Mathewson