Merge branch 'maint-0.4.7' into release-0.4.7

This commit is contained in:
David Goulet
2023-01-12 10:52:35 -05:00
2 changed files with 6 additions and 1 deletions
+5
View File
@@ -0,0 +1,5 @@
o Major bugfixes (TROVE-2022-002, client):
- The SafeSocks option had its logic inverted for SOCKS4 and SOCKS4a. It
would let the unsafe SOCKS4 pass but not the safe SOCKS4a one. This is
TROVE-2022-002 which was reported on Hackerone by "cojabo". Fixes bug
40730; bugfix on 0.3.5.1-alpha.