fold in further changes files

This commit is contained in:
Roger Dingledine
2012-06-14 05:47:55 -04:00
parent e5beb82e04
commit 8c044af300
11 changed files with 36 additions and 48 deletions
-5
View File
@@ -1,5 +0,0 @@
o Major bugfixes:
- Change the AllowDotExit rules so they should actually work.
We now enforce AllowDotExit only immediately after receiving
an address via SOCKS or DNSPort: other sources are free to provide
.exit addresses after the resolution occurs.
-5
View File
@@ -1,5 +0,0 @@
o Minor features:
- Warn the user when HTTPProxy, but no other proxy type, is
configured. This can cause surprising behavior: it doesn't send
all of Tor's traffic over the HTTPProxy--it sends unencrypted
directory traffic only. Resolves ticket 4663.
-4
View File
@@ -1,4 +0,0 @@
o Major features:
- Update cipher cipher list to match Firefox 8 and later. Fix for
issue 4744.
-4
View File
@@ -1,4 +0,0 @@
o Minor bugfixes:
- Make sure circuitbuild.c checks LearnCircuitBuildTimeout in all the
right places and never depends on the consensus parameters or computes
adaptive timeouts when it is disabled.
-2
View File
@@ -1,2 +0,0 @@
o Security fixes:
- Enable gcc and ld hardening by default. Fixes bug 5210.
-5
View File
@@ -1,5 +0,0 @@
o Minor bugfixes:
- Disable writing on marked-for-close connections when they are
blocked on bandwidth, to prevent busy-looping in Libevent. Fixes
bug 5263; bugfix on 0.0.2pre13, where we first added a special
case for flushing marked connections.
-3
View File
@@ -1,3 +0,0 @@
o Minor bugfixes:
- Fix a (harmless) integer overflow in cell statistics reported by
some fast relays. Fixes bug 5849; bugfix on 0.2.2.1-alpha.
-4
View File
@@ -1,4 +0,0 @@
o Minor bugfixes:
- Fix compilation warning with clang 3.1. Fixes bug 6141; bugfix on
0.2.3.11-alpha.
-3
View File
@@ -1,3 +0,0 @@
o Minor features:
- Update to the June 6 2012 Maxmind GeoLite Country database.
-12
View File
@@ -1,12 +0,0 @@
o Removed features:
- Remove support for clients claiming to support any standard
ciphersuites that we can actually provide. (As of modern
OpenSSL versions, it's not necessary to fake any standard
ciphersuite, and doing so prevents us from using better
ciphersuites in the future, since servers can't know whether an
advertised ciphersuite is really supported or not.) Some
hosts--notably, ones with very old versions of OpenSSL or where
OpenSSL has been built with ECC disabled-- will stand out
because of this change; TBB users should not be affected.
This implements the client side of proposal 198.