torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

release: ChangeLog and ReleaseNotes for 0.4.8.10

Browse Source
This commit is contained in:
Tor CI Release
2023-12-08 18:31:17 +00:00
committed by David Goulet
parent 0d3aa8a691
commit c4f75f49f2
6 changed files with 46 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog
+23
View File
@@ -1,3 +1,26 @@
Changes in version 0.4.8.10 - 2023-12-08
This is a security release fixing a high severity bug (TROVE-2023-007)
affecting Exit relays supporting Conflux. We strongly recommend to update as
soon as possible.
o Major bugfixes (TROVE-2023-007, exit):
- Improper error propagation from a safety check in conflux leg
linking lead to a desynchronization of which legs were part of a
conflux set, ultimately causing a UAF and NULL pointer dereference
crash on Exit relays. Fixes bug 40897; bugfix on 0.4.8.1-alpha.
o Minor features (fallbackdir):
- Regenerate fallback directories generated on December 08, 2023.
o Minor features (geoip data):
- Update the geoip files to match the IPFire Location Database, as
retrieved on 2023/12/08.
o Minor bugfixes (bridges, statistics):
- Correctly report statistics for client count over Pluggable
transport. Fixes bug 40871; bugfix on 0.4.8.4
Changes in version 0.4.8.9 - 2023-11-09
This is another security release fixing a high severity bug affecting onion
services which is tracked by TROVE-2023-006. We are also releasing a guard
ReleaseNotes
+23
View File
@@ -2,6 +2,29 @@ This document summarizes new features and bugfixes in each stable
release of Tor. If you want to see more detailed descriptions of the
changes in each development snapshot, see the ChangeLog file.
Changes in version 0.4.8.10 - 2023-12-08
This is a security release fixing a high severity bug (TROVE-2023-007)
affecting Exit relays supporting Conflux. We strongly recommend to update as
soon as possible.
o Major bugfixes (TROVE-2023-007, exit):
- Improper error propagation from a safety check in conflux leg
linking lead to a desynchronization of which legs were part of a
conflux set, ultimately causing a UAF and NULL pointer dereference
crash on Exit relays. Fixes bug 40897; bugfix on 0.4.8.1-alpha.
o Minor features (fallbackdir):
- Regenerate fallback directories generated on December 08, 2023.
o Minor features (geoip data):
- Update the geoip files to match the IPFire Location Database, as
retrieved on 2023/12/08.
o Minor bugfixes (bridges, statistics):
- Correctly report statistics for client count over Pluggable
transport. Fixes bug 40871; bugfix on 0.4.8.4
Changes in version 0.4.8.9 - 2023-11-09
This is another security release fixing a high severity bug affecting onion
services which is tracked by TROVE-2023-006. We are also releasing a guard
changes/bug40897
-6
View File
@@ -1,6 +0,0 @@
o Major bugfixes (TROVE-2023-007, exit):
- Improper error propagation from a safety check in conflux leg
linking lead to a desynchronization of which legs were part of
a conflux set, ultimately causing a UAF and NULL pointer
dereference crash on Exit relays. Fixes bug 40897;
bugfix on 0.4.8.1-alpha.
changes/fallbackdirs-2023-12-08
-2
View File
@@ -1,2 +0,0 @@
o Minor features (fallbackdir):
- Regenerate fallback directories generated on December 08, 2023.
changes/geoip-2023-12-08
-3
View File
@@ -1,3 +0,0 @@
o Minor features (geoip data):
- Update the geoip files to match the IPFire Location Database,
as retrieved on 2023/12/08.
changes/ticket40871
-3
View File
@@ -1,3 +0,0 @@
o Minor bugfixes (bridges, statistics):
- Correctly report statistics for client count over Pluggable transport.
Fixes bug 40871; bugfix on 0.4.8.4