Changelog for 0.4.4.8.

This commit is contained in:
Nick Mathewson
2021-03-15 09:25:02 -04:00
parent ecf1ba9746
commit ecdc6ac498
5 changed files with 48 additions and 23 deletions
-5
View File
@@ -1,5 +0,0 @@
o Major bugfixes (security, denial of service):
- Fix a bug in appending detached signatures to a pending consensus
document that could be used to crash a directory authority.
Fixes bug 40316; bugfix on 0.2.2.6-alpha. Tracked as
TROVE-2021-002 and CVE-2021-28090.
-9
View File
@@ -1,9 +0,0 @@
o Minor features (geoip data):
- We have switched geoip data sources. Previously we shipped
IP-to-country mappings from Maxmind's GeoLite2, but in 2019 they
changed their licensing term, so we were unable to update them after
that point. We now ship geoip files based on the IPFire Location
Database instead. (See https://location.ipfire.org/ for more
information). This release updates our geoip files to match the
IPFire Location Database as retrieved on 2021/03/12. Closes
ticket 40224.
-6
View File
@@ -1,6 +0,0 @@
o Major bugfixes (security, denial of service):
- Disable the dump_desc() function that we used to dump unparseable
information to disk. It was called incorrectly in several places,
in a way that could lead to excessive CPU usage. Fixes bug 40286;
bugfix on 0.2.2.1-alpha. This bug is also tracked as
TROVE-2021-001 and CVE-2021-28089.
-3
View File
@@ -1,3 +0,0 @@
o New system requirements (mallinfo() deprecated):
- Remove mallinfo() usage entirely. Libc 2.33+ now deprecates it. Closes
ticket 40309.