mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-12-06 19:41:15 +01:00
Changelog for 0.4.4.8.
This commit is contained in:
@@ -1,5 +0,0 @@
|
||||
o Major bugfixes (security, denial of service):
|
||||
- Fix a bug in appending detached signatures to a pending consensus
|
||||
document that could be used to crash a directory authority.
|
||||
Fixes bug 40316; bugfix on 0.2.2.6-alpha. Tracked as
|
||||
TROVE-2021-002 and CVE-2021-28090.
|
||||
@@ -1,9 +0,0 @@
|
||||
o Minor features (geoip data):
|
||||
- We have switched geoip data sources. Previously we shipped
|
||||
IP-to-country mappings from Maxmind's GeoLite2, but in 2019 they
|
||||
changed their licensing term, so we were unable to update them after
|
||||
that point. We now ship geoip files based on the IPFire Location
|
||||
Database instead. (See https://location.ipfire.org/ for more
|
||||
information). This release updates our geoip files to match the
|
||||
IPFire Location Database as retrieved on 2021/03/12. Closes
|
||||
ticket 40224.
|
||||
@@ -1,6 +0,0 @@
|
||||
o Major bugfixes (security, denial of service):
|
||||
- Disable the dump_desc() function that we used to dump unparseable
|
||||
information to disk. It was called incorrectly in several places,
|
||||
in a way that could lead to excessive CPU usage. Fixes bug 40286;
|
||||
bugfix on 0.2.2.1-alpha. This bug is also tracked as
|
||||
TROVE-2021-001 and CVE-2021-28089.
|
||||
@@ -1,3 +0,0 @@
|
||||
o New system requirements (mallinfo() deprecated):
|
||||
- Remove mallinfo() usage entirely. Libc 2.33+ now deprecates it. Closes
|
||||
ticket 40309.
|
||||
Reference in New Issue
Block a user