Fold 13471 into changelog and releasenotes

This commit is contained in:
Nick Mathewson 2014-10-19 21:39:50 -04:00
parent 095080360f
commit b82be6cf66
3 changed files with 10 additions and 5 deletions

View File

@ -11,6 +11,11 @@ Changes in version 0.2.5.9-rc - 2014-10-xx
today support TLS 1.0 or later, so we can safely turn off support today support TLS 1.0 or later, so we can safely turn off support
for this old (and insecure) protocol. Fixes bug 13426. for this old (and insecure) protocol. Fixes bug 13426.
o Major bugfixes (openssl bug workaround):
- Avoid crashing when using OpenSSL version 0.9.8zc, 1.0.0o, or
1.0.1j, built with the 'no-ssl3' configuration option. Fixes
bug 13471. This is a workaround for an OpenSSL bug.
o Minor bugfixes: o Minor bugfixes:
- Disable the sandbox name resolver cache when running tor-resolve: - Disable the sandbox name resolver cache when running tor-resolve:
tor-resolve doesn't use the sandbox code, and turning it on was tor-resolve doesn't use the sandbox code, and turning it on was

View File

@ -128,6 +128,11 @@ Changes in version 0.2.5.xx - 2014-10-xx
attacker from causing a microdescriptor collision, because the attacker from causing a microdescriptor collision, because the
router's identity is not forgeable. router's identity is not forgeable.
o Major bugfixes (openssl bug workaround):
- Avoid crashing when using OpenSSL version 0.9.8zc, 1.0.0o, or
1.0.1j, built with the 'no-ssl3' configuration option. Fixes
bug 13471. This is a workaround for an OpenSSL bug.
o Major bugfixes (client): o Major bugfixes (client):
- Perform circuit cleanup operations even when circuit - Perform circuit cleanup operations even when circuit
construction operations are disabled (because the network is construction operations are disabled (because the network is

View File

@ -1,5 +0,0 @@
o Major bugfixes (openssl bug workaround):
- Avoid crashing when using OpenSSL version 0.9.8zc, 1.0.0o, or
1.0.1j, built with the 'no-ssl3' configuration option. Fixes
bug 13471. This is a workaround for an OpenSSL bug.