start cleaning up 0.2.1.29 changelog
This commit is contained in:
Roger Dingledine
parent
4262a36d99
commit
bcd788f33f
53
ChangeLog
53
ChangeLog
|
|
@ -1,3 +1,56 @@
|
|||
Changes in version 0.2.1.29 - 2011-01-15
|
||||
o Major bugfixes (security):
|
||||
- Fix a heap overflow bug where an adversary could cause heap
|
||||
corruption. This bug potentially allows remote code execution
|
||||
attacks. Reported by "debuger". Fixes CVE-2011-0427. Bugfix on
|
||||
0.1.2.10-rc.
|
||||
- Prevent a denial-of-service attack by disallowing any
|
||||
zlib-compressed data whose compression factor is implausibly
|
||||
high. Fixes the second part of bug 2324; reported by "doors".
|
||||
|
||||
o Minor bugfixes:
|
||||
- Prevent calls from Libevent from inside Libevent log handlers.
|
||||
This had potential to cause a nasty set of crashes, especially
|
||||
if running Libevent with debug logging enabled, and running
|
||||
Tor with a controller watching for low-severity log messages.
|
||||
Bugfix on 0.1.0.2-rc. Fixes bug 2190.
|
||||
- Fix compilation on mingw when a pthreads compatibility library
|
||||
has been installed. (We don't want to use it, so we shouldn't
|
||||
be including pthread.h.) Fixes bug 2313; bugfix on 0.1.0.1-rc.
|
||||
- Add a check for SIZE_T_MAX to tor_realloc() to try to avoid
|
||||
underflow errors there too. Fixes bug 2324.
|
||||
- Fix a bug where we would assert if we ever had a
|
||||
cached-descriptors.new file (or another file read directly into
|
||||
memory) of exactly SIZE_T_CEILING bytes. Found by doors; fixes
|
||||
bug 2326; bugfix on 0.2.1.25.
|
||||
- Fix a bug where we would declare that we had run out of virtual
|
||||
addresses when the address space was only half-exhausted. Bugfix
|
||||
on 0.1.2.1-alpha.
|
||||
- Correctly handle the case where AutomapHostsOnResolve is set but no
|
||||
virtual addresses are available. Fixes bug2328, bugfix on
|
||||
0.1.2.1-alpha. Bug found by doorss.
|
||||
- Correctly handle wrapping around to when we run out of virtual
|
||||
address space. Found by cypherpunks, bugfix on 0.2.0.5-alpha.
|
||||
- Fix a bug with handling misformed replies to reverse DNS lookup
|
||||
requests in DNSPort. Bugfix on Tor 0.2.0.1-alpha. Related to a
|
||||
bug reported by doorss.
|
||||
- Fix some potential asserts and partsing issues with grossly
|
||||
malformed router caches. Fixes bug 2352. Found by doorss. Bugfix
|
||||
on Tor 0.2.1.27.
|
||||
- Zero out a few more keys in memory before freeing them. Fixes bug
|
||||
2384 and part of bug 2385. These key instances found by
|
||||
"cypherpunks". Bugfix on 0.0.2pre9.
|
||||
|
||||
o Minor features:
|
||||
- Update to the January 1 2011 Maxmind GeoLite Country database.
|
||||
- Introduce output size checks on all of our decryption functions.
|
||||
|
||||
o Build changes:
|
||||
- Tor does not build packages correctly with Automake 1.6 and earlier;
|
||||
added a check to Makefile.am to make sure that we're building with
|
||||
Automake 1.7 or later.
|
||||
|
||||
|
||||
Changes in version 0.2.1.28 - 2010-12-17
|
||||
Tor 0.2.1.28 does some code cleanup to reduce the risk of remotely
|
||||
exploitable bugs. We also took this opportunity to change the IP address
|
||||
|
|
|
|||
|
|
@ -1,6 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Prevent calls from Libevent from inside Libevent log handlers.
|
||||
This had potential to cause a nasty set of crashes, especially if
|
||||
running Libevent with debug logging enabled, and running Tor
|
||||
with a controller watching for low-severity log messages.
|
||||
Bugfix on 0.1.0.2-rc. Fixes bug 2190.
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
o Build changes
|
||||
- Tor does not build packages correctly with Automake 1.6 and earlier;
|
||||
added a check to Makefile.am to make sure that we're building with
|
||||
Automake 1.7 or later.
|
||||
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Fix compilation on mingw when a pthreads compatibility library
|
||||
has been installed. (We don't want to use it, so we shouldn't
|
||||
be including pthread.h.) Fixes bug 2313; bugfix on 0.1.0.1-rc.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Add a check for SIZE_T_MAX to tor_realloc to try to avoid
|
||||
underflow errors there too. Fixes bug 2324.
|
||||
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
o Major bugfixes (security):
|
||||
- Prevent a DoS attack by disallowing any zlib-compressed data
|
||||
whose compression factor is implausibly high. Fixes the
|
||||
second part of bug2324; found by doors.
|
||||
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Fix a bug where we would assert if we ever had a
|
||||
cached-descriptors.new file (or another file read directly into
|
||||
memory) of exactly SIZE_T_CEILING bytes. Found by doors; fixes
|
||||
bug 2326; bugfix on 0.2.1.25.
|
||||
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Fix a bug where we would declare that we had run out of virtual
|
||||
addresses when the address space was only half-exhausted. Bugfix
|
||||
on 0.1.2.1-alpha.
|
||||
- Correctly handle the case where AutomapHostsOnResolve is set but no
|
||||
virtual addresses are available. Fixes bug2328, bugfix on
|
||||
0.1.2.1-alpha. Bug found by doorss.
|
||||
- Correctly handle wrapping around to when we run out of virtual address
|
||||
space. Found by cypherpunks, bugfix on 0.2.0.5-alpha.
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Fix a bug with handling misformed replies to reverse DNS lookup
|
||||
requests in DNSPort. Bugfix on Tor 0.2.0.1-alpha. Related to a bug
|
||||
reported by doorss.
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Fix some potential asserts and partsing issues with grossly
|
||||
malformed router caches. Fixes bug 2352. Found by doorss.
|
||||
Bugfix on Tor 0.2.1.27.
|
||||
|
||||
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
o Minor bugfixes
|
||||
- Zero out a few more keys in memory before freeing them. Fixes bug
|
||||
2384 and part of bug 2385. These key instances found by
|
||||
"cypherpunks". Bugfix on 0.0.2pre9.
|
||||
|
||||
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
o Minor features:
|
||||
- Update to the January 1 2011 Maxmind GeoLite Country database.
|
||||
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
o Major bugfixes (security)
|
||||
- Fix a heap overflow bug where an adversary could cause heap
|
||||
corruption. This bug potentially allows remote code execution
|
||||
attacks. Found by debuger. Fixes CVE-2011-0427. Bugfix on
|
||||
0.1.2.10-rc.
|
||||
o Defensive programming
|
||||
- Introduce output size checks on all of our decryption functions.
|
||||
|
||||
Loading…
Reference in New Issue