commit 5b0fe0ee8aec0d704809a17ba9c64bf94993c668 Author: Nick Mathewson <nickm@torproject.org> Date: Wed Feb 3 09:53:45 2021 -0500 Fold in the entry for 2667 --- ChangeLog | 9 ++++++++- changes/ticket2667 | 4 ---- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5b25a4c97b..e5f316d8a6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,7 +1,8 @@ Changes in version 0.4.3.8 - 2021-02-03 Tor 0.4.3.8 backports numerous bugfixes from later releases, including one that made v3 onion services more susceptible to - denial-of-service attacks. + denial-of-service attacks, and a feature that makes some kinds of + DoS attacks harder to perform. Note that this is, in all likelihood, the last release of Tor 0.4.3.x, which will reach end-of-life on 15 Feb 2021. @@ -19,6 +20,12 @@ Changes in version 0.4.3.8 - 2021-02-03 clients. Now we count traffic from both clients and services. Fixes bug 40117; bugfix on 0.2.6.2-alpha. + o Major feature (exit, backport from 0.4.5.5-rc): + - Re-entry into the network is now denied at the Exit level to all + relays' ORPorts and authorities' ORPorts and DirPorts. This change + should help mitgate a set of denial-of-service attacks. Closes + ticket 2667. + o Minor feature (build system, backport from 0.4.5.4-rc): - New "make lsp" command to generate the compile_commands.json file used by the ccls language server. The "bear" program is needed for diff --git a/changes/ticket2667 b/changes/ticket2667 deleted file mode 100644 index cc42286ef9..0000000000 --- a/changes/ticket2667 +++ /dev/null @@ -1,4 +0,0 @@ - o Major feature (exit): - - Re-entry into the network is now denied at the Exit level to all relays' - ORPort and authorities' ORPort+DirPort. This is to help mitigate a series - of attacks. See ticket for more information. Closes ticket 2667.