commit ee774b02537ce4c10857dd1dd9c4977d8d7a1025 Author: Nick Mathewson nickm@torproject.org Date: Mon Apr 6 09:40:12 2015 -0400

Tweak changelog. --- ChangeLog | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/ChangeLog b/ChangeLog index 057b42f..690606e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -10,19 +10,20 @@ Changes in version 0.2.6.7 - 2015-04-06 o Major bugfixes (security, hidden service): - Fix an issue that would allow a malicious client to trigger an assertion failure and halt a hidden service. Fixes bug 15600; - bugfix on 0.2.1.6-alpha. Reported by "skruffy". + bugfix on 0.2.1.6-alpha. Reported by "disgleirio". - Fix a bug that could cause a client to crash with an assertion failure when parsing a malformed hidden service descriptor. Fixes bug 15601; bugfix on 0.2.1.5-alpha. Found by "DonnCha".

o Minor features (DoS-resistance, hidden service): - - Make it harder for attackers to overwhelm hidden services with - introductions, by blocking multiple introduction requests on the - same circuit. Resolves ticket #15515. - - Decrease the amount of reattempts that a hidden service is willing - to perform when its rendezvous circuits fail. This reduces the - computational cost for hidden service under heavy load. Resolves - ticket #11447. + - Introduction points no longer allow multiple INTRODUCE1 cells to + arrive on the same circuit. This should make it more expensive for + attackers to overwhelm hidden services with introductions. + Resolves ticket 15515. + - Decrease the amount of reattempts that a hidden service performs + when its rendezvous circuits fail. This reduces the computational + cost for running a hidden service under heavy load. Resolves + ticket 11447.

Changes in version 0.2.6.6 - 2015-03-24