[tor-commits] [tor/release-0.2.5] Copy 0.2.5.9 entries into ReleaseNotes

nickm at torproject.org nickm at torproject.org
Sun Oct 19 16:57:37 UTC 2014


commit dfcdb34b8e813f50ca68b0f1bca42f149cc1c956
Author: Nick Mathewson <nickm at torproject.org>
Date:   Sun Oct 19 12:55:05 2014 -0400

    Copy 0.2.5.9 entries into ReleaseNotes
---
 ReleaseNotes |   22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/ReleaseNotes b/ReleaseNotes
index 1cb877c..f859783 100644
--- a/ReleaseNotes
+++ b/ReleaseNotes
@@ -96,6 +96,28 @@ Changes in version 0.2.5.? - 2014-10-??
 
 
 
+  o Major security fixes:
+    - Disable support for SSLv3. All versions of OpenSSL in use with Tor
+      today support TLS 1.0 or later, so we can safely turn off support
+      for this old (and insecure) protocol. Fixes bug 13426.
+
+  o Minor bugfixes:
+    - Disable the sandbox name resolver cache when running tor-resolve:
+      tor-resolve doesn't use the sandbox code, and turning it on was
+      breaking attempts to do tor-resolve on a non-default server on
+      Linux. Fixes bug 13295; bugfix on 0.2.5.3-alpha.
+
+  o Compilation fixes:
+    - Build and run correctly on systems like OpenBSD-current that have
+      patched OpenSSL to remove get_cipher_by_char and/or its
+      implementations. Fixes issue 13325.
+
+  o Downgraded warnings:
+    - Downgrade the severity of the 'unexpected sendme cell from client'
+      from 'warn' to 'protocol warning'. Closes ticket 8093.
+
+
+
   o Major bugfixes (client, startup):
     - Warn about attempts to run hidden services and relays in the same
       process: that's probably not a good idea. Closes ticket 12908.





More information about the tor-commits mailing list