From: Roger Dingledine Date: Fri, 28 Oct 2011 00:13:10 +0000 (-0400) Subject: slight correction on the already published changelog X-Git-Tag: tor-0.2.2.35~17 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=30722de8fafec4be7e6f1e4ad22d5cdf465b15f7;p=thirdparty%2Ftor.git slight correction on the already published changelog --- diff --git a/ChangeLog b/ChangeLog index db59365ec0..af378f51f6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -27,10 +27,10 @@ Changes in version 0.2.2.34 - 2011-10-26 o Privacy/anonymity fixes (clients): - Clients and bridges no longer send TLS certificate chains on - outgoing OR connections. Previously, each client or bridge - would use the same cert chain for all outgoing OR connections - for up to 24 hours, which allowed any relay that the client or - bridge contacted to determine which entry guards it is using. + outgoing OR connections. Previously, each client or bridge would + use the same cert chain for all outgoing OR connections until + its IP address changes, which allowed any relay that the client + or bridge contacted to determine which entry guards it is using. Fixes CVE-2011-2768. Bugfix on 0.0.9pre5; found by "frosty_un". - If a relay receives a CREATE_FAST cell on a TLS connection, it no longer considers that connection as suitable for satisfying a diff --git a/ReleaseNotes b/ReleaseNotes index 1fec5709fc..5ed2539497 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -32,10 +32,10 @@ Changes in version 0.2.2.34 - 2011-10-26 o Privacy/anonymity fixes (clients): - Clients and bridges no longer send TLS certificate chains on - outgoing OR connections. Previously, each client or bridge - would use the same cert chain for all outgoing OR connections - for up to 24 hours, which allowed any relay that the client or - bridge contacted to determine which entry guards it is using. + outgoing OR connections. Previously, each client or bridge would + use the same cert chain for all outgoing OR connections until + its IP address changes, which allowed any relay that the client + or bridge contacted to determine which entry guards it is using. Fixes CVE-2011-2768. Bugfix on 0.0.9pre5; found by "frosty_un". - If a relay receives a CREATE_FAST cell on a TLS connection, it no longer considers that connection as suitable for satisfying a