- Adds next-generation onion services[1] - Lots of fixes, e.g., for CVE-2017-8821, CVE-2017-8820, CVE-2017-8823, CVE-2017-8819, CVE-2017-8822, CVE-2017-8822 - Adds new option `NoExec` to disallow exec syscalls
- Adds next-generation onion services[1] - Lots of fixes, e.g., for CVE-2017-8821, CVE-2017-8820, CVE-2017-8823, CVE-2017-8819, CVE-2017-8822, CVE-2017-8822 - Adds new option `NoExec` to disallow exec syscalls