tor-commits January 2017

tor-commits@lists.torproject.org

22 participants
1796 discussions

[tor-browser-bundle/maint-6.5] Picking up new tor tag
by gk＠torproject.org 23 Jan '17

23 Jan '17

commit 536b7cf8cfc2d065a2ee3564b9a4148f52a0e7d4 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jan 23 15:38:59 2017 +0000 Picking up new tor tag --- Bundle-Data/Docs/ChangeLog.txt | 2 +- gitian/versions | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index f58a62f..ff6267c 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,7 +1,7 @@ Tor Browser 6.5 -- January 24 2017 * All Platforms * Update Firefox to 45.7.0esr - * Tor to 0.2.9.8 + * Tor to 0.2.9.9 * OpenSSL to 1.0.2j * Update Torbutton to 1.9.6.12 * Bug 16622: Timezone spoofing moved to tor-browser.git diff --git a/gitian/versions b/gitian/versions index 691168d..73bbc83 100755 --- a/gitian/versions +++ b/gitian/versions @@ -15,7 +15,7 @@ FIREFOX_VERSION=45.7.0esr TORBROWSER_UPDATE_CHANNEL=release TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 -TOR_TAG=tor-0.2.9.8 +TOR_TAG=tor-0.2.9.9 TORLAUNCHER_TAG=0.2.10.3 TORBUTTON_TAG=1.9.6.12 HTTPSE_TAG=5.2.9

1 0

[tor/master] forward-port the 0.2.9.9 changelog stanza
by arma＠torproject.org 23 Jan '17

23 Jan '17

commit 0668d29354a874dc2b7e162f6fd9d34653fdd8ed Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Jan 23 09:42:02 2017 -0500 forward-port the 0.2.9.9 changelog stanza --- ChangeLog | 51 +++++++++++++++++++++++++++++++++++++++++++++++---- ReleaseNotes | 42 ++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 89 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index 9827884..59fdc51 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,9 +1,9 @@ Changes in version 0.3.0.2-alpha - 2017-01-23 Tor 0.3.0.2-alpha fixes a denial-of-service bug where an attacker could - cause relays and clients (including hidden services) to crash, even if - they were not built with the --enable-expensive-hardening option. - This bug affects all 0.2.9.x versions, and also affects 0.3.0.1-alpha: - all relays running an affected version should upgrade. + cause relays and clients to crash, even if they were not built with + the --enable-expensive-hardening option. This bug affects all 0.2.9.x + versions, and also affects 0.3.0.1-alpha: all relays running an affected + version should upgrade. Tor 0.3.0.2-alpha also improves how exit relays and clients handle DNS time-to-live values, makes directory authorities enforce the 1-to-1 @@ -226,6 +226,49 @@ Changes in version 0.3.0.2-alpha - 2017-01-23 HiddenService options. Closes ticket 21058. +Changes in version 0.2.9.9 - 2017-01-23 + Tor 0.2.9.9 fixes a denial-of-service bug where an attacker could + cause relays and clients to crash, even if they were not built with + the --enable-expensive-hardening option. This bug affects all 0.2.9.x + versions, and also affects 0.3.0.1-alpha: all relays running an affected + version should upgrade. + + This release also resolves a client-side onion service reachability + bug, and resolves a pair of small portability issues. + + o Major bugfixes (security): + - Downgrade the "-ftrapv" option from "always on" to "only on when + --enable-expensive-hardening is provided." This hardening option, + like others, can turn survivable bugs into crashes -- and having + it on by default made a (relatively harmless) integer overflow bug + into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); + bugfix on 0.2.9.1-alpha. + + o Major bugfixes (client, onion service): + - Fix a client-side onion service reachability bug, where multiple + socks requests to an onion service (or a single slow request) + could cause us to mistakenly mark some of the service's + introduction points as failed, and we cache that failure so + eventually we run out and can't reach the service. Also resolves a + mysterious "Remote server sent bogus reason code 65021" log + warning. The bug was introduced in ticket 17218, where we tried to + remember the circuit end reason as a uint16_t, which mangled + negative values. Partially fixes bug 21056 and fixes bug 20307; + bugfix on 0.2.8.1-alpha. + + o Minor features (geoip): + - Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (portability): + - Avoid crashing when Tor is built using headers that contain + CLOCK_MONOTONIC_COARSE, but then tries to run on an older kernel + without CLOCK_MONOTONIC_COARSE. Fixes bug 21035; bugfix + on 0.2.9.1-alpha. + - Fix Libevent detection on platforms without Libevent 1 headers + installed. Fixes bug 21051; bugfix on 0.2.9.1-alpha. + + Changes in version 0.3.0.1-alpha - 2016-12-19 Tor 0.3.0.1-alpha is the first alpha release in the 0.3.0 development series. It strengthens Tor's link and circuit handshakes by diff --git a/ReleaseNotes b/ReleaseNotes index 23fbfcf..d6adbe5 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,48 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.9.9 - 2017-01-23 + Tor 0.2.9.9 fixes a denial-of-service bug where an attacker could + cause relays and clients to crash, even if they were not built with + the --enable-expensive-hardening option. This bug affects all 0.2.9.x + versions, and also affects 0.3.0.1-alpha: all relays running an affected + version should upgrade. + + This release also resolves a client-side onion service reachability + bug, and resolves a pair of small portability issues. + + o Major bugfixes (security): + - Downgrade the "-ftrapv" option from "always on" to "only on when + --enable-expensive-hardening is provided." This hardening option, + like others, can turn survivable bugs into crashes -- and having + it on by default made a (relatively harmless) integer overflow bug + into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); + bugfix on 0.2.9.1-alpha. + + o Major bugfixes (client, onion service): + - Fix a client-side onion service reachability bug, where multiple + socks requests to an onion service (or a single slow request) + could cause us to mistakenly mark some of the service's + introduction points as failed, and we cache that failure so + eventually we run out and can't reach the service. Also resolves a + mysterious "Remote server sent bogus reason code 65021" log + warning. The bug was introduced in ticket 17218, where we tried to + remember the circuit end reason as a uint16_t, which mangled + negative values. Partially fixes bug 21056 and fixes bug 20307; + bugfix on 0.2.8.1-alpha. + + o Minor features (geoip): + - Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (portability): + - Avoid crashing when Tor is built using headers that contain + CLOCK_MONOTONIC_COARSE, but then tries to run on an older kernel + without CLOCK_MONOTONIC_COARSE. Fixes bug 21035; bugfix + on 0.2.9.1-alpha. + - Fix Libevent detection on platforms without Libevent 1 headers + installed. Fixes bug 21051; bugfix on 0.2.9.1-alpha. + Changes in version 0.2.8.12 - 2016-12-19 Tor 0.2.8.12 backports a fix for a medium-severity issue (bug 21018

1 0

[tor/release-0.2.9] minor tweaks to the release blurb
by arma＠torproject.org 23 Jan '17

23 Jan '17

commit 56788a2489127072d513cf4baf35a8ff475f3c7b Author: Roger Dingledine <arma(a)torproject.org> Date: Mon Jan 23 09:37:06 2017 -0500 minor tweaks to the release blurb --- ChangeLog | 14 +++++++------- ReleaseNotes | 42 ++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 49 insertions(+), 7 deletions(-) diff --git a/ChangeLog b/ChangeLog index c372631dc..512c245 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,18 +1,18 @@ Changes in version 0.2.9.9 - 2017-01-23 Tor 0.2.9.9 fixes a denial-of-service bug where an attacker could - cause relays and clients (including hidden services) to crash, even if - they were not built with the --enable-expensive-hardening option. This - bug affects all 0.2.9.x versions, and also affects 0.3.0.1-alpha: all - relays running an affected version should upgrade. + cause relays and clients to crash, even if they were not built with + the --enable-expensive-hardening option. This bug affects all 0.2.9.x + versions, and also affects 0.3.0.1-alpha: all relays running an affected + version should upgrade. This release also resolves a client-side onion service reachability - bug, and relays a pair of small portability issues. + bug, and resolves a pair of small portability issues. o Major bugfixes (security): - Downgrade the "-ftrapv" option from "always on" to "only on when --enable-expensive-hardening is provided." This hardening option, - like others, can turn survivable bugs into crashes--and having it - on by default made a (relatively harmless) integer overflow bug + like others, can turn survivable bugs into crashes -- and having + it on by default made a (relatively harmless) integer overflow bug into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on 0.2.9.1-alpha. diff --git a/ReleaseNotes b/ReleaseNotes index ee58f6f..30b2268 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,48 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.9.9 - 2017-01-23 + Tor 0.2.9.9 fixes a denial-of-service bug where an attacker could + cause relays and clients to crash, even if they were not built with + the --enable-expensive-hardening option. This bug affects all 0.2.9.x + versions, and also affects 0.3.0.1-alpha: all relays running an affected + version should upgrade. + + This release also resolves a client-side onion service reachability + bug, and resolves a pair of small portability issues. + + o Major bugfixes (security): + - Downgrade the "-ftrapv" option from "always on" to "only on when + --enable-expensive-hardening is provided." This hardening option, + like others, can turn survivable bugs into crashes -- and having + it on by default made a (relatively harmless) integer overflow bug + into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); + bugfix on 0.2.9.1-alpha. + + o Major bugfixes (client, onion service): + - Fix a client-side onion service reachability bug, where multiple + socks requests to an onion service (or a single slow request) + could cause us to mistakenly mark some of the service's + introduction points as failed, and we cache that failure so + eventually we run out and can't reach the service. Also resolves a + mysterious "Remote server sent bogus reason code 65021" log + warning. The bug was introduced in ticket 17218, where we tried to + remember the circuit end reason as a uint16_t, which mangled + negative values. Partially fixes bug 21056 and fixes bug 20307; + bugfix on 0.2.8.1-alpha. + + o Minor features (geoip): + - Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (portability): + - Avoid crashing when Tor is built using headers that contain + CLOCK_MONOTONIC_COARSE, but then tries to run on an older kernel + without CLOCK_MONOTONIC_COARSE. Fixes bug 21035; bugfix + on 0.2.9.1-alpha. + - Fix Libevent detection on platforms without Libevent 1 headers + installed. Fixes bug 21051; bugfix on 0.2.9.1-alpha. + Changes in version 0.2.9.8 - 2016-12-19 Tor 0.2.9.8 is the first stable release of the Tor 0.2.9 series.

1 0

[tor/master] forward-port trove-2017-001 entry and blurb.
by nickm＠torproject.org 23 Jan '17

23 Jan '17

commit e760c1b2915634d98ff74e29209e176e4cc28635 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jan 23 09:16:36 2017 -0500 forward-port trove-2017-001 entry and blurb. --- ChangeLog | 16 +++++++++++++++- changes/trove-2017-001 | 8 -------- 2 files changed, 15 insertions(+), 9 deletions(-) diff --git a/ChangeLog b/ChangeLog index 3403531..9827884 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,10 +1,24 @@ Changes in version 0.3.0.2-alpha - 2017-01-23 - Tor 0.3.0.2-alpha improves how exit relays and clients handle DNS + Tor 0.3.0.2-alpha fixes a denial-of-service bug where an attacker could + cause relays and clients (including hidden services) to crash, even if + they were not built with the --enable-expensive-hardening option. + This bug affects all 0.2.9.x versions, and also affects 0.3.0.1-alpha: + all relays running an affected version should upgrade. + + Tor 0.3.0.2-alpha also improves how exit relays and clients handle DNS time-to-live values, makes directory authorities enforce the 1-to-1 mapping of relay RSA identity keys to ED25519 identity keys, fixes a client-side onion service reachability bug, does better at selecting the set of fallback directories, and more. + o Major bugfixes (security, also in 0.2.9.9): + - Downgrade the "-ftrapv" option from "always on" to "only on when + --enable-expensive-hardening is provided." This hardening option, like + others, can turn survivable bugs into crashes--and having it on by + default made a (relatively harmless) integer overflow bug into a + denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on + 0.2.9.1-alpha. + o Major features (security): - Change the algorithm used to decide DNS TTLs on client and server side, to better resist DNS-based correlation attacks like the diff --git a/changes/trove-2017-001 b/changes/trove-2017-001 deleted file mode 100644 index 5187e6d..0000000 --- a/changes/trove-2017-001 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes (security): - - Downgrade the "-ftrapv" option from "always on" to "only on when - --enable-expensive-hardening is provided." This hardening option, like - others, can turn survivable bugs into crashes--and having it on by - default made a (relatively harmless) integer overflow bug into a - denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on - 0.2.9.1-alpha. -

1 0

[tor/master] Merge branch 'maint-0.2.9'
by nickm＠torproject.org 23 Jan '17

23 Jan '17

commit 4a93ed1ede4c725cc4212d2f2d6df460df1c9610 Merge: beaeee2 7675166 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jan 23 08:55:40 2017 -0500 Merge branch 'maint-0.2.9' changes/trove-2017-001 | 8 ++++++++ configure.ac | 15 ++++++++++----- 2 files changed, 18 insertions(+), 5 deletions(-)

1 0

[tor/master] Remove an x
by nickm＠torproject.org 23 Jan '17

23 Jan '17

commit 55eca7a3746072c97fe1ad9d304bfd813cce47fb Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jan 23 09:09:23 2017 -0500 Remove an x --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index cd3357b..3403531 100644 --- a/ChangeLog +++ b/ChangeLog @@ -175,7 +175,7 @@ Changes in version 0.3.0.2-alpha - 2017-01-23 - Fix a memory leak when configuring hidden services. Fixes bug 20987; bugfix on 0.3.0.1-alpha. - o Minor bugfixes (portability, also in 0.2.9.9x): + o Minor bugfixes (portability, also in 0.2.9.9): - Avoid crashing when Tor is built using headers that contain CLOCK_MONOTONIC_COARSE, but then tries to run on an older kernel without CLOCK_MONOTONIC_COARSE. Fixes bug 21035; bugfix

1 0

[tor/release-0.2.9] TROVE-2017-001 : move -ftrapv back into --expensive-hardening.
by nickm＠torproject.org 23 Jan '17

23 Jan '17

commit 767516680c03dfcd145033eff66fa3b0ca7d4b5b Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Jan 22 11:32:54 2017 -0500 TROVE-2017-001 : move -ftrapv back into --expensive-hardening. --- changes/trove-2017-001 | 8 ++++++++ configure.ac | 15 ++++++++++----- 2 files changed, 18 insertions(+), 5 deletions(-) diff --git a/changes/trove-2017-001 b/changes/trove-2017-001 new file mode 100644 index 0000000..5187e6d --- /dev/null +++ b/changes/trove-2017-001 @@ -0,0 +1,8 @@ + o Major bugfixes (security): + - Downgrade the "-ftrapv" option from "always on" to "only on when + --enable-expensive-hardening is provided." This hardening option, like + others, can turn survivable bugs into crashes--and having it on by + default made a (relatively harmless) integer overflow bug into a + denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on + 0.2.9.1-alpha. + diff --git a/configure.ac b/configure.ac index 1e226a4..1506373 100644 --- a/configure.ac +++ b/configure.ac @@ -761,14 +761,15 @@ m4_ifdef([AS_VAR_IF],[ TOR_CHECK_CFLAGS(-fPIE) TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check") fi - TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true) TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true) - if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then - AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.]) - fi fi if test "x$enable_expensive_hardening" = "xyes"; then + TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true) + if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then + AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.]) + fi + if test "$tor_cv_cflags__ftrapv" != "yes"; then AC_MSG_ERROR([You requested expensive hardening, but the compiler does not seem to support -ftrapv.]) fi @@ -1819,7 +1820,7 @@ if test "x$enable_gcc_warnings_advisory" != "xno"; then -Wstatic-float-init -Wstatic-in-inline -Wstatic-local-in-inline - -Wstrict-overflow=2 + -Wstrict-overflow=1 -Wstring-compare -Wstring-conversion -Wstrlcpy-strlcat-size @@ -1864,6 +1865,10 @@ if test "x$enable_gcc_warnings_advisory" != "xno"; then -Wzero-length-array ], [ TOR_CHECK_CFLAGS([warning_flag]) ]) +dnl We should re-enable this in some later version. Clang doesn't +dnl mind, but it causes trouble with GCC. +dnl -Wstrict-overflow=2 + dnl These seem to require annotations that we don't currently use, dnl and they give false positives in our pthreads wrappers. (Clang 4) dnl -Wthread-safety

1 0

[tor/release-0.2.9] Merge branch 'maint-0.2.9' into release-0.2.9
by nickm＠torproject.org 23 Jan '17

23 Jan '17

commit 84a9ff0feb4b5ae3338bea2b0a437d812f4a357a Merge: 808e52d 7675166 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jan 23 08:55:34 2017 -0500 Merge branch 'maint-0.2.9' into release-0.2.9 changes/trove-2017-001 | 8 ++++++++ configure.ac | 15 ++++++++++----- 2 files changed, 18 insertions(+), 5 deletions(-)

1 0

[tor/release-0.2.9] Try to write a trove-2017-001 blurb
by nickm＠torproject.org 23 Jan '17

23 Jan '17

commit 956d08fe872958a6a2d67de095c70dcc91d78648 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jan 23 09:13:19 2017 -0500 Try to write a trove-2017-001 blurb --- ChangeLog | 17 ++++++++++++++++- changes/trove-2017-001 | 8 -------- 2 files changed, 16 insertions(+), 9 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5fe4b5d..c372631dc 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,20 @@ Changes in version 0.2.9.9 - 2017-01-23 - Blurb here + Tor 0.2.9.9 fixes a denial-of-service bug where an attacker could + cause relays and clients (including hidden services) to crash, even if + they were not built with the --enable-expensive-hardening option. This + bug affects all 0.2.9.x versions, and also affects 0.3.0.1-alpha: all + relays running an affected version should upgrade. + + This release also resolves a client-side onion service reachability + bug, and relays a pair of small portability issues. + + o Major bugfixes (security): + - Downgrade the "-ftrapv" option from "always on" to "only on when + --enable-expensive-hardening is provided." This hardening option, + like others, can turn survivable bugs into crashes--and having it + on by default made a (relatively harmless) integer overflow bug + into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); + bugfix on 0.2.9.1-alpha. o Major bugfixes (client, onion service): - Fix a client-side onion service reachability bug, where multiple diff --git a/changes/trove-2017-001 b/changes/trove-2017-001 deleted file mode 100644 index 5187e6d..0000000 --- a/changes/trove-2017-001 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes (security): - - Downgrade the "-ftrapv" option from "always on" to "only on when - --enable-expensive-hardening is provided." This hardening option, like - others, can turn survivable bugs into crashes--and having it on by - default made a (relatively harmless) integer overflow bug into a - denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on - 0.2.9.1-alpha. -

1 0

[tor/maint-0.2.9] TROVE-2017-001 : move -ftrapv back into --expensive-hardening.
by nickm＠torproject.org 23 Jan '17

23 Jan '17

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits January 2017