February 2017 - tor-commits - lists.torproject.org

[tor/master] tweak 0276 changelog; copy it into the releasenotes
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 31b337d2b7825da5472158ea10422d8419b9207e Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Dec 10 10:44:52 2015 -0500 tweak 0276 changelog; copy it into the releasenotes --- ChangeLog | 2 +- ReleaseNotes | 35 +++++++++++++++++++++++++++++++++++ 2 files changed, 36 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 44e9586..64c86ff 100644 --- a/ChangeLog +++ b/ChangeLog @@ -2,7 +2,7 @@ Changes in version 0.2.7.6 - 2015-12-10 Tor version 0.2.7.6 fixes a major bug in entry guard selection, as well as a minor bug in hidden service reliability. - o Major bugfixes: + o Major bugfixes (guard selection): - Actually look at the Guard flag when selecting a new directory guard. When we implemented the directory guard design, we accidentally started treating all relays as if they have the Guard diff --git a/ReleaseNotes b/ReleaseNotes index a07b321..a399a21 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,41 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.7.6 - 2015-12-10 + Tor version 0.2.7.6 fixes a major bug in entry guard selection, as + well as a minor bug in hidden service reliability. + + o Major bugfixes (guard selection): + - Actually look at the Guard flag when selecting a new directory + guard. When we implemented the directory guard design, we + accidentally started treating all relays as if they have the Guard + flag during guard selection, leading to weaker anonymity and worse + performance. Fixes bug 17222; bugfix on 0.2.4.8-alpha. Discovered + by Mohsen Imani. + + o Minor features (geoip): + - Update geoip and geoip6 to the December 1 2015 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (compilation): + - When checking for net/pfvar.h, include netinet/in.h if possible. + This fixes transparent proxy detection on OpenBSD. Fixes bug + 17551; bugfix on 0.1.2.1-alpha. Patch from "rubiate". + - Fix a compilation warning with Clang 3.6: Do not check the + presence of an address which can never be NULL. Fixes bug 17781. + + o Minor bugfixes (correctness): + - When displaying an IPv6 exit policy, include the mask bits + correctly even when the number is greater than 31. Fixes bug + 16056; bugfix on 0.2.4.7-alpha. Patch from "gturner". + - The wrong list was used when looking up expired intro points in a + rend service object, causing what we think could be reachability + issues for hidden services, and triggering a BUG log. Fixes bug + 16702; bugfix on 0.2.7.2-alpha. + - Fix undefined behavior in the tor_cert_checksig function. Fixes + bug 17722; bugfix on 0.2.7.2-alpha. + + Changes in version 0.2.7.5 - 2015-11-20 The Tor 0.2.7 release series is dedicated to the memory of Tor user and privacy advocate Caspar Bowden (1961-2015). Caspar worked

1 0

[tor/master] Merge branch 'maint-0.2.7' into release-0.2.7
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit e46ea4a75da3fafcb74e8d50faa3df116e1c8eda Merge: 4dd7a55 741d2dc Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 13 08:41:42 2015 -0500 Merge branch 'maint-0.2.7' into release-0.2.7 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/master] Merge branch 'maint-0.2.7' into release-0.2.7
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit f01f8e18b80b195f49cb48561b85f6eaae85e8cb Merge: 6f3f753 7fb19f1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Dec 10 10:05:08 2015 -0500 Merge branch 'maint-0.2.7' into release-0.2.7 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/master] Merge branch 'maint-0.2.7' into release-0.2.7
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit e0fa07c06fc1a8761b5f4b33028f157a130831a4 Merge: b6024ec 18ee193 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 20 10:27:51 2015 -0500 Merge branch 'maint-0.2.7' into release-0.2.7 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/master] Revert "Revert "Add hidserv-stats filname to our sandbox filter""
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 3f5a710958bfa2e6d1c2a6d78b0718514f2f7350 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 7 10:13:20 2017 -0500 Revert "Revert "Add hidserv-stats filname to our sandbox filter"" This reverts commit 5446cb8d3d536e9bc737de6d9286bd4b4b185661. The underlying revert was done in 0.2.6, since we aren't backporting seccomp2 loosening fixes to 0.2.6. But the fix (for 17354) already went out in 0.2.7.4-rc, so we shouldn't revert it in 0.2.7. --- changes/bug17354 | 4 ++++ src/or/main.c | 1 + 2 files changed, 5 insertions(+) diff --git a/changes/bug17354 b/changes/bug17354 new file mode 100644 index 0000000..53da007 --- /dev/null +++ b/changes/bug17354 @@ -0,0 +1,4 @@ + o Minor bugfixes (sandbox): + - Add the "hidserv-stats" filename to our sandbox filter for the + HiddenServiceStatistics option to work properly. Fixes bug 17354; + bugfix on tor-0.2.6.2-alpha~54^2~1. Patch from David Goulet. diff --git a/src/or/main.c b/src/or/main.c index 693d13c..9b3dbb5 100644 --- a/src/or/main.c +++ b/src/or/main.c @@ -3200,6 +3200,7 @@ sandbox_init_filter(void) RENAME_SUFFIX2("stats", "exit-stats", ".tmp"); RENAME_SUFFIX2("stats", "buffer-stats", ".tmp"); RENAME_SUFFIX2("stats", "conn-stats", ".tmp"); + RENAME_SUFFIX2("stats", "hidserv-stats", ".tmp"); RENAME_SUFFIX("hashed-fingerprint", ".tmp"); RENAME_SUFFIX("router-stability", ".tmp");

1 0

[tor/master] Merge branch 'maint-0.2.7' into release-0.2.7
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit b2a53e8ca910391a10451860a1aaf66b3c207f50 Merge: e0fa07c c6a3375 Author: Roger Dingledine <arma(a)torproject.org> Date: Thu Dec 10 04:12:10 2015 -0500 Merge branch 'maint-0.2.7' into release-0.2.7 changes/bug16056 | 4 + changes/bug16702 | 4 + changes/bug17551 | 4 + changes/bug17722 | 3 + changes/bug17772 | 7 + changes/bug17781 | 3 + changes/geoip-december2015 | 4 + configure.ac | 3 + src/config/geoip | 4547 ++++++++++++++++++++++++++++++++------------ src/config/geoip6 | 2580 +++++++++++++++++++++---- src/or/policies.c | 6 +- src/or/rendservice.c | 3 +- src/or/routerlist.c | 10 +- src/or/torcert.c | 6 +- 14 files changed, 5558 insertions(+), 1626 deletions(-)

1 0

[tor/master] Use the correct bug #. For real this time. Thanks again, skruffy
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 7a489a638911012069981702065b952a5809d249 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Dec 10 11:20:24 2015 -0500 Use the correct bug #. For real this time. Thanks again, skruffy --- ChangeLog | 2 +- ReleaseNotes | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index bfa5673..a71f900 100644 --- a/ChangeLog +++ b/ChangeLog @@ -7,7 +7,7 @@ Changes in version 0.2.7.6 - 2015-12-10 guard. When we implemented the directory guard design, we accidentally started treating all relays as if they have the Guard flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17722; bugfix on 0.2.4.8-alpha. Discovered + performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered by Mohsen Imani. o Minor features (geoip): diff --git a/ReleaseNotes b/ReleaseNotes index 8fe6359..f16a46a 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -11,7 +11,7 @@ Changes in version 0.2.7.6 - 2015-12-10 guard. When we implemented the directory guard design, we accidentally started treating all relays as if they have the Guard flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17722; bugfix on 0.2.4.8-alpha. Discovered + performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered by Mohsen Imani. o Minor features (geoip):

1 0

[tor/master] Use the correct bug #. Thanks, skruffy
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 1979414f0fb225e6c04f2ae473b47674c3b23510 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Dec 10 11:08:35 2015 -0500 Use the correct bug #. Thanks, skruffy --- ChangeLog | 2 +- ReleaseNotes | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 64c86ff..bfa5673 100644 --- a/ChangeLog +++ b/ChangeLog @@ -7,7 +7,7 @@ Changes in version 0.2.7.6 - 2015-12-10 guard. When we implemented the directory guard design, we accidentally started treating all relays as if they have the Guard flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17222; bugfix on 0.2.4.8-alpha. Discovered + performance. Fixes bug 17722; bugfix on 0.2.4.8-alpha. Discovered by Mohsen Imani. o Minor features (geoip): diff --git a/ReleaseNotes b/ReleaseNotes index a399a21..8fe6359 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -11,7 +11,7 @@ Changes in version 0.2.7.6 - 2015-12-10 guard. When we implemented the directory guard design, we accidentally started treating all relays as if they have the Guard flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17222; bugfix on 0.2.4.8-alpha. Discovered + performance. Fixes bug 17722; bugfix on 0.2.4.8-alpha. Discovered by Mohsen Imani. o Minor features (geoip):

1 0

[tor/master] add a dedication paragraph; reflow another.
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 0549c019675840171fb764c8bb593309534ccadc Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 13 08:58:18 2015 -0500 add a dedication paragraph; reflow another. --- ReleaseNotes | 23 ++++++++++++++++++----- 1 file changed, 18 insertions(+), 5 deletions(-) diff --git a/ReleaseNotes b/ReleaseNotes index ef173af..3540497 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -1,19 +1,32 @@ - This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. Changes in version 0.2.7.5 - 2015-11-1? + The Tor 0.2.7 release series is dedicated to the memory of Tor user + and privacy advocate Caspar Bowden (1961-2015). Caspar worked + tirelessly to advocate human rights regardless of national borders, + and oppose the encroachments of mass surveillance. He opposed national + exceptionalism; he brought clarity to legal and policy debates; he + understood and predicted the impact of mass surveillance on the world; + and he laid the groundwork for resisting it. While serving on the Tor + Project's board of directors, he brought us his uncompromising focus + on technical excellence in the service of humankind. Caspar was an + inimitable force for good and a wonderful friend. He was kind, + humorous, generous, gallant, and believed we should protect one + another without exception. We honor him here for his ideals, his + efforts, and his accomplishments. Please honor his memory with works + that would make him proud. + Tor 0.2.7.5 is the first stable release in the Tor 0.2.7 series. The 0.2.7 series adds a more secure identity key type for relays, improves cryptography performance, resolves several longstanding hidden-service performance issues, improves controller support for hidden services, and includes small bugfixes and performance - improvements throughout the program. This release series also - includes more tests than before, and significant simplifications - to which parts of Tor invoke which others. For a full list of - changes, see below. + improvements throughout the program. This release series also includes + more tests than before, and significant simplifications to which parts + of Tor invoke which others. For a full list of changes, see below. o New system requirements: - Tor no longer includes workarounds to support Libevent versions

1 0

[tor/master] fold in the changes entries
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 9236e504155eb2a32b34f94fd8d7aa80b47d8636 Author: Roger Dingledine <arma(a)torproject.org> Date: Thu Dec 10 08:14:58 2015 -0500 fold in the changes entries --- ChangeLog | 35 +++++++++++++++++++++++++++++++++++ changes/bug16056 | 4 ---- changes/bug16702 | 4 ---- changes/bug17551 | 4 ---- changes/bug17722 | 3 --- changes/bug17772 | 7 ------- changes/bug17781 | 3 --- changes/geoip-december2015 | 4 ---- 8 files changed, 35 insertions(+), 29 deletions(-) diff --git a/ChangeLog b/ChangeLog index acfa034..9326673 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,38 @@ +Changes in version 0.2.7.6 - 2015-12-10 + Tor version 0.2.7.6 fixes a major bug in entry guard selection, as + well as a minor bug in hidden service reliability. + + o Major bugfixes: + - Actually look at the Guard flag when selecting a new directory + guard. When we implemented the directory guard design, we + accidentally started treating all relays as if they have the Guard + flag during guard selection, leading to weaker anonymity and worse + performance. Fixes bug 17222; bugfix on 0.2.4.8-alpha. Discovered + by Mohsen Imani. + + o Minor bugfixes (correctness): + - When displaying an IPv6 exit policy, include the mask bits correctly + even when the number is greater than 31. Fixes bug 16056; bugfix on + 0.2.4.7-alpha. Patch from "gturner". + - The wrong list was used when looking up expired intro points in + a rend service object, causing what we think could be reachability + issues for hidden services, and triggering a BUG log. Fixes bug + 16702; bugfix on 0.2.7.2-alpha. + - Fix undefined behavior in the tor_cert_checksig function. Fixes bug + 17722; bugfix on 0.2.7.2-alpha. + + o Minor bugfixes (compilation): + - When checking for net/pfvar.h, include netinet/in.h if possible. + This fixes transparent proxy detection on OpenBSD. Fixes bug + 17551; bugfix on 0.1.2.1-alpha. Patch from "rubiate". + - Fix a compilation warning with Clang 3.6: Do not check the + presence of an address which can never be NULL. Fixes bug 17781. + + o Minor features: + - Update geoip and geoip6 to the December 1 2015 Maxmind GeoLite2 + Country database. + + Changes in version 0.2.7.5 - 2015-11-20 The Tor 0.2.7 release series is dedicated to the memory of Tor user and privacy advocate Caspar Bowden (1961-2015). Caspar worked diff --git a/changes/bug16056 b/changes/bug16056 deleted file mode 100644 index e3311c0..0000000 --- a/changes/bug16056 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (relay, IPv6): - - When displaying an IPv6 exit policy, include the mask bits correctly - even when the number is greater than 31. Fixes bug 16056; bugfix on - 0.2.4.7-alpha. Patch from "gturner". \ No newline at end of file diff --git a/changes/bug16702 b/changes/bug16702 deleted file mode 100644 index 5de36cd..0000000 --- a/changes/bug16702 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (hidden service) - - The wrong list was used when looking up expired intro points in a rend - service object causing what we think could be reachability issues and - triggering a BUG log. Fixes 16702; bugfix on tor-0.2.7.2-alpha. diff --git a/changes/bug17551 b/changes/bug17551 deleted file mode 100644 index 27e4679..0000000 --- a/changes/bug17551 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (compilation): - - When checking for net/pfvar.h, include netinet/in.h if possible. - This fixes transparent proxy detection on OpenBSD. Fixes bug - 17551; bugfix on 0.1.2.1-alpha. Patch from "rubiate". diff --git a/changes/bug17722 b/changes/bug17722 deleted file mode 100644 index 1b18d4a..0000000 --- a/changes/bug17722 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (code correctness) - - Fix undefined behavior in the tor_cert_checksig function. Fixes bug - 17722; bugfix on tor-0.2.7.2-alpha. diff --git a/changes/bug17772 b/changes/bug17772 deleted file mode 100644 index 54d457c..0000000 --- a/changes/bug17772 +++ /dev/null @@ -1,7 +0,0 @@ - o Major bugfixes (guard selection): - - Actually look at the Guard flag when selecting a new directory - guard. When we implemented the directory guard design, we - accidentally started treating all relays as if they have the Guard - flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17222; bugfix on 0.2.4.8-alpha. Discovered - by Mohsen Imani. diff --git a/changes/bug17781 b/changes/bug17781 deleted file mode 100644 index 01ed231..0000000 --- a/changes/bug17781 +++ /dev/null @@ -1,3 +0,0 @@ - o Compilation fixes: - - Fix a compilation warning with Clang 3.6: Do not check the - presence of an address which can never be NULL. Fixes bug 17781. diff --git a/changes/geoip-december2015 b/changes/geoip-december2015 deleted file mode 100644 index 597bcc9..0000000 --- a/changes/geoip-december2015 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the December 1 2015 Maxmind GeoLite2 - Country database. -

1 0