February 2017 - tor-commits - lists.torproject.org

[tor/release-0.2.8] Sort changelog in release-0.2.8
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit f5951b7320e9b7eb5eca09aad79fa582603b5589 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:11:48 2017 -0500 Sort changelog in release-0.2.8 --- ChangeLog | 1 - 1 file changed, 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 5b7f27d..14474a6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,7 +9,6 @@ Changes in version 0.2.8.13 - 2017-03-?? any fixes for the Tor 0.2.8.x series after 1 Jan 2018. If you need a Tor release series with longer-term support, we recommend Tor 0.2.9.x. - o Major bugfixes (parsing, backported from 0.3.0.4-rc): - Fix an integer underflow bug when comparing malformed Tor versions. This bug could crash Tor when built with

1 0

[tor/release-0.2.6] Sort changelog in release-0.2.6
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 249126ff13d820a3f695ddc2c5c46611c9ca8af3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:11:41 2017 -0500 Sort changelog in release-0.2.6 --- ChangeLog | 100 +++++++++++++++++++++++++++++++------------------------------- 1 file changed, 50 insertions(+), 50 deletions(-) diff --git a/ChangeLog b/ChangeLog index 83de1db..969a9eb 100644 --- a/ChangeLog +++ b/ChangeLog @@ -20,56 +20,6 @@ Changes in version 0.2.6.11 - 2017-03-?? it was changed on 18 November 2015. Closes task 17906. Patch by "teor". - o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): - - Avoid crashing when running as a DNS proxy. Fixes bug 16248; - bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". - - o Minor features (bug-resistance, backport from 0.2.8.2-alpha): - - Make Tor survive errors involving connections without a - corresponding event object. Previously we'd fail with an - assertion; now we produce a log message. Related to bug 16248. - - o Major bugfixes (security, correctness, backport from 0.2.7.4-rc): - - Fix an error that could cause us to read 4 bytes before the - beginning of an openssl string. This bug could be used to cause - Tor to crash on systems with unusual malloc implementations, or - systems with unusual hardening installed. Fixes bug 17404; bugfix - on 0.2.3.6-alpha. - - o Major bugfixes (guard selection, backport from 0.2.7.6): - - Actually look at the Guard flag when selecting a new directory - guard. When we implemented the directory guard design, we - accidentally started treating all relays as if they have the Guard - flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered - by Mohsen Imani. - - o Minor bugfixes (compilation, backport from 0.2.7.6) - - Fix a compilation warning with Clang 3.6: Do not check the - presence of an address which can never be NULL. Fixes bug 17781. - - o Minor features (geoip): - - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 - Country database. - - o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): - - Make memwipe() do nothing when passed a NULL pointer or buffer of - zero size. Check size argument to memwipe() for underflow. Fixes - bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", - patch by "teor". - - o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): - - Avoid a difficult-to-trigger heap corruption attack when extending - a smartlist to contain over 16GB of pointers. Fixes bug 18162; - bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. - Reported by Guido Vranken. - - o Major bugfixes (security, client, DNS proxy, backport from 0.2.8.3-alpha): - - Stop a crash that could occur when a client running with DNSPort - received a query with multiple address types, and the first - address type was not supported. Found and fixed by Scott Dial. - Fixes bug 18710; bugfix on 0.2.5.4-alpha. - o Major features (security fixes, backport from 0.2.9.4-alpha): - Prevent a class of security bugs caused by treating the contents of a buffer chunk as if they were a NUL-terminated string. At @@ -90,6 +40,37 @@ Changes in version 0.2.6.11 - 2017-03-?? 0.2.0.8-alpha. Found by using libFuzzer. Also tracked as TROVE- 2016-12-002 and as CVE-2016-1254. + o Major bugfixes (security, client, DNS proxy, backport from 0.2.8.3-alpha): + - Stop a crash that could occur when a client running with DNSPort + received a query with multiple address types, and the first + address type was not supported. Found and fixed by Scott Dial. + Fixes bug 18710; bugfix on 0.2.5.4-alpha. + + o Major bugfixes (security, correctness, backport from 0.2.7.4-rc): + - Fix an error that could cause us to read 4 bytes before the + beginning of an openssl string. This bug could be used to cause + Tor to crash on systems with unusual malloc implementations, or + systems with unusual hardening installed. Fixes bug 17404; bugfix + on 0.2.3.6-alpha. + + o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): + - Avoid a difficult-to-trigger heap corruption attack when extending + a smartlist to contain over 16GB of pointers. Fixes bug 18162; + bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. + Reported by Guido Vranken. + + o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): + - Avoid crashing when running as a DNS proxy. Fixes bug 16248; + bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". + + o Major bugfixes (guard selection, backport from 0.2.7.6): + - Actually look at the Guard flag when selecting a new directory + guard. When we implemented the directory guard design, we + accidentally started treating all relays as if they have the Guard + flag during guard selection, leading to weaker anonymity and worse + performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered + by Mohsen Imani. + o Major bugfixes (key management, backport from 0.2.8.3-alpha): - If OpenSSL fails to generate an RSA key, do not retain a dangling pointer to the previous (uninitialized) key value. The impact here @@ -107,6 +88,25 @@ Changes in version 0.2.6.11 - 2017-03-?? it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz. + o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): + - Make memwipe() do nothing when passed a NULL pointer or buffer of + zero size. Check size argument to memwipe() for underflow. Fixes + bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", + patch by "teor". + + o Minor features (bug-resistance, backport from 0.2.8.2-alpha): + - Make Tor survive errors involving connections without a + corresponding event object. Previously we'd fail with an + assertion; now we produce a log message. Related to bug 16248. + + o Minor features (geoip): + - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (compilation, backport from 0.2.7.6): + - Fix a compilation warning with Clang 3.6: Do not check the + presence of an address which can never be NULL. Fixes bug 17781. + Changes in version 0.2.6.10 - 2015-07-12 Tor version 0.2.6.10 fixes some significant stability and hidden

1 0

[tor/release-0.2.7-redux] Sort changelog in release-0.2.7-redux
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 1fe5097132704f35761110bbf55fd77cdb0669b2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:11:45 2017 -0500 Sort changelog in release-0.2.7-redux --- ChangeLog | 68 +++++++++++++++++++++++++++++++-------------------------------- 1 file changed, 33 insertions(+), 35 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5091e45..8b0bc09 100644 --- a/ChangeLog +++ b/ChangeLog @@ -20,34 +20,21 @@ Changes in version 0.2.7.7 - 2017-03-?? it was changed on 18 November 2015. Closes task 17906. Patch by "teor". - o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): - - Avoid crashing when running as a DNS proxy. Fixes bug 16248; - bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". - - o Minor features (bug-resistance, backport from 0.2.8.2-alpha): - - Make Tor survive errors involving connections without a - corresponding event object. Previously we'd fail with an - assertion; now we produce a log message. Related to bug 16248. - - o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): - - Make memwipe() do nothing when passed a NULL pointer or buffer of - zero size. Check size argument to memwipe() for underflow. Fixes - bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", - patch by "teor". - - o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): - - Avoid a difficult-to-trigger heap corruption attack when extending - a smartlist to contain over 16GB of pointers. Fixes bug 18162; - bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. - Reported by Guido Vranken. - + o Major bugfixes (parsing, security, backport from 0.2.9.8): + - Fix a bug in parsing that could cause clients to read a single + byte past the end of an allocated region. This bug could be used + to cause hardened clients (built with --enable-expensive-hardening) + to crash if they tried to visit a hostile hidden service. Non- + hardened clients are only affected depending on the details of + their platform's memory allocator. Fixes bug 21018; bugfix on + 0.2.0.8-alpha. Found by using libFuzzer. Also tracked as TROVE- + 2016-12-002 and as CVE-2016-1254. o Major bugfixes (security, client, DNS proxy, backport from 0.2.8.3-alpha): - Stop a crash that could occur when a client running with DNSPort received a query with multiple address types, and the first address type was not supported. Found and fixed by Scott Dial. Fixes bug 18710; bugfix on 0.2.5.4-alpha. - - Prevent a class of security bugs caused by treating the contents of a buffer chunk as if they were a NUL-terminated string. At least one such bug seems to be present in all currently used @@ -57,15 +44,15 @@ Changes in version 0.2.7.7 - 2017-03-?? though we should still fix them as they occur. Closes ticket 20384 (TROVE-2016-10-001). - o Major bugfixes (parsing, security, backport from 0.2.9.8): - - Fix a bug in parsing that could cause clients to read a single - byte past the end of an allocated region. This bug could be used - to cause hardened clients (built with --enable-expensive-hardening) - to crash if they tried to visit a hostile hidden service. Non- - hardened clients are only affected depending on the details of - their platform's memory allocator. Fixes bug 21018; bugfix on - 0.2.0.8-alpha. Found by using libFuzzer. Also tracked as TROVE- - 2016-12-002 and as CVE-2016-1254. + o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): + - Avoid a difficult-to-trigger heap corruption attack when extending + a smartlist to contain over 16GB of pointers. Fixes bug 18162; + bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. + Reported by Guido Vranken. + + o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): + - Avoid crashing when running as a DNS proxy. Fixes bug 16248; + bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". o Major bugfixes (key management, backport from 0.2.8.3-alpha): - If OpenSSL fails to generate an RSA key, do not retain a dangling @@ -76,10 +63,6 @@ Changes in version 0.2.7.7 - 2017-03-?? 0.2.1.10-alpha. Found by Yuan Jochen Kang, Suman Jana, and Baishakhi Ray. - o Minor features (geoip): - - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 - Country database. - o Major bugfixes (parsing, backported from 0.3.0.4-rc): - Fix an integer underflow bug when comparing malformed Tor versions. This bug could crash Tor when built with @@ -88,6 +71,21 @@ Changes in version 0.2.7.7 - 2017-03-?? it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz. + o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): + - Make memwipe() do nothing when passed a NULL pointer or buffer of + zero size. Check size argument to memwipe() for underflow. Fixes + bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", + patch by "teor". + + o Minor features (bug-resistance, backport from 0.2.8.2-alpha): + - Make Tor survive errors involving connections without a + corresponding event object. Previously we'd fail with an + assertion; now we produce a log message. Related to bug 16248. + + o Minor features (geoip): + - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 + Country database. + Changes in version 0.2.7.6 - 2015-12-10 Tor version 0.2.7.6 fixes a major bug in entry guard selection, as

1 0

[tor/master] Update changelog sorting rules to know about dirauth changes
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 1453bda67b03f1405a3ecc80be9f0378ef813a2f Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:12:17 2017 -0500 Update changelog sorting rules to know about dirauth changes --- scripts/maint/format_changelog.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/maint/format_changelog.py b/scripts/maint/format_changelog.py index e909fc5..2429c24 100755 --- a/scripts/maint/format_changelog.py +++ b/scripts/maint/format_changelog.py @@ -205,6 +205,8 @@ def head_score(s): score = -300 elif lw.startswith("deprecated version"): score = -200 + elif lw.startswith("directory auth"): + score = -150 elif (('new' in lw and 'requirement' in lw) or ('new' in lw and 'dependenc' in lw) or ('build' in lw and 'requirement' in lw) or

1 0

[tor/release-0.2.5] Sort changelog in release-0.2.5
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 30844dd51a91e35b8f8ce2f052394154de09d637 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:11:38 2017 -0500 Sort changelog in release-0.2.5 --- ChangeLog | 123 +++++++++++++++++++++++++++++++------------------------------- 1 file changed, 61 insertions(+), 62 deletions(-) diff --git a/ChangeLog b/ChangeLog index b194668..2d897f0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -20,68 +20,6 @@ Changes in version 0.2.5.13 - 2017-03-?? it was changed on 18 November 2015. Closes task 17906. Patch by "teor". - o Minor bugfixes (hidden service, backport from 0.2.7.1-alpha): - - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells on - a client authorized hidden service. Fixes bug 15823; bugfix - on 0.2.1.6-alpha. - - o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): - - Avoid crashing when running as a DNS proxy. Fixes bug 16248; - bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". - - o Minor features (bug-resistance, backport from 0.2.8.2-alpha): - - Make Tor survive errors involving connections without a - corresponding event object. Previously we'd fail with an - assertion; now we produce a log message. Related to bug 16248. - - o Minor bugfixes (crypto error-handling, backport from 0.2.7.2-alpha): - - Check for failures from crypto_early_init, and refuse to continue. - A previous typo meant that we could keep going with an - uninitialized crypto library, and would have OpenSSL initialize - its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced - when implementing ticket 4900. Patch by "teor". - - o Major bugfixes (security, correctness, backport from 0.2.7.4-rc): - - Fix an error that could cause us to read 4 bytes before the - beginning of an openssl string. This bug could be used to cause - Tor to crash on systems with unusual malloc implementations, or - systems with unusual hardening installed. Fixes bug 17404; bugfix - on 0.2.3.6-alpha. - - o Major bugfixes (guard selection, backport from 0.2.7.6): - - Actually look at the Guard flag when selecting a new directory - guard. When we implemented the directory guard design, we - accidentally started treating all relays as if they have the Guard - flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered - by Mohsen Imani. - - o Minor bugfixes (compilation, backport from 0.2.7.6) - - Fix a compilation warning with Clang 3.6: Do not check the - presence of an address which can never be NULL. Fixes bug 17781. - - o Minor features (geoip): - - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 - Country database. - - o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): - - Make memwipe() do nothing when passed a NULL pointer or buffer of - zero size. Check size argument to memwipe() for underflow. Fixes - bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", - patch by "teor". - - o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): - - Avoid a difficult-to-trigger heap corruption attack when extending - a smartlist to contain over 16GB of pointers. Fixes bug 18162; - bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. - Reported by Guido Vranken. - - o Major bugfixes (security, client, DNS proxy, backport from 0.2.8.3-alpha): - - Stop a crash that could occur when a client running with DNSPort - received a query with multiple address types, and the first - address type was not supported. Found and fixed by Scott Dial. - Fixes bug 18710; bugfix on 0.2.5.4-alpha. - o Major features (security fixes, backport from 0.2.9.4-alpha): - Prevent a class of security bugs caused by treating the contents of a buffer chunk as if they were a NUL-terminated string. At @@ -102,6 +40,37 @@ Changes in version 0.2.5.13 - 2017-03-?? 0.2.0.8-alpha. Found by using libFuzzer. Also tracked as TROVE- 2016-12-002 and as CVE-2016-1254. + o Major bugfixes (security, client, DNS proxy, backport from 0.2.8.3-alpha): + - Stop a crash that could occur when a client running with DNSPort + received a query with multiple address types, and the first + address type was not supported. Found and fixed by Scott Dial. + Fixes bug 18710; bugfix on 0.2.5.4-alpha. + + o Major bugfixes (security, correctness, backport from 0.2.7.4-rc): + - Fix an error that could cause us to read 4 bytes before the + beginning of an openssl string. This bug could be used to cause + Tor to crash on systems with unusual malloc implementations, or + systems with unusual hardening installed. Fixes bug 17404; bugfix + on 0.2.3.6-alpha. + + o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): + - Avoid a difficult-to-trigger heap corruption attack when extending + a smartlist to contain over 16GB of pointers. Fixes bug 18162; + bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. + Reported by Guido Vranken. + + o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): + - Avoid crashing when running as a DNS proxy. Fixes bug 16248; + bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". + + o Major bugfixes (guard selection, backport from 0.2.7.6): + - Actually look at the Guard flag when selecting a new directory + guard. When we implemented the directory guard design, we + accidentally started treating all relays as if they have the Guard + flag during guard selection, leading to weaker anonymity and worse + performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered + by Mohsen Imani. + o Major bugfixes (key management, backport from 0.2.8.3-alpha): - If OpenSSL fails to generate an RSA key, do not retain a dangling pointer to the previous (uninitialized) key value. The impact here @@ -119,6 +88,36 @@ Changes in version 0.2.5.13 - 2017-03-?? it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz. + o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): + - Make memwipe() do nothing when passed a NULL pointer or buffer of + zero size. Check size argument to memwipe() for underflow. Fixes + bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", + patch by "teor". + + o Minor features (bug-resistance, backport from 0.2.8.2-alpha): + - Make Tor survive errors involving connections without a + corresponding event object. Previously we'd fail with an + assertion; now we produce a log message. Related to bug 16248. + + o Minor features (geoip): + - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (compilation, backport from 0.2.7.6): + - Fix a compilation warning with Clang 3.6: Do not check the + presence of an address which can never be NULL. Fixes bug 17781. + + o Minor bugfixes (crypto error-handling, backport from 0.2.7.2-alpha): + - Check for failures from crypto_early_init, and refuse to continue. + A previous typo meant that we could keep going with an + uninitialized crypto library, and would have OpenSSL initialize + its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced + when implementing ticket 4900. Patch by "teor". + + o Minor bugfixes (hidden service, backport from 0.2.7.1-alpha): + - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells on + a client authorized hidden service. Fixes bug 15823; bugfix + on 0.2.1.6-alpha. Changes in version 0.2.5.12 - 2015-04-06

1 0

[tor/release-0.2.4] Sort changelog in release-0.2.4
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit e9d45f63aa12073f95ffe4c2e1375f581c204ff3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:11:31 2017 -0500 Sort changelog in release-0.2.4 --- ChangeLog | 108 +++++++++++++++++++++++++++++++------------------------------- 1 file changed, 54 insertions(+), 54 deletions(-) diff --git a/ChangeLog b/ChangeLog index 24fc0e6..68e9982 100644 --- a/ChangeLog +++ b/ChangeLog @@ -20,60 +20,6 @@ Changes in version 0.2.4.28 - 2017-03-?? it was changed on 18 November 2015. Closes task 17906. Patch by "teor". - o Minor features (DoS-resistance, backport from 0.2.7.1-alpha): - - Make it harder for attackers to overload hidden services with - introductions, by blocking multiple introduction requests on the - same circuit. Resolves ticket 15515. - - o Minor bugfixes (hidden service, backport from 0.2.7.1-alpha): - - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells on - a client authorized hidden service. Fixes bug 15823; bugfix - on 0.2.1.6-alpha. - - o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): - - Avoid crashing when running as a DNS proxy. Fixes bug 16248; - bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". - - o Minor features (bug-resistance, backport from 0.2.8.2-alpha): - - Make Tor survive errors involving connections without a - corresponding event object. Previously we'd fail with an - assertion; now we produce a log message. Related to bug 16248. - - o Major bugfixes (security, correctness, backport from 0.2.7.4-rc): - - Fix an error that could cause us to read 4 bytes before the - beginning of an openssl string. This bug could be used to cause - Tor to crash on systems with unusual malloc implementations, or - systems with unusual hardening installed. Fixes bug 17404; bugfix - on 0.2.3.6-alpha. - - o Major bugfixes (guard selection, backport from 0.2.7.6): - - Actually look at the Guard flag when selecting a new directory - guard. When we implemented the directory guard design, we - accidentally started treating all relays as if they have the Guard - flag during guard selection, leading to weaker anonymity and worse - performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered - by Mohsen Imani. - - o Minor bugfixes (compilation, backport from 0.2.7.6) - - Fix a compilation warning with Clang 3.6: Do not check the - presence of an address which can never be NULL. Fixes bug 17781. - - o Minor features (geoip): - - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 - Country database. - - o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): - - Make memwipe() do nothing when passed a NULL pointer or buffer of - zero size. Check size argument to memwipe() for underflow. Fixes - bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", - patch by "teor". - - o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): - - Avoid a difficult-to-trigger heap corruption attack when extending - a smartlist to contain over 16GB of pointers. Fixes bug 18162; - bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. - Reported by Guido Vranken. - o Major features (security fixes, backport from 0.2.9.4-alpha): - Prevent a class of security bugs caused by treating the contents of a buffer chunk as if they were a NUL-terminated string. At @@ -94,6 +40,31 @@ Changes in version 0.2.4.28 - 2017-03-?? 0.2.0.8-alpha. Found by using libFuzzer. Also tracked as TROVE- 2016-12-002 and as CVE-2016-1254. + o Major bugfixes (security, correctness, backport from 0.2.7.4-rc): + - Fix an error that could cause us to read 4 bytes before the + beginning of an openssl string. This bug could be used to cause + Tor to crash on systems with unusual malloc implementations, or + systems with unusual hardening installed. Fixes bug 17404; bugfix + on 0.2.3.6-alpha. + + o Major bugfixes (security, pointers, backport from 0.2.8.2-alpha): + - Avoid a difficult-to-trigger heap corruption attack when extending + a smartlist to contain over 16GB of pointers. Fixes bug 18162; + bugfix on 0.1.1.11-alpha, which fixed a related bug incompletely. + Reported by Guido Vranken. + + o Major bugfixes (dns proxy mode, crash, backport from 0.2.8.2-alpha): + - Avoid crashing when running as a DNS proxy. Fixes bug 16248; + bugfix on 0.2.0.1-alpha. Patch from "cypherpunks". + + o Major bugfixes (guard selection, backport from 0.2.7.6): + - Actually look at the Guard flag when selecting a new directory + guard. When we implemented the directory guard design, we + accidentally started treating all relays as if they have the Guard + flag during guard selection, leading to weaker anonymity and worse + performance. Fixes bug 17772; bugfix on 0.2.4.8-alpha. Discovered + by Mohsen Imani. + o Major bugfixes (key management, backport from 0.2.8.3-alpha): - If OpenSSL fails to generate an RSA key, do not retain a dangling pointer to the previous (uninitialized) key value. The impact here @@ -111,6 +82,35 @@ Changes in version 0.2.4.28 - 2017-03-?? it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz. + o Minor features (security, memory erasure, backport from 0.2.8.1-alpha): + - Make memwipe() do nothing when passed a NULL pointer or buffer of + zero size. Check size argument to memwipe() for underflow. Fixes + bug 18089; bugfix on 0.2.3.25 and 0.2.4.6-alpha. Reported by "gk", + patch by "teor". + + o Minor features (bug-resistance, backport from 0.2.8.2-alpha): + - Make Tor survive errors involving connections without a + corresponding event object. Previously we'd fail with an + assertion; now we produce a log message. Related to bug 16248. + + o Minor features (DoS-resistance, backport from 0.2.7.1-alpha): + - Make it harder for attackers to overload hidden services with + introductions, by blocking multiple introduction requests on the + same circuit. Resolves ticket 15515. + + o Minor features (geoip): + - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (compilation, backport from 0.2.7.6): + - Fix a compilation warning with Clang 3.6: Do not check the + presence of an address which can never be NULL. Fixes bug 17781. + + o Minor bugfixes (hidden service, backport from 0.2.7.1-alpha): + - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells on + a client authorized hidden service. Fixes bug 15823; bugfix + on 0.2.1.6-alpha. + Changes in version 0.2.4.27 - 2015-04-06 Tor 0.2.4.27 backports two fixes from 0.2.6.7 for security issues that

1 0

[tor/release-0.2.9] Sort changelog in release-0.2.9
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 7c81abba28ecfed492db19a6c9da18e5c3e38d4f Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:11:58 2017 -0500 Sort changelog in release-0.2.9 --- ChangeLog | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index 2237690..3b14557 100644 --- a/ChangeLog +++ b/ChangeLog @@ -38,6 +38,10 @@ Changes in version 0.2.9.10 - 2017-03-?? Otherwise 32-bit and 64-bit platforms would behave inconsistently. Fixes bug 21450; bugfix on 0.0.8pre1. + o Minor features (geoip): + - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 + Country database. + o Minor features (portability, compilation, backport from 0.3.0.3-alpha): - Autoconf now checks to determine if OpenSSL structures are opaque, instead of explicitly checking for OpenSSL version numbers. Part @@ -45,10 +49,6 @@ Changes in version 0.2.9.10 - 2017-03-?? - Support building with recent LibreSSL code that uses opaque structures. Closes ticket 21359. - o Minor features (geoip): - - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 - Country database. - o Minor bugfixes (code correctness, also in 0.3.0.4-rc): - Repair a couple of (unreachable or harmless) cases of the risky comparison-by-subtraction pattern that caused bug 21278.

1 0

[tor/release-0.2.7-redux] Adjust 0.2.7.7 changelog entry from 0.3.0.4-rc to match
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 680d940298a498fe4170622b86113fe516ad78a1 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:05:23 2017 -0500 Adjust 0.2.7.7 changelog entry from 0.3.0.4-rc to match --- ChangeLog | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/ChangeLog b/ChangeLog index eaacb6f..5091e45 100644 --- a/ChangeLog +++ b/ChangeLog @@ -80,15 +80,13 @@ Changes in version 0.2.7.7 - 2017-03-?? - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 Country database. - o Major bugfixes (parsing, also in 0.3.0.4-rc): - - Fix an integer underflow bug when comparing malformed Tor versions. - This bug is harmless, except when Tor has been built with - --enable-expensive-hardening, which would turn it into a crash; - or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with - -ftrapv by default. - Part of TROVE-2017-001. Fixes bug 21278; bugfix on - 0.0.8pre1. Found by OSS-Fuzz. - + o Major bugfixes (parsing, backported from 0.3.0.4-rc): + - Fix an integer underflow bug when comparing malformed Tor + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. Changes in version 0.2.7.6 - 2015-12-10

1 0

[tor/release-0.2.4] Adjust 0.2.4.28 changelog entry from 0.3.0.4-rc to match
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit d1dc3d01545c8e1e629aefaadd7c2987420eb75a Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:06:00 2017 -0500 Adjust 0.2.4.28 changelog entry from 0.3.0.4-rc to match --- ChangeLog | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index 2ac0fc1..24fc0e6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -103,14 +103,13 @@ Changes in version 0.2.4.28 - 2017-03-?? 0.2.1.10-alpha. Found by Yuan Jochen Kang, Suman Jana, and Baishakhi Ray. - o Major bugfixes (parsing, also in 0.3.0.4-rc): - - Fix an integer underflow bug when comparing malformed Tor versions. - This bug is harmless, except when Tor has been built with - --enable-expensive-hardening, which would turn it into a crash; - or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with - -ftrapv by default. - Part of TROVE-2017-001. Fixes bug 21278; bugfix on - 0.0.8pre1. Found by OSS-Fuzz. + o Major bugfixes (parsing, backported from 0.3.0.4-rc): + - Fix an integer underflow bug when comparing malformed Tor + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. Changes in version 0.2.4.27 - 2015-04-06

1 0

[tor/release-0.2.5] Adjust 0.2.5.13 changelog entry from 0.3.0.4-rc to match
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 8e0bf7fac15a6ef898b7ce319e323cdcd9b36a90 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Feb 28 10:05:50 2017 -0500 Adjust 0.2.5.13 changelog entry from 0.3.0.4-rc to match --- ChangeLog | 15 +++++++-------- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 4 files changed, 10 insertions(+), 11 deletions(-) diff --git a/ChangeLog b/ChangeLog index ca5abb3..b194668 100644 --- a/ChangeLog +++ b/ChangeLog @@ -111,14 +111,13 @@ Changes in version 0.2.5.13 - 2017-03-?? 0.2.1.10-alpha. Found by Yuan Jochen Kang, Suman Jana, and Baishakhi Ray. - o Major bugfixes (parsing, also in 0.3.0.4-rc): - - Fix an integer underflow bug when comparing malformed Tor versions. - This bug is harmless, except when Tor has been built with - --enable-expensive-hardening, which would turn it into a crash; - or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with - -ftrapv by default. - Part of TROVE-2017-001. Fixes bug 21278; bugfix on - 0.0.8pre1. Found by OSS-Fuzz. + o Major bugfixes (parsing, backported from 0.3.0.4-rc): + - Fix an integer underflow bug when comparing malformed Tor + versions. This bug could crash Tor when built with + --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor + 0.2.9.8, which were built with -ftrapv by default. In other cases + it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix + on 0.0.8pre1. Found by OSS-Fuzz. diff --git a/configure.ac b/configure.ac index 29ba2fd..443cb56 100644 --- a/configure.ac +++ b/configure.ac @@ -3,7 +3,7 @@ dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson dnl Copyright (c) 2007-2013, The Tor Project, Inc. dnl See LICENSE for licensing information -AC_INIT([tor],[0.2.5.12]) +AC_INIT([tor],[0.2.5.12-dev]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) AM_INIT_AUTOMAKE diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 2fb15b8..ba53353 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.5.12" +!define VERSION "0.2.5.12-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 6d6cde4..89ac13f 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -241,7 +241,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.5.12" +#define VERSION "0.2.5.12-dev"

1 0