February 2017 - tor-commits - lists.torproject.org

[tor/release-0.3.0] Edit some changelog text
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 1512e7e5398701aa3a33acbf7b884e5d1409608b Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 21 14:34:48 2015 -0400 Edit some changelog text --- ChangeLog | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index 077e8a4..6d40010 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,14 +1,16 @@ Changes in version 0.2.7.4-rc - 2015-10-21 - Tor 0.2.7.4-rc is the second release candidate in the 0.2.7 servies. - It a few small bugfixes, notably fixes for compilation and portability - on different platforms. If no further significant bounds are found, - the next release will the the official stable release. + Tor 0.2.7.4-rc is the second release candidate in the 0.2.7 series. + It fixes some important memory leaks, and a scary-looking (but mostly + harmless in practice) invalid-read bug. It also has a few small + bugfixes, notably fixes for compilation and portability on different + platforms. If no further significant bounds are found, the next + release will the the official stable release. o Major bugfixes (security, correctness): - - Fix a programming error that could cause us to read 4 bytes before - the beginning of an openssl string. This could be used to provoke - a crash on systems with an unusual malloc implementation, or - systems with unsual hardening installed. Fixes bug 17404; bugfix + - Fix an error that could cause us to read 4 bytes before + the beginning of an openssl string. This bug could be used to + cause Tor to crash on systems with unusual malloc implementations, or + systems with unusual hardening installed. Fixes bug 17404; bugfix on 0.2.3.6-alpha. o Major bugfixes (correctness):

1 0

[tor/release-0.3.0] remove a comma that coderman didn't like
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit f55d23e1e66e9b0f6971016a9c880341e0209db0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 21 15:13:31 2015 -0400 remove a comma that coderman didn't like --- ChangeLog | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5226fef..0e6fe6a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -38,9 +38,8 @@ Changes in version 0.2.7.4-rc - 2015-10-21 bugfix on 0.2.5.1-alpha. Patch from 'jamestk'. o Minor bugfixes (portability): - - Use libexecinfo on FreeBSD, to enable backtrace support. Fixes - part of bug 17151; bugfix on 0.2.5.2-alpha. Patch from - Marcin Cieślak. + - Use libexecinfo on FreeBSD to enable backtrace support. Fixes part + of bug 17151; bugfix on 0.2.5.2-alpha. Patch from Marcin Cieślak. o Minor bugfixes (sandbox): - Add the "hidserv-stats" filename to our sandbox filter for the

1 0

[tor/release-0.3.0] Re-order and condense some ReleaseNotes items
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 99d39e937e43ddc79c0a089de2c3e436e055461b Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 5 09:39:44 2015 -0500 Re-order and condense some ReleaseNotes items --- ReleaseNotes | 243 ++++++++++++++++++++++++----------------------------------- 1 file changed, 100 insertions(+), 143 deletions(-) diff --git a/ReleaseNotes b/ReleaseNotes index 131d015..029dd61 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -6,6 +6,24 @@ each development snapshot, see the ChangeLog file. Changes in version 0.2.7.5- 2015-11-?? XXXX WRITE A BLURB XXXX + o New system requirements: + - Tor no longer includes workarounds to support Libevent versions + before 1.3e. Libevent 2.0 or later is recommended. Closes + ticket 15248. + - Tor no longer supports copies of OpenSSL that are missing support + for Elliptic Curve Cryptography. (We began using ECC when + available in 0.2.4.8-alpha, for more safe and efficient key + negotiation.) In particular, support for at least one of P256 or + P224 is now required, with manual configuration needed if only + P224 is available. Resolves ticket 16140. + - Tor no longer supports versions of OpenSSL before 1.0. (If you are + on an operating system that has not upgraded to OpenSSL 1.0 or + later, and you compile Tor from source, you will need to install a + more recent OpenSSL to link Tor against.) These versions of + OpenSSL are still supported by the OpenSSL, but the numerous + cryptographic improvements in later OpenSSL releases makes them a + clear choice. Resolves ticket 16034. + o Major features (controller): - Add the ADD_ONION and DEL_ONION commands that allow the creation and management of hidden services via the controller. Closes @@ -36,24 +54,43 @@ Changes in version 0.2.7.5- 2015-11-?? vary freely. Implements part of ticket 12498. - Microdescriptors now include Ed25519 identity keys. Implements part of ticket 12498. + - Add a --newpass option to allow changing or removing the + passphrase of an encrypted key with tor --keygen. Implements part + of ticket 16769. + - Add a new OfflineMasterKey option to tell Tor never to try loading + or generating a secret Ed25519 identity key. You can use this in + combination with tor --keygen to manage offline and/or encrypted + Ed25519 keys. Implements ticket 16944. + - On receiving a HUP signal, check to see whether the Ed25519 + signing key has changed, and reload it if so. Closes ticket 16790. + - Significant usability improvements for Ed25519 key management. Log + messages are better, and the code can recover from far more + failure conditions. Thanks to "s7r" for reporting and diagnosing + so many of these! - o Major features (Ed25519 keys, keypinning): - - The key-pinning option on directory authorities is now advisory- - only by default. In a future version, or when the AuthDirPinKeys - option is set, pins are enforced again. Disabling key-pinning - seemed like a good idea so that we can survive the fallout of any - usability problems associated with Ed25519 keys. Closes - ticket 17135. - - o Major features (Ed25519 performance): + o Major features (ECC performance): - Improve the runtime speed of Ed25519 signature verification by using Ed25519-donna's batch verification support. Implements ticket 16533. - Improve the speed of Ed25519 operations and Curve25519 keypair generation when built targeting 32 bit x86 platforms with SSE2 available. Implements ticket 16535. + - Improve the runtime speed of Ed25519 operations by using the + public-domain Ed25519-donna by Andrew M. ("floodyberry"). + Implements ticket 16467. + - Improve the runtime speed of the ntor handshake by using an + optimized curve25519 basepoint scalarmult implementation from the + public-domain Ed25519-donna by Andrew M. ("floodyberry"), based on + ideas by Adam Langley. Implements ticket 9663. o Major features (Hidden services): + - Hidden services, if using the EntryNodes option, are required to + use more than one EntryNode, in order to avoid a guard discovery + attack. (This would only affect people who had configured hidden + services and manually specified the EntryNodes option with a + single entry-node. The impact was that it would be easy to + remotely identify the guard node used by such a hidden service. + See ticket for more information.) Fixes ticket 14917. - Add the torrc option HiddenServiceNumIntroductionPoints, to specify a fixed number of introduction points. Its maximum value is 10 and default is 3. Using this option can increase a hidden @@ -72,44 +109,6 @@ Changes in version 0.2.7.5- 2015-11-?? of this change, microdescriptors will no longer need to include RSA identity keys. Implements proposal 228; closes ticket 12499. - o Major features (performance testing): - - The test-network.sh script now supports performance testing. - Requires corresponding chutney performance testing changes. Patch - by "teor". Closes ticket 14175. - - o Major features (performance): - - Improve the runtime speed of Ed25519 operations by using the - public-domain Ed25519-donna by Andrew M. ("floodyberry"). - Implements ticket 16467. - - Improve the runtime speed of the ntor handshake by using an - optimized curve25519 basepoint scalarmult implementation from the - public-domain Ed25519-donna by Andrew M. ("floodyberry"), based on - ideas by Adam Langley. Implements ticket 9663. - - o Major features (relay, Ed25519): - - Add a --newpass option to allow changing or removing the - passphrase of an encrypted key with tor --keygen. Implements part - of ticket 16769. - - Add a new OfflineMasterKey option to tell Tor never to try loading - or generating a secret Ed25519 identity key. You can use this in - combination with tor --keygen to manage offline and/or encrypted - Ed25519 keys. Implements ticket 16944. - - On receiving a HUP signal, check to see whether the Ed25519 - signing key has changed, and reload it if so. Closes ticket 16790. - - Significant usability improvements for Ed25519 key management. Log - messages are better, and the code can recover from far more - failure conditions. Thanks to "s7r" for reporting and diagnosing - so many of these! - - o Major features (security, hidden services): - - Hidden services, if using the EntryNodes option, are required to - use more than one EntryNode, in order to avoid a guard discovery - attack. (This would only affect people who had configured hidden - services and manually specified the EntryNodes option with a - single entry-node. The impact was that it would be easy to - remotely identify the guard node used by such a hidden service. - See ticket for more information.) Fixes ticket 14917. - o Major bugfixes (client-side privacy, also in 0.2.6.9): - Properly separate out each SOCKSPort when applying stream isolation. The error occurred because each port's session group @@ -168,7 +167,7 @@ Changes in version 0.2.7.5- 2015-11-?? service while a NEWNYM is in progress. Fixes bug 16013; bugfix on 0.1.0.1-rc. - o Minor features (client): + o Minor features (client, SOCKS): - Add GroupWritable and WorldWritable options to unix-socket based SocksPort and ControlPort options. These options apply to a single socket, and override {Control,Socks}SocketsGroupWritable. Closes @@ -206,6 +205,9 @@ Changes in version 0.2.7.5- 2015-11-?? o Minor features (compilation): - Give a warning as early as possible when trying to build with an unsupported OpenSSL version. Closes ticket 16901. + - Use C99 variadic macros when the compiler is not GCC. This avoids + failing compilations on MSVC, and fixes a log-file-based race + condition in our old workarounds. Original patch from Gisle Vanem. o Minor features (control protocol): - Support network-liveness GETINFO key and NETWORK_LIVENESS event in @@ -242,18 +244,9 @@ Changes in version 0.2.7.5- 2015-11-?? introductions, by blocking multiple introduction requests on the same circuit. Resolves ticket 15515. - o Minor features (geoIP): + o Minor features (geoip): - Update geoip and geoip6 to the October 9 2015 Maxmind GeoLite2 Country database. - - Update geoip and geoip6 to the September 3 2015 Maxmind GeoLite2 - Country database. - - Update geoip to the April 8 2015 Maxmind GeoLite2 Country database. - - Update geoip6 to the April 8 2015 Maxmind GeoLite2 - Country database. - - o Minor features (geoip, also in 0.2.6.10): - - Update geoip to the June 3 2015 Maxmind GeoLite2 Country database. - - Update geoip6 to the June 3 2015 Maxmind GeoLite2 Country database. o Minor features (hidden services): - Add the new options "HiddenServiceMaxStreams" and @@ -274,8 +267,6 @@ Changes in version 0.2.7.5- 2015-11-?? track only of the fraction of traffic used by hidden services, and the total number of hidden services in existence.) Closes ticket 15254. - - o Minor features (HS popularity countermeasure): - To avoid leaking HS popularity, don't cycle the introduction point when we've handled a fixed number of INTRODUCE2 cells but instead cycle it when a random number of introductions is reached, thus @@ -299,34 +290,6 @@ Changes in version 0.2.7.5- 2015-11-?? can be used by implementations to detect this new behavior. Resolves ticket 15435. - o Minor features (portability): - - Use C99 variadic macros when the compiler is not GCC. This avoids - failing compilations on MSVC, and fixes a log-file-based race - condition in our old workarounds. Original patch from Gisle Vanem. - - o Minor features (testing): - - Add a test to verify that the compiler does not eliminate our - memwipe() implementation. Closes ticket 15377. - - Add make rule `check-changes` to verify the format of changes - files. Closes ticket 15180. - - Add unit tests for control_event_is_interesting(). Add a compile- - time check that the number of events doesn't exceed the capacity - of control_event_t.event_mask. Closes ticket 15431, checks for - bugs similar to 13085. Patch by "teor". - - Command-line argument tests moved to Stem. Resolves ticket 14806. - - Integrate the ntor, backtrace, and zero-length keys tests into the - automake test suite. Closes ticket 15344. - - Remove assertions during builds to determine Tor's test coverage. - We don't want to trigger these even in assertions, so including - them artificially makes our branch coverage look worse than it is. - This patch provides the new test-stem-full and coverage-html-full - configure options. Implements ticket 15400. - - o Minor features (testing, authorities, documentation): - - New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags to - explicitly manage consensus flags in testing networks. Patch by - "robgjansen", modified by "teor". Implements part of ticket 14882. - o Minor bugfixes (torrc exit policies): - In each instance above, usage advice is provided to avoid the message. Resolves ticket 16069. Patch by "teor". Fixes part of bug @@ -351,6 +314,10 @@ Changes in version 0.2.7.5- 2015-11-?? on 0.2.3.3-alpha. - When complaining about bad arguments to "--dump-config", use stderr, not stdout. + - Print usage information for --dump-config when it is used without + an argument. Also, fix the error message to use different wording + and add newline at the end. Fixes bug 15541; bugfix + on 0.2.5.1-alpha. o Minor bugfixes (compilation): - Fix compilation of sandbox.c with musl-libc. Fixes bug 17347; @@ -397,19 +364,6 @@ Changes in version 0.2.7.5- 2015-11-?? its own PRNG. Fixes bug 16360; bugfix on 0.2.5.2-alpha, introduced when implementing ticket 4900. Patch by "teor". - o Minor bugfixes (documentation): - - Advise users on how to configure separate IPv4 and IPv6 exit - policies in the manpage and sample torrcs. Related to ticket 16069. - - Fix an error in the manual page and comments for - TestingDirAuthVoteHSDir[IsStrict], which suggested that a HSDir - required "ORPort connectivity". While this is true, it is in no - way unique to the HSDir flag. Of all the flags, only HSDirs need a - DirPort configured in order for the authorities to assign that - particular flag. Patch by "teor". Fixed as part of 14882; bugfix - on 0.2.6.3-alpha. - - Fix the usage message of tor-resolve(1) so that it no longer lists - the removed -F option. Fixes bug 16913; bugfix on 0.2.2.28-beta. - o Minor bugfixes (hidden service): - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells on a client authorized hidden service. Fixes bug 15823; bugfix @@ -417,17 +371,14 @@ Changes in version 0.2.7.5- 2015-11-?? - Remove an extraneous newline character from the end of hidden service descriptors. Fixes bug 15296; bugfix on 0.2.0.10-alpha. - o Minor bugfixes (interface): - - Print usage information for --dump-config when it is used without - an argument. Also, fix the error message to use different wording - and add newline at the end. Fixes bug 15541; bugfix - on 0.2.5.1-alpha. - o Minor bugfixes (Linux seccomp2 sandbox): - Use the sandbox in tor_open_cloexec whether or not O_CLOEXEC is defined. Patch by "teor". Fixes bug 16515; bugfix on 0.2.3.1-alpha. - Allow bridge authorities to run correctly under the seccomp2 sandbox. Fixes bug 16964; bugfix on 0.2.5.1-alpha. + - Add the "hidserv-stats" filename to our sandbox filter for the + HiddenServiceStatistics option to work properly. Fixes bug 17354; + bugfix on tor-0.2.6.2-alpha. Patch from David Goulet. o Minor bugfixes (Linux seccomp2 sandbox, also in 0.2.6.10): - Allow pipe() and pipe2() syscalls in the seccomp2 sandbox: we need @@ -443,7 +394,7 @@ Changes in version 0.2.7.5- 2015-11-?? syscalls. Fixes bug 16244; bugfix on 0.2.6.1-alpha. Patch by Peter Palfrader. - o Minor bugfixes (logs): + o Minor bugfixes (logging): - When building Tor under Clang, do not include an extra set of parentheses in log messages that include function names. Fixes bug 15269; bugfix on every released version of Tor when compiled with @@ -481,11 +432,6 @@ Changes in version 0.2.7.5- 2015-11-?? predictable scheduling behavior. Fixes bug 16644; bugfix on 0.2.6.3-alpha. - o Minor bugfixes (sandbox): - - Add the "hidserv-stats" filename to our sandbox filter for the - HiddenServiceStatistics option to work properly. Fixes bug 17354; - bugfix on tor-0.2.6.2-alpha. Patch from David Goulet. - o Minor bugfixes (security, exit policies): - ExitPolicyRejectPrivate now also rejects the relay's published IPv6 address (if any), and any publicly routable IPv4 or IPv6 @@ -513,16 +459,6 @@ Changes in version 0.2.7.5- 2015-11-?? not. Fixes bug 15771; bugfix on 0.2.6.1-alpha. Patch by "teor", issue discovered by CJ Ess. - o Minor bugfixes (testing): - - Check for matching value in server response in ntor_ref.py. Fixes - bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed - by "joelanders". - - Set the severity correctly when testing - get_interface_addresses_ifaddrs() and - get_interface_addresses_win32(), so that the tests fail gracefully - instead of triggering an assertion. Fixes bug 15759; bugfix on - 0.2.6.3-alpha. Reported by Nicolas Derive. - o Minor bugfixes (tests, also in 0.2.6.9): - Fix a crash in the unit tests when built with MSVC2013. Fixes bug 16030; bugfix on 0.2.6.2-alpha. Patch from "NewEraCracker". @@ -594,11 +530,17 @@ Changes in version 0.2.7.5- 2015-11-?? - Standardize on the term "server descriptor" in the manual page. Previously, we had used "router descriptor", "server descriptor", and "relay descriptor" interchangeably. Part of ticket 14987. - - o New system requirements: - - Tor no longer includes workarounds to support Libevent versions - before 1.3e. Libevent 2.0 or later is recommended. Closes - ticket 15248. + - Advise users on how to configure separate IPv4 and IPv6 exit + policies in the manpage and sample torrcs. Related to ticket 16069. + - Fix an error in the manual page and comments for + TestingDirAuthVoteHSDir[IsStrict], which suggested that a HSDir + required "ORPort connectivity". While this is true, it is in no + way unique to the HSDir flag. Of all the flags, only HSDirs need a + DirPort configured in order for the authorities to assign that + particular flag. Patch by "teor". Fixed as part of 14882; bugfix + on 0.2.6.3-alpha. + - Fix the usage message of tor-resolve(1) so that it no longer lists + the removed -F option. Fixes bug 16913; bugfix on 0.2.2.28-beta. o Removed code: - Remove `USE_OPENSSL_BASE64` and the corresponding fallback code @@ -636,21 +578,11 @@ Changes in version 0.2.7.5- 2015-11-?? that didn't know about microdescriptors. - Tor no longer contains workarounds for stat files generated by super-old versions of Tor that didn't choose guards sensibly. - - Tor no longer supports copies of OpenSSL that are missing support - for Elliptic Curve Cryptography. (We began using ECC when - available in 0.2.4.8-alpha, for more safe and efficient key - negotiation.) In particular, support for at least one of P256 or - P224 is now required, with manual configuration needed if only - P224 is available. Resolves ticket 16140. - - Tor no longer supports versions of OpenSSL before 1.0. (If you are - on an operating system that has not upgraded to OpenSSL 1.0 or - later, and you compile Tor from source, you will need to install a - more recent OpenSSL to link Tor against.) These versions of - OpenSSL are still supported by the OpenSSL, but the numerous - cryptographic improvements in later OpenSSL releases makes them a - clear choice. Resolves ticket 16034. o Testing: + - The test-network.sh script now supports performance testing. + Requires corresponding chutney performance testing changes. Patch + by "teor". Closes ticket 14175. - Add a new set of callgraph analysis scripts that use clang to produce a list of which Tor functions are reachable from which other Tor functions. We're planning to use these to help simplify @@ -693,8 +625,33 @@ Changes in version 0.2.7.5- 2015-11-?? (if any) using the 'tor-cov' coverage binary. - When running test-network or test-stem, check for the absence of stem/chutney before doing any build operations. - - + - Add a test to verify that the compiler does not eliminate our + memwipe() implementation. Closes ticket 15377. + - Add make rule `check-changes` to verify the format of changes + files. Closes ticket 15180. + - Add unit tests for control_event_is_interesting(). Add a compile- + time check that the number of events doesn't exceed the capacity + of control_event_t.event_mask. Closes ticket 15431, checks for + bugs similar to 13085. Patch by "teor". + - Command-line argument tests moved to Stem. Resolves ticket 14806. + - Integrate the ntor, backtrace, and zero-length keys tests into the + automake test suite. Closes ticket 15344. + - Remove assertions during builds to determine Tor's test coverage. + We don't want to trigger these even in assertions, so including + them artificially makes our branch coverage look worse than it is. + This patch provides the new test-stem-full and coverage-html-full + configure options. Implements ticket 15400. + - New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags to + explicitly manage consensus flags in testing networks. Patch by + "robgjansen", modified by "teor". Implements part of ticket 14882. + - Check for matching value in server response in ntor_ref.py. Fixes + bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed + by "joelanders". + - Set the severity correctly when testing + get_interface_addresses_ifaddrs() and + get_interface_addresses_win32(), so that the tests fail gracefully + instead of triggering an assertion. Fixes bug 15759; bugfix on + 0.2.6.3-alpha. Reported by Nicolas Derive. Changes in version 0.2.6.10 - 2015-07-12

1 0

[tor/release-0.3.0] prepare for a release.
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit b6024ec1498edbf8a0b89e1575adb932469d4497 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 20 08:48:08 2015 -0500 prepare for a release. --- ChangeLog | 29 +++++++++++++++++++++++++++++ ReleaseNotes | 6 +++--- 2 files changed, 32 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 0e6fe6a..acfa034 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,32 @@ +Changes in version 0.2.7.5 - 2015-11-20 + The Tor 0.2.7 release series is dedicated to the memory of Tor user + and privacy advocate Caspar Bowden (1961-2015). Caspar worked + tirelessly to advocate human rights regardless of national borders, + and oppose the encroachments of mass surveillance. He opposed national + exceptionalism, he brought clarity to legal and policy debates, he + understood and predicted the impact of mass surveillance on the world, + and he laid the groundwork for resisting it. While serving on the Tor + Project's board of directors, he brought us his uncompromising focus + on technical excellence in the service of humankind. Caspar was an + inimitable force for good and a wonderful friend. He was kind, + humorous, generous, gallant, and believed we should protect one + another without exception. We honor him here for his ideals, his + efforts, and his accomplishments. Please honor his memory with works + that would make him proud. + + Tor 0.2.7.5 is the first stable release in the Tor 0.2.7 series. + + The 0.2.7 series adds a more secure identity key type for relays, + improves cryptography performance, resolves several longstanding + hidden-service performance issues, improves controller support for + hidden services, and includes small bugfixes and performance + improvements throughout the program. This release series also includes + more tests than before, and significant simplifications to which parts + of Tor invoke which others. + + (This release contains no code changes since 0.2.7.4-rc.) + + Changes in version 0.2.7.4-rc - 2015-10-21 Tor 0.2.7.4-rc is the second release candidate in the 0.2.7 series. It fixes some important memory leaks, and a scary-looking (but mostly diff --git a/ReleaseNotes b/ReleaseNotes index 3540497..a07b321 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,13 +2,13 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. -Changes in version 0.2.7.5 - 2015-11-1? +Changes in version 0.2.7.5 - 2015-11-20 The Tor 0.2.7 release series is dedicated to the memory of Tor user and privacy advocate Caspar Bowden (1961-2015). Caspar worked tirelessly to advocate human rights regardless of national borders, and oppose the encroachments of mass surveillance. He opposed national - exceptionalism; he brought clarity to legal and policy debates; he - understood and predicted the impact of mass surveillance on the world; + exceptionalism, he brought clarity to legal and policy debates, he + understood and predicted the impact of mass surveillance on the world, and he laid the groundwork for resisting it. While serving on the Tor Project's board of directors, he brought us his uncompromising focus on technical excellence in the service of humankind. Caspar was an

1 0

[tor/release-0.3.0] Merge branch 'maint-0.2.7' into release-0.2.7
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit e0fa07c06fc1a8761b5f4b33028f157a130831a4 Merge: b6024ec 18ee193 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 20 10:27:51 2015 -0500 Merge branch 'maint-0.2.7' into release-0.2.7 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.0] add a dedication paragraph; reflow another.
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 0549c019675840171fb764c8bb593309534ccadc Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 13 08:58:18 2015 -0500 add a dedication paragraph; reflow another. --- ReleaseNotes | 23 ++++++++++++++++++----- 1 file changed, 18 insertions(+), 5 deletions(-) diff --git a/ReleaseNotes b/ReleaseNotes index ef173af..3540497 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -1,19 +1,32 @@ - This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. Changes in version 0.2.7.5 - 2015-11-1? + The Tor 0.2.7 release series is dedicated to the memory of Tor user + and privacy advocate Caspar Bowden (1961-2015). Caspar worked + tirelessly to advocate human rights regardless of national borders, + and oppose the encroachments of mass surveillance. He opposed national + exceptionalism; he brought clarity to legal and policy debates; he + understood and predicted the impact of mass surveillance on the world; + and he laid the groundwork for resisting it. While serving on the Tor + Project's board of directors, he brought us his uncompromising focus + on technical excellence in the service of humankind. Caspar was an + inimitable force for good and a wonderful friend. He was kind, + humorous, generous, gallant, and believed we should protect one + another without exception. We honor him here for his ideals, his + efforts, and his accomplishments. Please honor his memory with works + that would make him proud. + Tor 0.2.7.5 is the first stable release in the Tor 0.2.7 series. The 0.2.7 series adds a more secure identity key type for relays, improves cryptography performance, resolves several longstanding hidden-service performance issues, improves controller support for hidden services, and includes small bugfixes and performance - improvements throughout the program. This release series also - includes more tests than before, and significant simplifications - to which parts of Tor invoke which others. For a full list of - changes, see below. + improvements throughout the program. This release series also includes + more tests than before, and significant simplifications to which parts + of Tor invoke which others. For a full list of changes, see below. o New system requirements: - Tor no longer includes workarounds to support Libevent versions

1 0

[tor/release-0.3.0] start trying to write a blurb
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 4dd7a55cf22caa56ef53609e2545002733803a56 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Nov 10 09:13:58 2015 -0500 start trying to write a blurb --- ReleaseNotes | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/ReleaseNotes b/ReleaseNotes index 029dd61..ef173af 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -3,8 +3,17 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. -Changes in version 0.2.7.5- 2015-11-?? - XXXX WRITE A BLURB XXXX +Changes in version 0.2.7.5 - 2015-11-1? + Tor 0.2.7.5 is the first stable release in the Tor 0.2.7 series. + + The 0.2.7 series adds a more secure identity key type for relays, + improves cryptography performance, resolves several longstanding + hidden-service performance issues, improves controller support for + hidden services, and includes small bugfixes and performance + improvements throughout the program. This release series also + includes more tests than before, and significant simplifications + to which parts of Tor invoke which others. For a full list of + changes, see below. o New system requirements: - Tor no longer includes workarounds to support Libevent versions

1 0

[tor/release-0.3.0] Edit more changelog text (thanks to rl1987 for noticing)
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 08b96160fc39720cbe3a2a2e2aa51694e303bb08 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 21 14:42:47 2015 -0400 Edit more changelog text (thanks to rl1987 for noticing) --- ChangeLog | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 6d40010..afddbba 100644 --- a/ChangeLog +++ b/ChangeLog @@ -45,7 +45,7 @@ Changes in version 0.2.7.4-rc - 2015-10-21 o Minor bugfixes (sandbox): - Add the "hidserv-stats" filename to our sandbox filter for the HiddenServiceStatistics option to work properly. Fixes bug 17354; - bugfix on tor-0.2.6.2-alpha~54^2~1. Patch from David Goulet. + bugfix on tor-0.2.6.2-alpha. Patch from David Goulet. o Minor bugfixes (testing): - Add unit tests for get_interface_address* failure cases. Fixes bug @@ -54,7 +54,7 @@ Changes in version 0.2.7.4-rc - 2015-10-21 17154; bugfix on 0.2.7.3-rc. Patch by Marcin Cieślak. - Make the get_ifaddrs_* unit tests more tolerant of different network configurations. (Don't assume every test box has an IPv4 - address, and Don't assume every test box has a non-localhost + address, and don't assume every test box has a non-localhost address.) Fixes bug 17255; bugfix on 0.2.7.3-rc. Patch by "teor". - Skip backtrace tests when backtrace support is not compiled in. Fixes part of bug 17151; bugfix on 0.2.7.1-alpha. Patch from

1 0

[tor/release-0.3.0] Remove all bugfix-on-0.2.7.x items from ReleaseNotes
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 6292a3fcf48ec5b177cee8cec1b542661ae2bb54 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 5 09:29:27 2015 -0500 Remove all bugfix-on-0.2.7.x items from ReleaseNotes --- ReleaseNotes | 90 ++---------------------------------------------------------- 1 file changed, 2 insertions(+), 88 deletions(-) diff --git a/ReleaseNotes b/ReleaseNotes index b84c4da..131d015 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -4,7 +4,7 @@ of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. Changes in version 0.2.7.5- 2015-11-?? - XXXX WRITE A BLURB + XXXX WRITE A BLURB XXXX o Major features (controller): - Add the ADD_ONION and DEL_ONION commands that allow the creation @@ -117,10 +117,6 @@ Changes in version 0.2.7.5- 2015-11-?? connection was initialized. Fixes bug 16247; bugfix on 0.2.6.3-alpha. Patch by "jojelino". - o Major bugfixes (correctness): - - Fix a use-after-free bug in validate_intro_point_failure(). Fixes - bug 17401; bugfix on 0.2.7.3-rc. - o Major bugfixes (hidden service clients, stability, also in 0.2.6.10): - Stop refusing to store updated hidden service descriptors on a client. This reverts commit 9407040c59218 (which indeed fixed bug @@ -147,10 +143,6 @@ Changes in version 0.2.7.5- 2015-11-?? o Major bugfixes (memory leaks): - Fix a memory leak in ed25519 batch signature checking. Fixes bug 17398; bugfix on 0.2.6.1-alpha. - - Fix a memory leak in rend_cache_failure_entry_free(). Fixes bug - 17402; bugfix on 0.2.7.3-rc. - - Fix a memory leak when reading an expired signing key from disk. - Fixes bug 17403; bugfix on 0.2.7.2-rc. o Major bugfixes (open file limit): - The open file limit wasn't checked before calling @@ -159,12 +151,6 @@ Changes in version 0.2.7.5- 2015-11-?? file limit just before, and if the max has been reached, return an error. Fixes bug 16288; bugfix on 0.1.1.1-alpha. - o Major bugfixes (relay, Ed25519): - - Avoid crashing on 'tor --keygen'. Fixes bug 16679; bugfix on - 0.2.7.2-alpha. Reported by "s7r". - - Improve handling of expired signing keys with offline master keys. - Fixes bug 16685; bugfix on 0.2.7.2-alpha. Reported by "s7r". - o Major bugfixes (security, correctness): - Fix an error that could cause us to read 4 bytes before the beginning of an openssl string. This bug could be used to cause @@ -218,9 +204,6 @@ Changes in version 0.2.7.5- 2015-11-?? as torrc option. Resolves issue 14018. o Minor features (compilation): - - Fail during configure if we're trying to build against an OpenSSL - built without ECC support. Fixes bug 17109, bugfix on 0.2.7.1-alpha - which started requiring ECC. - Give a warning as early as possible when trying to build with an unsupported OpenSSL version. Closes ticket 16901. @@ -344,7 +327,7 @@ Changes in version 0.2.7.5- 2015-11-?? explicitly manage consensus flags in testing networks. Patch by "robgjansen", modified by "teor". Implements part of ticket 14882. - o Minor bug fixes (torrc exit policies): + o Minor bugfixes (torrc exit policies): - In each instance above, usage advice is provided to avoid the message. Resolves ticket 16069. Patch by "teor". Fixes part of bug 16069; bugfix on 0.2.4.7-alpha. @@ -362,21 +345,6 @@ Changes in version 0.2.7.5- 2015-11-?? including any ExitPolicy lines after accept *:* or reject *:*. Related to ticket 16069. - o Minor bugfixes (authority): - - Don't assign "HSDir" to a router if it isn't Valid and Running. - Fixes bug 16524; bugfix on 0.2.7.2-alpha. - - Downgrade log messages about Ed25519 key issues if they are in old - cached router descriptors. Fixes part of bug 16286; bugfix - on 0.2.7.2-alpha. - - When we find an Ed25519 key issue in a cached descriptor, stop - saying the descriptor was just "uploaded". Fixes another part of - bug 16286; bugfix on 0.2.7.2-alpha. - - o Minor bugfixes (build): - - Improve out-of-tree builds by making non-standard rules work and - clean up additional files and directories. Fixes bug 15053; bugfix - on 0.2.7.0-alpha. - o Minor bugfixes (command-line interface): - When "--quiet" is provided along with "--validate-config", do not write anything to stdout on success. Fixes bug 14994; bugfix @@ -385,8 +353,6 @@ Changes in version 0.2.7.5- 2015-11-?? stderr, not stdout. o Minor bugfixes (compilation): - - Fix an integer overflow warning in test_crypto_slow.c. Fixes bug - 17251; bugfix on 0.2.7.2-alpha. - Fix compilation of sandbox.c with musl-libc. Fixes bug 17347; bugfix on 0.2.5.1-alpha. Patch from 'jamestk'. - Repair compilation with the most recent (unreleased, alpha) @@ -406,11 +372,6 @@ Changes in version 0.2.7.5- 2015-11-?? consider_adding_dir_servers(). Fixes bug 15642; bugfix on 90f6071d8dc0 in 0.2.4.7-alpha. Patch by "teor". - o Minor bugfixes (control port): - - Repair a warning and a spurious result when getting the maximum - number of file descriptors from the controller. Fixes bug 16697; - bugfix on 0.2.7.2-alpha. - o Minor bugfixes (controller): - Add the descriptor ID in each HS_DESC control event. It was missing, but specified in control-spec.txt. Fixes bug 15881; @@ -449,10 +410,6 @@ Changes in version 0.2.7.5- 2015-11-?? - Fix the usage message of tor-resolve(1) so that it no longer lists the removed -F option. Fixes bug 16913; bugfix on 0.2.2.28-beta. - o Minor bugfixes (Ed25519): - - Fix a memory leak when reading router descriptors with expired - Ed25519 certificates. Fixes bug 16539; bugfix on 0.2.7.2-alpha. - o Minor bugfixes (hidden service): - Fix an out-of-bounds read when parsing invalid INTRODUCE2 cells on a client authorized hidden service. Fixes bug 15823; bugfix @@ -460,14 +417,6 @@ Changes in version 0.2.7.5- 2015-11-?? - Remove an extraneous newline character from the end of hidden service descriptors. Fixes bug 15296; bugfix on 0.2.0.10-alpha. - o Minor bugfixes (hidden services): - - Avoid crashing with a double-free bug when we create an ephemeral - hidden service but adding it fails for some reason. Fixes bug - 16228; bugfix on 0.2.7.1-alpha. - - Fix a crash when reloading configuration while at least one - configured and one ephemeral hidden service exists. Fixes bug - 16060; bugfix on 0.2.7.1-alpha. - o Minor bugfixes (interface): - Print usage information for --dump-config when it is used without an argument. Also, fix the error message to use different wording @@ -479,8 +428,6 @@ Changes in version 0.2.7.5- 2015-11-?? defined. Patch by "teor". Fixes bug 16515; bugfix on 0.2.3.1-alpha. - Allow bridge authorities to run correctly under the seccomp2 sandbox. Fixes bug 16964; bugfix on 0.2.5.1-alpha. - - Allow routers with ed25519 keys to run correctly under the - seccomp2 sandbox. Fixes bug 16965; bugfix on 0.2.7.2-alpha. o Minor bugfixes (Linux seccomp2 sandbox, also in 0.2.6.10): - Allow pipe() and pipe2() syscalls in the seccomp2 sandbox: we need @@ -515,12 +462,6 @@ Changes in version 0.2.7.5- 2015-11-?? o Minor bugfixes (portability): - Check correctly for Windows socket errors in the workqueue backend. Fixes bug 16741; bugfix on 0.2.6.3-alpha. - - Fix the behavior of crypto_rand_time_range() when told to consider - times before 1970. (These times were possible when running in a - simulated network environment where time()'s output starts at - zero.) Fixes bug 16980; bugfix on 0.2.7.1-alpha. - - Restore correct operation of TLS client-cipher detection on - OpenSSL 1.1. Fixes bug 14047; bugfix on 0.2.7.2-alpha. - Try harder to normalize the exit status of the Tor process to the standard-provided range. Fixes bug 16975; bugfix on every version of Tor ever. @@ -559,8 +500,6 @@ Changes in version 0.2.7.5- 2015-11-?? Fixes bug 15604; bugfix on 0.2.2.35. o Minor bugfixes (systemd): - - Fix an accidental formatting error that broke the systemd - configuration file. Fixes bug 16152; bugfix on 0.2.7.1-alpha. - Tor's systemd unit file no longer contains extraneous spaces. These spaces would sometimes confuse tools like deb-systemd- helper. Fixes bug 16162; bugfix on 0.2.5.5-alpha. @@ -575,44 +514,19 @@ Changes in version 0.2.7.5- 2015-11-?? issue discovered by CJ Ess. o Minor bugfixes (testing): - - Add unit tests for get_interface_address* failure cases. Fixes bug - 17173; bugfix on 0.2.7.3-rc. Patch by fk/teor. - Check for matching value in server response in ntor_ref.py. Fixes bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed by "joelanders". - - Fix breakage when running 'make check' with BSD make. Fixes bug - 17154; bugfix on 0.2.7.3-rc. Patch by Marcin Cieślak. - - Make the get_ifaddrs_* unit tests more tolerant of different - network configurations. (Don't assume every test box has an IPv4 - address, and don't assume every test box has a non-localhost - address.) Fixes bug 17255; bugfix on 0.2.7.3-rc. Patch by "teor". - Set the severity correctly when testing get_interface_addresses_ifaddrs() and get_interface_addresses_win32(), so that the tests fail gracefully instead of triggering an assertion. Fixes bug 15759; bugfix on 0.2.6.3-alpha. Reported by Nicolas Derive. - - Skip backtrace tests when backtrace support is not compiled in. - Fixes part of bug 17151; bugfix on 0.2.7.1-alpha. Patch from - Marcin Cieślak. - - o Minor bugfixes (tests): - - Use the configured Python executable when running test-stem-full. - Fixes bug 16470; bugfix on 0.2.7.1-alpha. o Minor bugfixes (tests, also in 0.2.6.9): - Fix a crash in the unit tests when built with MSVC2013. Fixes bug 16030; bugfix on 0.2.6.2-alpha. Patch from "NewEraCracker". - o Minor bugfixes (threads, comments): - - Always initialize return value in compute_desc_id in rendcommon.c - Patch by "teor". Fixes part of bug 16115; bugfix on 0.2.7.1-alpha. - - Check for NULL values in getinfo_helper_onions(). Patch by "teor". - Fixes part of bug 16115; bugfix on 0.2.7.1-alpha. - - Remove undefined directive-in-macro in test_util_writepid clang - 3.7 complains that using a preprocessor directive inside a macro - invocation in test_util_writepid in test_util.c is undefined. - Patch by "teor". Fixes part of bug 16115; bugfix on 0.2.7.1-alpha. - o Code simplification and refactoring: - Change the function that's called when we need to retry all downloads so that it only reschedules the downloads to happen

1 0

[tor/release-0.3.0] More 0274-rc changelog updating
by nickm＠torproject.org 28 Feb '17

28 Feb '17

commit 89a9d8c8d75dac081dd304442182e29186888c39 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Oct 21 13:37:06 2015 -0400 More 0274-rc changelog updating --- ChangeLog | 11 +++++++++++ changes/bug17364 | 3 --- changes/bug17403 | 3 --- changes/bug17404 | 6 ------ 4 files changed, 11 insertions(+), 12 deletions(-) diff --git a/ChangeLog b/ChangeLog index 259e4e5..077e8a4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -4,6 +4,13 @@ Changes in version 0.2.7.4-rc - 2015-10-21 on different platforms. If no further significant bounds are found, the next release will the the official stable release. + o Major bugfixes (security, correctness): + - Fix a programming error that could cause us to read 4 bytes before + the beginning of an openssl string. This could be used to provoke + a crash on systems with an unusual malloc implementation, or + systems with unsual hardening installed. Fixes bug 17404; bugfix + on 0.2.3.6-alpha. + o Major bugfixes (correctness): - Fix a use-after-free bug in validate_intro_point_failure(). Fixes bug 17401; bugfix on 0.2.7.3-rc. @@ -13,6 +20,8 @@ Changes in version 0.2.7.4-rc - 2015-10-21 17398; bugfix on 0.2.6.1-alpha. - Fix a memory leak in rend_cache_failure_entry_free(). Fixes bug 17402; bugfix on 0.2.7.3-rc. + - Fix a memory leak when reading an expired signing key from disk. + Fixes bug 17403; bugfix on 0.2.7.2-rc. o Minor features (geoIP): - Update geoip and geoip6 to the October 9 2015 Maxmind GeoLite2 @@ -51,6 +60,8 @@ Changes in version 0.2.7.4-rc - 2015-10-21 o Documentation: - Fix capitalization of SOCKS in sample torrc. Closes ticket 15609. + - Note that HiddenServicePorts can take a unix domain socket. Closes + ticket 17364. Changes in version 0.2.7.3-rc - 2015-09-25 diff --git a/changes/bug17364 b/changes/bug17364 deleted file mode 100644 index dd9ff12..0000000 --- a/changes/bug17364 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Note that HiddenServicePorts can take a unix domain socket. - Closes ticket 17364. diff --git a/changes/bug17403 b/changes/bug17403 deleted file mode 100644 index e83a4a2..0000000 --- a/changes/bug17403 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (memory leaks): - - Fix a memory leak when reading an expired signing key from disk. - Fixes bug 17403; bugfix on 0.2.7.2-rc. diff --git a/changes/bug17404 b/changes/bug17404 deleted file mode 100644 index d524f66..0000000 --- a/changes/bug17404 +++ /dev/null @@ -1,6 +0,0 @@ - o Major bugfixes (security, correctness): - - Fix a programming error that could cause us to read 4 bytes before - the beginning of an openssl string. This could be used to provoke - a crash on systems with an unusual malloc implementation, or - systems with unsual hardening installed. Fixes bug 17404; bugfix - on 0.2.3.6-alpha.

1 0