June 2017 - tor-commits - lists.torproject.org

[metrics-lib/master] Part of task-22533: failing test.
by karsten＠torproject.org 08 Jun '17

08 Jun '17

commit f18c6ef8b72e52e941a4a37532485ac7b80f5eef Author: iwakeh <iwakeh(a)torproject.org> Date: Wed Jun 7 07:07:49 2017 +0000 Part of task-22533: failing test. --- .../descriptor/impl/DescriptorImplTest.java | 10 ------ .../descriptor/impl/DescriptorParserImplTest.java | 41 ++++++++++++++++++++++ .../torproject/descriptor/impl/TestDescriptor.java | 17 +++++++++ 3 files changed, 58 insertions(+), 10 deletions(-) diff --git a/src/test/java/org/torproject/descriptor/impl/DescriptorImplTest.java b/src/test/java/org/torproject/descriptor/impl/DescriptorImplTest.java index cbe57ff..f1a8935 100644 --- a/src/test/java/org/torproject/descriptor/impl/DescriptorImplTest.java +++ b/src/test/java/org/torproject/descriptor/impl/DescriptorImplTest.java @@ -132,16 +132,6 @@ public class DescriptorImplTest { assertEquals("1bEECw9nT5KRzPG8dAzEFJgSI4OBQfyWn+wjREb8oa8", digest); } - class TestDescriptor extends DescriptorImpl { - - protected TestDescriptor(byte[] rawDescriptorBytes, int[] offsetAndLength, - boolean failUnrecognizedDescriptorLines, boolean blankLinesAllowed) - throws DescriptorParseException { - super(rawDescriptorBytes, offsetAndLength, - failUnrecognizedDescriptorLines, blankLinesAllowed); - } - } - } diff --git a/src/test/java/org/torproject/descriptor/impl/DescriptorParserImplTest.java b/src/test/java/org/torproject/descriptor/impl/DescriptorParserImplTest.java new file mode 100644 index 0000000..ef21ce6 --- /dev/null +++ b/src/test/java/org/torproject/descriptor/impl/DescriptorParserImplTest.java @@ -0,0 +1,41 @@ +/* Copyright 2017 The Tor Project + * See LICENSE for licensing information */ + +package org.torproject.descriptor.impl; + +import static org.junit.Assert.assertEquals; + +import org.junit.Rule; +import org.junit.Test; +import org.junit.rules.ExpectedException; + +public class DescriptorParserImplTest { + + @Rule + public ExpectedException thrown = ExpectedException.none(); + + private TestDescriptor makeTestDesc(byte[] bytes) throws Exception { + return new TestDescriptor(bytes, new int[]{0, bytes.length}, false, false); + } + + private static final String MICRO = + "@type microdescriptor 1.0\n" + + "onion-key\n" + + "-----BEGIN RSA PUBLIC KEY-----\n" + + "MIGJAoGBALzJLYYlkTv6tPet3vusug9judCTrN6MzthV1xVGMSuuWtGHhOJDaIPG\n" + + "hKdp99CAIU3sLXYO6zDQRF8PL/Z1GK3c+QHuotzfHotR7fMGtUQWNZRs9glVrVdj\n" + + "6KGAHFHo+9qs6NPg7Ux8Minw3wuaHCqoFbQVXo8F+S3wJE6YQ37HAgMBAAE=\n" + + "-----END RSA PUBLIC KEY-----\n" + + "ntor-onion-key RYjTCjtZRvOyfatfubhOjcEib/yDMsyJcjPT82mf6VA=\n" + + "id ed25519 ihsbrlWToq8b01rvfszqqTMUl2ulyPV3TniKuTENCzY\n"; + + @Test + public void testAnnotation() throws Exception { + TestDescriptor des = makeTestDesc(MICRO.getBytes()); + DescriptorParserImpl dpi = new DescriptorParserImpl(); + assertEquals(1, + dpi.parseDescriptors(des.getRawDescriptorBytes(), "dummy.file").size()); + } + +} + diff --git a/src/test/java/org/torproject/descriptor/impl/TestDescriptor.java b/src/test/java/org/torproject/descriptor/impl/TestDescriptor.java new file mode 100644 index 0000000..84aedee --- /dev/null +++ b/src/test/java/org/torproject/descriptor/impl/TestDescriptor.java @@ -0,0 +1,17 @@ +/* Copyright 2017 The Tor Project + * See LICENSE for licensing information */ + +package org.torproject.descriptor.impl; + +public class TestDescriptor extends DescriptorImpl { + + protected TestDescriptor(byte[] rawDescriptorBytes, int[] offsetAndLength, + boolean failUnrecognizedDescriptorLines, boolean blankLinesAllowed) + throws DescriptorParseException { + super(rawDescriptorBytes, offsetAndLength, + failUnrecognizedDescriptorLines, blankLinesAllowed); + } +} + + +

1 0

[metrics-lib/master] Prepare for 1.8.1 release.
by karsten＠torproject.org 08 Jun '17

08 Jun '17

commit e0e5d87aacd9f70c23262b7ee10e3e51ec0ae577 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Thu Jun 8 09:43:53 2017 +0200 Prepare for 1.8.1 release. --- CHANGELOG.md | 6 +++++- build.xml | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2e08e97..23259fc 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,8 @@ -# Changes in version 1.9.0 - 2017-06-?? +# Changes in version 1.8.1 - 2017-06-08 + + * Medium changes + - Fix a regression in parsing microdescriptors and version 1 + directories introduced in 1.8.0. # Changes in version 1.8.0 - 2017-06-07 diff --git a/build.xml b/build.xml index df1c36e..cc58705 100644 --- a/build.xml +++ b/build.xml @@ -6,7 +6,7 @@ <project default="usage" name="descriptor" basedir="."> - <property name="release.version" value="1.8.0-dev" /> + <property name="release.version" value="1.8.1" /> <property name="javadoc-title" value="DescripTor API Documentation"/> <property name="javadoc-excludes" value="**/impl/** **/index/**" /> <property name="implementation-title" value="DescripTor" />

1 0

[tor/release-0.2.9] start on the 0.2.9.11 changelog
by nickm＠torproject.org 08 Jun '17

08 Jun '17

commit 5d34df50f821839399faf82ccfd80b8b51b2fa30 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 8 09:03:38 2017 -0400 start on the 0.2.9.11 changelog --- ChangeLog | 66 +++++++++++++++++++++++++++++++++++++++++++++++++ changes/bug20509 | 5 ---- changes/bug21943 | 6 ----- changes/bug22034 | 4 --- changes/bug22370 | 4 --- changes/bug22460_case2 | 8 ------ changes/bug22490 | 3 --- changes/geoip-april2017 | 4 --- changes/geoip-march2017 | 4 --- changes/geoip-may2017 | 4 --- changes/prop275-minimal | 9 ------- changes/ticket21564 | 6 ----- 12 files changed, 66 insertions(+), 57 deletions(-) diff --git a/ChangeLog b/ChangeLog index 203a213..0d75b31 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,69 @@ +Changes in version 0.2.9.11 - 2017-06-08 + Tor 0.2.9.11 fixes a pair of bugs that would allow an attacker to + remotely crash a hidden service with an assertion failure. Anyone + running a hidden service should upgrade to this version, or to some + other version with fixes for TROVE-2017-004 and TROVE-2017-005. + + Tor 0.2.9.11 also backports fixes for several key management bugs + that sometimes made relays unreliable, as well as several other + bugfixes described below. + + o Major bugfixes (relay, link handshake, backport from 0.3.1.3-alpha): + - When performing the v3 link handshake on a TLS connection, report + that we have the x509 certificate that we actually used on that + connection, even if we have changed certificates since that + connection was first opened. Previously, we would claim to have + used our most recent x509 link certificate, which would sometimes + make the link handshake fail. Fixes one case of bug 22460; bugfix + on 0.2.3.6-alpha. + + o Minor features (fallback directory list, backport from 0.3.1.3-alpha): + - Replace the 177 fallbacks originally introduced in Tor 0.2.9.8 in + December 2016 (of which ~126 were still functional) with a list of + 151 fallbacks (32 new, 119 unchanged, 58 removed) generated in May + 2017. Resolves ticket 21564. + + o Minor features (future-proofing, backport from 0.3.0.7): + - Tor no longer refuses to download microdescriptors or descriptors if + they are listed as "published in the future". This change will + eventually allow us to stop listing meaningful "published" dates + in microdescriptor consensuses, and thereby allow us to reduce the + resources required to download consensus diffs by over 50%. + Implements part of ticket 21642; implements part of proposal 275. + + o Minor features (directory authorities, backport from 0.3.0.4-rc) + - Directory authorities now reject relays running versions + 0.2.9.1-alpha through 0.2.9.4-alpha, because those relays + suffer from bug 20499 and don't keep their consensus cache + up-to-date. Resolves ticket 20509. + + o Minor features (geoip): + - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (control port, backport from 0.3.0.6): + - The GETINFO extra-info/digest/<digest> command was broken because + of a wrong base16 decode return value check, introduced when + refactoring that API. Fixes bug 22034; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (correctness, backport from 0.3.1.3-alpha): + - Avoid undefined behavior when parsing IPv6 entries from the geoip6 + file. Fixes bug 22490; bugfix on 0.2.4.6-alpha. + + o Minor bugfixes (Linux seccomp2 sandbox, backport from 0.3.0.7): + - The getpid() system call is now permitted under the Linux seccomp2 + sandbox, to avoid crashing with versions of OpenSSL (and other + libraries) that attempt to learn the process's PID by using the + syscall rather than the VDSO code. Fixes bug 21943; bugfix + on 0.2.5.1-alpha. + + o Minor bugfixes (memory leak, directory authority, backport + from 0.3.1.2-alpha): + - When directory authorities reject a router descriptor due to + keypinning, free the router descriptor rather than leaking the + memory. Fixes bug 22370; bugfix on 0.2.7.2-alpha. + + Changes in version 0.2.9.10 - 2017-03-01 Tor 0.2.9.10 backports a security fix for users who build Tor with the --enable-expensive-hardening option. It also includes fixes for diff --git a/changes/bug20509 b/changes/bug20509 deleted file mode 100644 index a39ca9f..0000000 --- a/changes/bug20509 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - Directory authorities now reject relays running versions - 0.2.9.1-alpha through 0.2.9.4-alpha, because those relays - suffer from bug 20499 and don't keep their consensus cache - up-to-date. Resolves ticket 20509. diff --git a/changes/bug21943 b/changes/bug21943 deleted file mode 100644 index dbe2c72..0000000 --- a/changes/bug21943 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (Linux seccomp2 sandbox): - - The getpid() system call is now permitted under the Linux seccomp2 - sandbox, to avoid crashing with versions of OpenSSL (and other - libraries) that attempt to learn the process's PID by using the - syscall rather than the VDSO code. Fixes bug 21943; bugfix on - 0.2.5.1-alpha. diff --git a/changes/bug22034 b/changes/bug22034 deleted file mode 100644 index 6d9e188..0000000 --- a/changes/bug22034 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (control port, regression): - - The GETINFO extra-info/digest/<digest> command was broken because of a - wrong base16 decode return value check. In was introduced in a refactor - of that API. Fixex bug #22034; bugfix on tor-0.2.9.1-alpha. diff --git a/changes/bug22370 b/changes/bug22370 deleted file mode 100644 index e0e87e3..0000000 --- a/changes/bug22370 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (memory handling): - - When directory authorities reject a router descriptor due to keypinning, - free the router descriptor rather than leaking the memory. - Fixes bug 22370; bugfix on 0.2.7.2-alpha. diff --git a/changes/bug22460_case2 b/changes/bug22460_case2 deleted file mode 100644 index 0a11759..0000000 --- a/changes/bug22460_case2 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes (relay, link handshake): - - - When performing the v3 link handshake on a TLS connection, report that - we have the x509 certificate that we actually used on that connection, - even if we have changed certificates since that connection was first - opened. Previously, we would claim to have used our most recent x509 - link certificate, which would sometimes make the link handshake fail. - Fixes one case of bug 22460; bugfix on 0.2.3.6-alpha. diff --git a/changes/bug22490 b/changes/bug22490 deleted file mode 100644 index 244dd50..0000000 --- a/changes/bug22490 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (correctness): - - Avoid undefined behavior when parsing IPv6 entries from the geoip6 - file. Fixes bug 22490; bugfix on 0.2.4.6-alpha. diff --git a/changes/geoip-april2017 b/changes/geoip-april2017 deleted file mode 100644 index b489eaf..0000000 --- a/changes/geoip-april2017 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the April 4 2017 Maxmind GeoLite2 - Country database. - diff --git a/changes/geoip-march2017 b/changes/geoip-march2017 deleted file mode 100644 index 6dc92ba..0000000 --- a/changes/geoip-march2017 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the March 7 2017 Maxmind GeoLite2 - Country database. - diff --git a/changes/geoip-may2017 b/changes/geoip-may2017 deleted file mode 100644 index 4e504d7..0000000 --- a/changes/geoip-may2017 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2 - Country database. - diff --git a/changes/prop275-minimal b/changes/prop275-minimal deleted file mode 100644 index 83d42f8..0000000 --- a/changes/prop275-minimal +++ /dev/null @@ -1,9 +0,0 @@ - o Minor features (future-proofing): - - - Tor no longer refuses to download microdescriptors or descriptors if - they are listed as "published in the future". This change will - eventually allow us to stop listing meaningful "published" dates - in microdescriptor consensuses, and thereby allow us to reduce the - resources required to download consensus diffs by over 50%. - Implements part of ticket 21642; implements part of proposal 275. - diff --git a/changes/ticket21564 b/changes/ticket21564 deleted file mode 100644 index 7e01f41..0000000 --- a/changes/ticket21564 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (fallback directory list): - - Replace the 177 fallbacks originally introduced in Tor 0.2.9.8 in - December 2016 (of which ~126 were still functional), with a list of - 151 fallbacks (32 new, 119 existing, 58 removed) generated in - May 2017. - Resolves ticket 21564.

1 0

[tor/release-0.3.0] Start on an 0.3.0.8 changelog
by nickm＠torproject.org 08 Jun '17

08 Jun '17

commit 17c61d98e40c74167daaebdd3eaa5502739826ed Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 8 08:45:57 2017 -0400 Start on an 0.3.0.8 changelog --- ChangeLog | 69 +++++++++++++++++++++++++++++++++++++++++++++ changes/bug20509 | 5 ---- changes/bug22252 | 3 -- changes/bug22370 | 4 --- changes/bug22447 | 3 -- changes/bug22460_case1 | 16 ----------- changes/bug22460_case2 | 8 ------ changes/bug22466_regenerate | 8 ------ changes/bug22490 | 3 -- changes/ticket21564 | 6 ---- 10 files changed, 69 insertions(+), 56 deletions(-) diff --git a/ChangeLog b/ChangeLog index 04ebabd..56a7ce0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,72 @@ +Changes in version 0.3.0.8 - 2017-06-08 + Tor 0.3.0.8 fixes a pair of bugs that would allow an attacker to + remotely crash a hidden service with an assertion failure. Anyone + running a hidden service should upgrade to this version, or to some + other version with fixes for TROVE-2017-004 and TROVE-2017-005. + + Tor 0.3.0.8 also includes fixes for several key management bugs + that sometimes made relays unreliable, as well as several other + bugfixes described below. + + o Major bugfixes (relay, link handshake, backport from 0.3.1.3-alpha): + - When performing the v3 link handshake on a TLS connection, report + that we have the x509 certificate that we actually used on that + connection, even if we have changed certificates since that + connection was first opened. Previously, we would claim to have + used our most recent x509 link certificate, which would sometimes + make the link handshake fail. Fixes one case of bug 22460; bugfix + on 0.2.3.6-alpha. + + o Major bugfixes (relays, key management, backport from 0.3.1.3-alpha): + - Regenerate link and authentication certificates whenever the key + that signs them changes; also, regenerate link certificates + whenever the signed key changes. Previously, these processes were + only weakly coupled, and we relays could (for minutes to hours) + wind up with an inconsistent set of keys and certificates, which + other relays would not accept. Fixes two cases of bug 22460; + bugfix on 0.3.0.1-alpha. + - When sending an Ed25519 signing->link certificate in a CERTS cell, + send the certificate that matches the x509 certificate that we + used on the TLS connection. Previously, there was a race condition + if the TLS context rotated after we began the TLS handshake but + before we sent the CERTS cell. Fixes a case of bug 22460; bugfix + on 0.3.0.1-alpha. + + o Major bugfixes (hidden service v3, backport from 0.3.1.1-alpha): + - Stop rejecting v3 hidden service descriptors because their size + did not match an old padding rule. Fixes bug 22447; bugfix on + tor-0.3.0.1-alpha. + + o Minor features (fallback directory list, backport from 0.3.1.3-alpha): + - Replace the 177 fallbacks originally introduced in Tor 0.2.9.8 in + December 2016 (of which ~126 were still functional) with a list of + 151 fallbacks (32 new, 119 unchanged, 58 removed) generated in May + 2017. Resolves ticket 21564. + + o Minor bugfixes (configuration, backport from 0.3.1.1-alpha): + - Do not crash when starting with LearnCircuitBuildTimeout 0. Fixes + bug 22252; bugfix on 0.2.9.3-alpha. + + o Minor bugfixes (correctness, backport from 0.3.1.3-alpha): + - Avoid undefined behavior when parsing IPv6 entries from the geoip6 + file. Fixes bug 22490; bugfix on 0.2.4.6-alpha. + + o Minor bugfixes (link handshake, backport from 0.3.1.3-alpha): + - Lower the lifetime of the RSA->Ed25519 cross-certificate to six + months, and regenerate it when it is within one month of expiring. + Previously, we had generated this certificate at startup with a + ten-year lifetime, but that could lead to weird behavior when Tor + was started with a grossly inaccurate clock. Mitigates bug 22466; + mitigation on 0.3.0.1-alpha. + + o Minor bugfixes (memory leak, directory authority, backport from + 0.3.1.2-alpha): + - When directory authorities reject a router descriptor due to + keypinning, free the router descriptor rather than leaking the + memory. Fixes bug 22370; bugfix on 0.2.7.2-alpha. + + + Changes in version 0.3.0.7 - 2017-05-15 Tor 0.3.0.7 fixes a medium-severity security bug in earlier versions of Tor 0.3.0.x, where an attacker could cause a Tor relay process to diff --git a/changes/bug20509 b/changes/bug20509 deleted file mode 100644 index a39ca9f..0000000 --- a/changes/bug20509 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - Directory authorities now reject relays running versions - 0.2.9.1-alpha through 0.2.9.4-alpha, because those relays - suffer from bug 20499 and don't keep their consensus cache - up-to-date. Resolves ticket 20509. diff --git a/changes/bug22252 b/changes/bug22252 deleted file mode 100644 index 42b9d8e..0000000 --- a/changes/bug22252 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (configuration): - - Do not crash when starting with LearnCircuitBuildTimeout 0. - Fixes bug 22252; bugfix on 0.2.9.3-alpha. diff --git a/changes/bug22370 b/changes/bug22370 deleted file mode 100644 index e0e87e3..0000000 --- a/changes/bug22370 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (memory handling): - - When directory authorities reject a router descriptor due to keypinning, - free the router descriptor rather than leaking the memory. - Fixes bug 22370; bugfix on 0.2.7.2-alpha. diff --git a/changes/bug22447 b/changes/bug22447 deleted file mode 100644 index f5649d6..0000000 --- a/changes/bug22447 +++ /dev/null @@ -1,3 +0,0 @@ - o Major bugfixes (hidden service v3): - - HSDir failed to validate the encrypted size of a v3 descriptor and thus - rejecting it. Fixes bug 22447; bugfix on tor-0.3.0.1-alpha. diff --git a/changes/bug22460_case1 b/changes/bug22460_case1 deleted file mode 100644 index cfe78ad..0000000 --- a/changes/bug22460_case1 +++ /dev/null @@ -1,16 +0,0 @@ - o Major bugfixes (relays, key management): - - Regenerate link and authentication certificates whenever the key that - signs them changes; also, regenerate link certificates whenever the - signed key changes. Previously, these processes were only weakly - coupled, and we relays could (for minutes to hours) wind up with an - inconsistent set of keys and certificates, which other relays - would not accept. Fixes two cases of bug 22460; bugfix on - 0.3.0.1-alpha. - - When sending an Ed25519 signing->link certificate in a CERTS cell, - send the certificate that matches the x509 certificate that we used - on the TLS connection. Previously, there was a race condition if - the TLS context rotated after we began the TLS handshake but - before we sent the CERTS cell. Fixes a case of bug 22460; bugfix - on 0.3.0.1-alpha. - - diff --git a/changes/bug22460_case2 b/changes/bug22460_case2 deleted file mode 100644 index 0a11759..0000000 --- a/changes/bug22460_case2 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes (relay, link handshake): - - - When performing the v3 link handshake on a TLS connection, report that - we have the x509 certificate that we actually used on that connection, - even if we have changed certificates since that connection was first - opened. Previously, we would claim to have used our most recent x509 - link certificate, which would sometimes make the link handshake fail. - Fixes one case of bug 22460; bugfix on 0.2.3.6-alpha. diff --git a/changes/bug22466_regenerate b/changes/bug22466_regenerate deleted file mode 100644 index 8dbda89..0000000 --- a/changes/bug22466_regenerate +++ /dev/null @@ -1,8 +0,0 @@ - o Minor bugfixes (link handshake): - - Lower the lifetime of the RSA->Ed25519 cross-certificate to - six months, and regenerate it when it is within one month of expiring. - Previously, we had generated this certificate at startup with - a ten-year lifetime, but that could lead to weird behavior when - Tor was started with a grossly inaccurate clock. Mitigates - bug 22466; mitigation on 0.3.0.1-alpha. - diff --git a/changes/bug22490 b/changes/bug22490 deleted file mode 100644 index 244dd50..0000000 --- a/changes/bug22490 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (correctness): - - Avoid undefined behavior when parsing IPv6 entries from the geoip6 - file. Fixes bug 22490; bugfix on 0.2.4.6-alpha. diff --git a/changes/ticket21564 b/changes/ticket21564 deleted file mode 100644 index 7e01f41..0000000 --- a/changes/ticket21564 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (fallback directory list): - - Replace the 177 fallbacks originally introduced in Tor 0.2.9.8 in - December 2016 (of which ~126 were still functional), with a list of - 151 fallbacks (32 new, 119 existing, 58 removed) generated in - May 2017. - Resolves ticket 21564.

1 0

[tor/master] Start on a changelog for 0.3.1.3-alpha
by nickm＠torproject.org 07 Jun '17

07 Jun '17

commit 5955b63a9a4182f8909a2a31bd3818b574fd0895 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jun 7 09:36:12 2017 -0400 Start on a changelog for 0.3.1.3-alpha --- ChangeLog | 78 ++++++++++++++++++++++++++++++++++++++++++++- changes/bug22413 | 4 --- changes/bug22417 | 3 -- changes/bug22424 | 5 --- changes/bug22446 | 4 --- changes/bug22460_case1 | 16 ---------- changes/bug22460_case2 | 8 ----- changes/bug22466_diagnostic | 4 --- changes/bug22466_regenerate | 8 ----- changes/bug22490 | 3 -- changes/bug6298 | 4 --- changes/torify-manpage | 3 -- 12 files changed, 77 insertions(+), 63 deletions(-) diff --git a/ChangeLog b/ChangeLog index 60904d3..fc0e833 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,82 @@ -Changes in version 0.3.1.3-alpha - 2017-06-?? +Changes in version 0.3.1.3-alpha - 2017-06-08 + Tor 0.3.1.3-alpha fixes a pair of bugs that would allow an attacker to + remotely crash a hidden service with an assertion failure. Anyone + running a hidden service should upgrade to this version, or to some + other version with fixes for TROVE-2017-004 and TROVE-2017-005. + + Tor 0.3.1.3-alpha also includes fixes for several key management bugs + that sometimes made relays unreliable, as well as several other + bugfixes described below. + + o Major bugfixes (relay, link handshake): + - When performing the v3 link handshake on a TLS connection, report + that we have the x509 certificate that we actually used on that + connection, even if we have changed certificates since that + connection was first opened. Previously, we would claim to have + used our most recent x509 link certificate, which would sometimes + make the link handshake fail. Fixes one case of bug 22460; bugfix + on 0.2.3.6-alpha. + + o Major bugfixes (relays, key management): + - Regenerate link and authentication certificates whenever the key + that signs them changes; also, regenerate link certificates + whenever the signed key changes. Previously, these processes were + only weakly coupled, and we relays could (for minutes to hours) + wind up with an inconsistent set of keys and certificates, which + other relays would not accept. Fixes two cases of bug 22460; + bugfix on 0.3.0.1-alpha. + - When sending an Ed25519 signing->link certificate in a CERTS cell, + send the certificate that matches the x509 certificate that we + used on the TLS connection. Previously, there was a race condition + if the TLS context rotated after we began the TLS handshake but + before we sent the CERTS cell. Fixes a case of bug 22460; bugfix + on 0.3.0.1-alpha. + + o Major bugfixes (torrc, crash): + - Fix a crash bug when using %include in torrc. Fixes bug 22417; + bugfix on 0.3.1.1-alpha. Patch by Daniel Pinto. + + o Minor features (code style): + - Add "Falls through" comments to our codebase, in order to silence + GCC 7's -Wimplicit-fallthrough warnings. Patch from Andreas + Stieger. Closes ticket 22446. + o Minor features (diagnostic): + - Add logging messages to try to diagnose a rare bug that seems to + generate RSA->Ed25519 cross-certificates dated in the 1970s. We + think this is happening because of incorrect system clocks, but + we'd like to know for certain. Diagnostic for bug 22466. + + o Minor bugfixes (correctness): + - Avoid undefined behavior when parsing IPv6 entries from the geoip6 + file. Fixes bug 22490; bugfix on 0.2.4.6-alpha. + + o Minor bugfixes (directory protocol): + - Check for libzstd >= 1.1, because older versions lack the + necessary streaming API. Fixes bug 22413; bugfix on 0.3.1.1-alpha. + + o Minor bugfixes (link handshake): + - Lower the lifetime of the RSA->Ed25519 cross-certificate to six + months, and regenerate it when it is within one month of expiring. + Previously, we had generated this certificate at startup with a + ten-year lifetime, but that could lead to weird behavior when Tor + was started with a grossly inaccurate clock. Mitigates bug 22466; + mitigation on 0.3.0.1-alpha. + + o Minor bugfixes (storage directories): + - Always check for underflows in the cached storage directory usage. + If the usage does underflow, re-calculate it. Also, avoid a + separate underflow when the usage is not known. Fixes bug 22424; + bugfix on 0.3.1.1-alpha. + o Minor bugfixes (unit tests): + - The unit tests now pass on systems where localhost is misconfigured + to some IPv4 address other than 127.0.0.1. Fixes bug 6298; bugfix + on 0.0.9pre2. + + o Documentation: + - Clarify the manpage for the (deprecated) torify script. Closes + ticket 6892. Changes in version 0.3.1.2-alpha - 2017-05-26 diff --git a/changes/bug22413 b/changes/bug22413 deleted file mode 100644 index 5b522f1..0000000 --- a/changes/bug22413 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (directory protocol): - - Check for libzstd >= 1.1 because older versions lack the - necessary streaming API. Fixes bug 22413; bugfix on - 0.3.1.1-alpha. diff --git a/changes/bug22417 b/changes/bug22417 deleted file mode 100644 index 88c601a..0000000 --- a/changes/bug22417 +++ /dev/null @@ -1,3 +0,0 @@ - o Major bugfixes (torrc, crash): - - Fix a crash bug when using %include in torrc. Fixes bug 22417; - bugfix on 0.3.1.1-alpha. Patch by Daniel Pinto. diff --git a/changes/bug22424 b/changes/bug22424 deleted file mode 100644 index de4cff7..0000000 --- a/changes/bug22424 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (storage directories): - - Always check for underflows in the cached storage directory usage amount. - If the usage does underflow, re-calculate the usage. Also, avoid a - separate underflow when the usage is not known. - Fixes bug 22424 in 0.3.1.1-alpha. diff --git a/changes/bug22446 b/changes/bug22446 deleted file mode 100644 index 5932a2e..0000000 --- a/changes/bug22446 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (code style): - - Add "Falls through" comments to our codebase in order to silence - GCC 7's -Wimplicit-fallthrough warnings. Patch from Andreas Stieger. - Closes ticket 22446. diff --git a/changes/bug22460_case1 b/changes/bug22460_case1 deleted file mode 100644 index cfe78ad..0000000 --- a/changes/bug22460_case1 +++ /dev/null @@ -1,16 +0,0 @@ - o Major bugfixes (relays, key management): - - Regenerate link and authentication certificates whenever the key that - signs them changes; also, regenerate link certificates whenever the - signed key changes. Previously, these processes were only weakly - coupled, and we relays could (for minutes to hours) wind up with an - inconsistent set of keys and certificates, which other relays - would not accept. Fixes two cases of bug 22460; bugfix on - 0.3.0.1-alpha. - - When sending an Ed25519 signing->link certificate in a CERTS cell, - send the certificate that matches the x509 certificate that we used - on the TLS connection. Previously, there was a race condition if - the TLS context rotated after we began the TLS handshake but - before we sent the CERTS cell. Fixes a case of bug 22460; bugfix - on 0.3.0.1-alpha. - - diff --git a/changes/bug22460_case2 b/changes/bug22460_case2 deleted file mode 100644 index 0a11759..0000000 --- a/changes/bug22460_case2 +++ /dev/null @@ -1,8 +0,0 @@ - o Major bugfixes (relay, link handshake): - - - When performing the v3 link handshake on a TLS connection, report that - we have the x509 certificate that we actually used on that connection, - even if we have changed certificates since that connection was first - opened. Previously, we would claim to have used our most recent x509 - link certificate, which would sometimes make the link handshake fail. - Fixes one case of bug 22460; bugfix on 0.2.3.6-alpha. diff --git a/changes/bug22466_diagnostic b/changes/bug22466_diagnostic deleted file mode 100644 index 0286c65..0000000 --- a/changes/bug22466_diagnostic +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (diagnostic): - - Add logging messages to try to diagnose a rare bug that seems - to generate RSA->Ed25519 cross-certificates dated in the 1970s. - Diagnostic for bug 22466. diff --git a/changes/bug22466_regenerate b/changes/bug22466_regenerate deleted file mode 100644 index 8dbda89..0000000 --- a/changes/bug22466_regenerate +++ /dev/null @@ -1,8 +0,0 @@ - o Minor bugfixes (link handshake): - - Lower the lifetime of the RSA->Ed25519 cross-certificate to - six months, and regenerate it when it is within one month of expiring. - Previously, we had generated this certificate at startup with - a ten-year lifetime, but that could lead to weird behavior when - Tor was started with a grossly inaccurate clock. Mitigates - bug 22466; mitigation on 0.3.0.1-alpha. - diff --git a/changes/bug22490 b/changes/bug22490 deleted file mode 100644 index 244dd50..0000000 --- a/changes/bug22490 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (correctness): - - Avoid undefined behavior when parsing IPv6 entries from the geoip6 - file. Fixes bug 22490; bugfix on 0.2.4.6-alpha. diff --git a/changes/bug6298 b/changes/bug6298 deleted file mode 100644 index 8e03ce1..0000000 --- a/changes/bug6298 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (unit tests): - - The unit tests now pass on systems where localhost is misconfigured - to some IPv4 address other than 127.0.0.1. Fixes bug 6298; - bugfix on 0.0.9pre2. diff --git a/changes/torify-manpage b/changes/torify-manpage deleted file mode 100644 index f8bf56c..0000000 --- a/changes/torify-manpage +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Clarify the manpage for the (deprecated) torify script. Closes - ticket 6892.

1 0

[webwml/master] 10.9 is the min OS X version for Tor Browser 7
by gk＠torproject.org 07 Jun '17

07 Jun '17

commit d3ae74b60503eef278bea24058640b81612643ed Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jun 7 12:10:57 2017 +0000 10.9 is the min OS X version for Tor Browser 7 --- download/en/download-easy.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/download/en/download-easy.wml b/download/en/download-easy.wml index bd806b4..def3a51 100644 --- a/download/en/download-easy.wml +++ b/download/en/download-easy.wml @@ -60,7 +60,7 @@ <div class="package" style="padding-top: 13px; border-top: 0px;"> <div class="desc"> <h2>Tor Browser for Mac</h2> - <em>Version <version-torbrowserbundleosx64> - OS X (10.6+)</em> <a href="https://blog.torproject.org/category/tags/tbb">Read the release announcements!</a> + <em>Version <version-torbrowserbundleosx64> - OS X (10.9+)</em> <a href="https://blog.torproject.org/category/tags/tbb">Read the release announcements!</a> <p>Everything you need to safely browse the Internet.<br /><a href="<page projects/torbrowser>">Learn more »</a></p> </div> <form class="downloads">

1 0

[webwml/master] Add new Tor Browser version: 7.0
by boklm＠torproject.org 07 Jun '17

07 Jun '17

commit 7c4a7d7ee1e734a853d41da11a18d152c2609e8c Author: Nicolas Vigier <boklm(a)torproject.org> Date: Wed Jun 7 12:15:15 2017 +0200 Add new Tor Browser version: 7.0 --- include/versions.wmi | 26 +++++++++++++------------- projects/torbrowser/RecommendedTBBVersions | 4 ++++ 2 files changed, 17 insertions(+), 13 deletions(-) diff --git a/include/versions.wmi b/include/versions.wmi index ba7e2ea..4fadd81 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,30 +1,30 @@ <define-tag version-stable whitespace=delete>0.3.0.7</define-tag> <define-tag version-alpha whitespace=delete>0.3.1.2-alpha</define-tag> -<define-tag version-win32-stable whitespace=delete>0.2.9.10</define-tag> +<define-tag version-win32-stable whitespace=delete>0.3.0.7</define-tag> -<define-tag version-torbrowserdevelopbranch whitespace=delete>maint-6.5</define-tag> -<define-tag version-torbrowserbundledir whitespace=delete>6.5.2</define-tag> +<define-tag version-torbrowserdevelopbranch whitespace=delete>maint-7.0</define-tag> +<define-tag version-torbrowserbundledir whitespace=delete>7.0</define-tag> <define-tag version-torbrowserbundlebetadir whitespace=delete>7.0a4</define-tag> -<define-tag version-torbrowserbundle whitespace=delete>6.5.2</define-tag> -<define-tag releasedate-torbrowserbundle whitespace=delete>2017-04-19</define-tag> +<define-tag version-torbrowserbundle whitespace=delete>7.0</define-tag> +<define-tag releasedate-torbrowserbundle whitespace=delete>2017-06-07</define-tag> <define-tag version-torbrowserbundlebeta whitespace=delete>7.0a4</define-tag> <define-tag releasedate-torbrowserbundlebeta whitespace=delete>2017-05-16</define-tag> -<define-tag version-torbrowserbundlelinux32 whitespace=delete>6.5.2</define-tag> -<define-tag releasedate-torbrowserbundlelinux32 whitespace=delete>2017-04-19</define-tag> -<define-tag version-torbrowserbundlelinux64 whitespace=delete>6.5.2</define-tag> -<define-tag releasedate-torbrowserbundlelinux64 whitespace=delete>2017-04-19</define-tag> +<define-tag version-torbrowserbundlelinux32 whitespace=delete>7.0</define-tag> +<define-tag releasedate-torbrowserbundlelinux32 whitespace=delete>2017-06-07</define-tag> +<define-tag version-torbrowserbundlelinux64 whitespace=delete>7.0</define-tag> +<define-tag releasedate-torbrowserbundlelinux64 whitespace=delete>2017-06-07</define-tag> <define-tag version-torbrowserbundlelinux32beta whitespace=delete>7.0a4</define-tag> <define-tag releasedate-torbrowserbundlelinux32beta whitespace=delete>2017-05-16</define-tag> <define-tag version-torbrowserbundlelinux64beta whitespace=delete>7.0a4</define-tag> <define-tag releasedate-torbrowserbundlelinux64beta whitespace=delete>2017-05-16</define-tag> -<define-tag version-torbrowserbundleosx32 whitespace=delete>6.5.2</define-tag> -<define-tag releasedate-torbrowserbundleosx32 whitespace=delete>2017-04-19</define-tag> -<define-tag version-torbrowserbundleosx64 whitespace=delete>6.5.2</define-tag> -<define-tag releasedate-torbrowserbundleosx64 whitespace=delete>2017-04-19</define-tag> +<define-tag version-torbrowserbundleosx32 whitespace=delete>7.0</define-tag> +<define-tag releasedate-torbrowserbundleosx32 whitespace=delete>2017-06-07</define-tag> +<define-tag version-torbrowserbundleosx64 whitespace=delete>7.0</define-tag> +<define-tag releasedate-torbrowserbundleosx64 whitespace=delete>2017-06-07</define-tag> <define-tag version-torbrowserbundleosx64beta whitespace=delete>7.0a4</define-tag> <define-tag releasedate-torbrowserbundleosx64beta whitespace=delete>2017-05-16</define-tag> <define-tag version-torbrowsersandboxlinux whitespace=delete>0.0.6</define-tag> diff --git a/projects/torbrowser/RecommendedTBBVersions b/projects/torbrowser/RecommendedTBBVersions index 33c69e5..ca853dd 100644 --- a/projects/torbrowser/RecommendedTBBVersions +++ b/projects/torbrowser/RecommendedTBBVersions @@ -3,6 +3,10 @@ "6.5.2-Linux", "6.5.2-MacOS", "6.5.2-Windows", +"7.0", +"7.0-Linux", +"7.0-MacOS", +"7.0-Windows", "7.0a4", "7.0a4-Linux", "7.0a4-MacOS",

1 0

[tor-browser-spec/master] Bug 22504: change the update responses path
by gk＠torproject.org 07 Jun '17

07 Jun '17

commit d54a2790500269d6f9f02c7af0a2e83c23ddd918 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Tue Jun 6 11:34:04 2017 +0200 Bug 22504: change the update responses path Change update_2 to update_3, and use aus1.tpo instead of dist.tpo. --- processes/ReleaseProcess | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/processes/ReleaseProcess b/processes/ReleaseProcess index 09d38d7..e4d261e 100644 --- a/processes/ReleaseProcess +++ b/processes/ReleaseProcess @@ -166,9 +166,10 @@ chmod 664 htdocs/${TORBROWSER_UPDATE_CHANNEL}/* chmod 664 htdocs/${TORBROWSER_UPDATE_CHANNEL}/.htaccess chmod 775 htdocs/${TORBROWSER_UPDATE_CHANNEL}/ - torsocks ssh staticiforme.torproject.org "rm -rf /srv/dist-master.torproject.org/htdocs/torbrowser/update_2/${TORBROWSER_UPDATE_CHANNEL}/*" - torsocks rsync -avP htdocs/$TORBROWSER_UPDATE_CHANNEL staticiforme.torproject.org:/srv/dist-master.torproject.org/htdocs/torbrows… - torsocks ssh staticiforme.torproject.org "chown -R :torwww /srv/dist-master.torproject.org/htdocs/torbrowser/update_2/${TORBROWSER_UPDATE_CHANNEL}/*" + torsocks ssh staticiforme.torproject.org "rm -rf /srv/aus1-master.torproject.org/htdocs/torbrowser/update_3/${TORBROWSER_UPDATE_CHANNEL}/*" + torsocks rsync -avP htdocs/$TORBROWSER_UPDATE_CHANNEL staticiforme.torproject.org:/srv/aus1-master.torproject.org/htdocs/torbrows… + torsocks ssh staticiforme.torproject.org "chown -R :torwww /srv/aus1-master.torproject.org/htdocs/torbrowser/update_3/${TORBROWSER_UPDATE_CHANNEL}/*" + torsocks ssh staticiforme.torproject.org "static-update-component aus1.torproject.org" # Finally, remove old version as we point the update channel at the new version. # XXX: CAREFUL! $OLD_TOR_BROWSER_VERSION must be set! torsocks ssh staticiforme.torproject.org "rm -rf /srv/dist-master.torproject.org/htdocs/torbrowser/$OLD_TORBROWSER_VERSION"

1 0

[collector/master] Update to metrics-lib 1.8.0.
by karsten＠torproject.org 07 Jun '17

07 Jun '17

commit 4746c2074bef31e8e9fcbf819583c7192bfad180 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Wed Jun 7 09:24:04 2017 +0200 Update to metrics-lib 1.8.0. --- build.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.xml b/build.xml index 15fb17e..929aff2 100644 --- a/build.xml +++ b/build.xml @@ -11,7 +11,7 @@ <property name="release.version" value="1.1.2-dev" /> <property name="project-main-class" value="org.torproject.collector.Main" /> <property name="name" value="collector"/> - <property name="descriptorversion" value="1.7.0" /> + <property name="descriptorversion" value="1.8.0" /> <property name="jarincludes" value="collector.properties logback.xml" /> <patternset id="runtime" >

1 0

[metrics-web/master] Update to metrics-lib 1.8.0.
by karsten＠torproject.org 07 Jun '17

07 Jun '17

commit 81c6053eb35413c94306b79eed4588fc86c89f7f Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Wed Jun 7 09:20:44 2017 +0200 Update to metrics-lib 1.8.0. --- shared/build-base.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/shared/build-base.xml b/shared/build-base.xml index c6f9920..f0ec381 100644 --- a/shared/build-base.xml +++ b/shared/build-base.xml @@ -8,7 +8,7 @@ <property name="classes" value="${generated}/classes/"/> <property name="testclasses" value="${generated}/test-classes/"/> <property name="source-and-target-java-version" value="1.7" /> - <property name="descriptorversion" value="1.7.0" /> + <property name="descriptorversion" value="1.8.0" /> <path id="base.classpath"> <pathelement path="${classes}"/>

1 0