June 2017 - tor-commits - lists.torproject.org

[tor/release-0.3.0] Merge branch 'maint-0.3.0' into release-0.3.0
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 03539b76cf23b4a119b8babf643679ebabda0dd0 Merge: 2e3c529 d9427c0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 18:48:32 2017 -0400 Merge branch 'maint-0.3.0' into release-0.3.0 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.1] Merge branch 'maint-0.3.0' into maint-0.3.1
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 6f2657dbcf81c8f78acb49d487075e66ec9be3c2 Merge: a535735 d9427c0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 18:44:53 2017 -0400 Merge branch 'maint-0.3.0' into maint-0.3.1 "ours" merge to avoid version bump.

1 0

[tor/release-0.3.1] Merge branch 'maint-0.3.1' into release-0.3.1
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 26c9afc3860494457b20a33b65d7c2bd459cdd94 Merge: fab91a2 83dc072 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 18:48:33 2017 -0400 Merge branch 'maint-0.3.1' into release-0.3.1 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/release-0.3.1] bump to 0.3.0.9-dev
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit d9427c00dfcda58d1a2561b37c1c6217d2ff692a Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 18:44:43 2017 -0400 bump to 0.3.0.9-dev --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 6c6eb6c..f67e0dc 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2015, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.3.0.9]) +AC_INIT([tor],[0.3.0.9-dev]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 57821bc..3b375c8 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.3.0.9" +!define VERSION "0.3.0.9-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 96d16bd..ba6818f 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -218,7 +218,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.3.0.9" +#define VERSION "0.3.0.9-dev"

1 0

[tor/release-0.3.1] Bump version to 0.3.1.4-alpha-dev
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 83dc072e673a9d4151c03db09531bb032943086b Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 18:45:49 2017 -0400 Bump version to 0.3.1.4-alpha-dev --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index bbc60c3..fc95491 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2017, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.3.1.4-alpha]) +AC_INIT([tor],[0.3.1.4-alpha-dev]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index e1b8bc5..d6c0217 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.3.1.4-alpha" +!define VERSION "0.3.1.4-alpha-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 668f0b6..caaf481 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -218,7 +218,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.3.1.4-alpha" +#define VERSION "0.3.1.4-alpha-dev"

1 0

[webwml/master] Two new tor source releases.
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 98f29cb51e0a9b26f1980e54f69d9f1bbcfc94b5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 18:38:52 2017 -0400 Two new tor source releases. --- Makefile | 4 ++-- include/versions.wmi | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/Makefile b/Makefile index 4758dd7..1dcdcaf 100644 --- a/Makefile +++ b/Makefile @@ -14,8 +14,8 @@ # branch to your personal webwml repository, open a trac ticket in the # website component, and set it to needs_review. -export STABLETAG=tor-0.3.0.8 -export DEVTAG=tor-0.3.1.3-alpha +export STABLETAG=tor-0.3.0.9 +export DEVTAG=tor-0.3.1.4-alpha WMLBASE=. diff --git a/include/versions.wmi b/include/versions.wmi index 7b8598a..34facfd 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,5 +1,5 @@ -<define-tag version-stable whitespace=delete>0.3.0.8</define-tag> -<define-tag version-alpha whitespace=delete>0.3.1.3-alpha</define-tag> +<define-tag version-stable whitespace=delete>0.3.0.9</define-tag> +<define-tag version-alpha whitespace=delete>0.3.1.4-alpha</define-tag> <define-tag version-win32-stable whitespace=delete>0.3.0.8</define-tag>

1 0

[tor/release-0.3.0] add a missing backport note
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 22b3bf094e3270934ae0c66a38a0e656c1fd6d98 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 17:03:23 2017 -0400 add a missing backport note --- ChangeLog | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) diff --git a/ChangeLog b/ChangeLog index 460beee..8b128a7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,57 @@ +Changes in version 0.3.0.9 - 2017-06-29 + Tor 0.3.0.9 fixes a path selection bug that would allow a client + to use a guard that was in the same network family as a chosen exit + relay. This is a security regression; all clients running earlier + versions of 0.3.0.x or 0.3.1.x should upgrade to 0.3.0.9 or + 0.3.1.4-alpha. + + This release also backports several other bugfixes from the 0.3.1.x + series. + + o Major bugfixes (path selection, security, backport from 0.3.1.4-alpha): + - When choosing which guard to use for a circuit, avoid the exit's + family along with the exit itself. Previously, the new guard + selection logic avoided the exit, but did not consider its family. + Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2016- + 006 and CVE-2017-0377. + + o Major bugfixes (entry guards, backport from 0.3.1.1-alpha): + - Don't block bootstrapping when a primary bridge is offline and we + can't get its descriptor. Fixes bug 22325; fixes one case of bug + 21969; bugfix on 0.3.0.3-alpha. + + o Major bugfixes (entry guards, backport from 0.3.1.4-alpha): + - When starting with an old consensus, do not add new entry guards + unless the consensus is "reasonably live" (under 1 day old). Fixes + one root cause of bug 22400; bugfix on 0.3.0.1-alpha. + + o Minor features (geoip): + - Update geoip and geoip6 to the June 8 2017 Maxmind GeoLite2 + Country database. + + o Minor bugfixes (voting consistency, backport from 0.3.1.1-alpha): + - Reject version numbers with non-numeric prefixes (such as +, -, or + whitespace). Disallowing whitespace prevents differential version + parsing between POSIX-based and Windows platforms. Fixes bug 21507 + and part of 21508; bugfix on 0.0.8pre1. + + o Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.1.4-alpha): + - Permit the fchmod system call, to avoid crashing on startup when + starting with the seccomp2 sandbox and an unexpected set of + permissions on the data directory or its contents. Fixes bug + 22516; bugfix on 0.2.5.4-alpha. + + o Minor bugfixes (defensive programming, backport from 0.3.1.4-alpha): + - Fix a memset() off the end of an array when packing cells. This + bug should be harmless in practice, since the corrupted bytes are + still in the same structure, and are always padding bytes, + ignored, or immediately overwritten, depending on compiler + behavior. Nevertheless, because the memset()'s purpose is to make + sure that any other cell-handling bugs can't expose bytes to the + network, we need to fix it. Fixes bug 22737; bugfix on + 0.2.4.11-alpha. Fixes CID 1401591. + + Changes in version 0.3.0.8 - 2017-06-08 Tor 0.3.0.8 fixes a pair of bugs that would allow an attacker to remotely crash a hidden service with an assertion failure. Anyone

1 0

[tor/release-0.3.0] Add changelog entries for 0.3.0.9, copied from 0.3.1.x changelogs
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 3e5d9ae31a01a7a7c2b428095109abd61ac7fd2d Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 17:00:56 2017 -0400 Add changelog entries for 0.3.0.9, copied from 0.3.1.x changelogs --- changes/bug21507 | 5 ----- changes/bug21969 | 3 --- changes/bug22400_01 | 4 ---- changes/bug22516 | 5 ----- changes/bug22737 | 12 ------------ changes/bug22753 | 7 ------- changes/geoip-june2017 | 4 ---- 7 files changed, 40 deletions(-) diff --git a/changes/bug21507 b/changes/bug21507 deleted file mode 100644 index f83e291..0000000 --- a/changes/bug21507 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (voting consistency): - - Reject version numbers with non-numeric prefixes (such as +, -, and - whitespace). Disallowing whitespace prevents differential version - parsing between POSIX-based and Windows platforms. - Fixes bug 21507 and part of 21508; bugfix on 0.0.8pre1. diff --git a/changes/bug21969 b/changes/bug21969 deleted file mode 100644 index 9b116fc..0000000 --- a/changes/bug21969 +++ /dev/null @@ -1,3 +0,0 @@ - o Major bugfixes (entry guards): - - Don't block bootstrapping when a primary bridge is offline and we can't - get its descriptor. Fixes bug 21969; bugfix on 0.3.0.3-alpha. diff --git a/changes/bug22400_01 b/changes/bug22400_01 deleted file mode 100644 index 454c5f7..0000000 --- a/changes/bug22400_01 +++ /dev/null @@ -1,4 +0,0 @@ - o Major bugfixes (entry guards): - - When starting with an old consensus, do not add new entry guards - unless the consensus is "reasonably live" (under 1 day old). Fixes - one root cause of bug 22400; bugfix on 0.3.0.1-alpha. diff --git a/changes/bug22516 b/changes/bug22516 deleted file mode 100644 index f024a3c..0000000 --- a/changes/bug22516 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (linux seccomp2 sandbox): - - Permit the fchmod system call, to avoid crashing on startup when - starting with the seccomp2 sandbox and an unexpected set of permissions - on the data directory or its contents. Fixes bug 22516; bugfix on - 0.2.5.4-alpha. diff --git a/changes/bug22737 b/changes/bug22737 deleted file mode 100644 index f0de8e6..0000000 --- a/changes/bug22737 +++ /dev/null @@ -1,12 +0,0 @@ - o Minor bugfixes (defensive programming, undefined behavior): - - - Fix a memset() off the end of an array when packing cells. This - bug should be harmless in practice, since the corrupted bytes - are still in the same structure, and are always padding bytes, - ignored, or immediately overwritten, depending on compiler - behavior. Nevertheless, because the memset()'s purpose is to - make sure that any other cell-handling bugs can't expose bytes - to the network, we need to fix it. Fixes bug 22737; bugfix on - 0.2.4.11-alpha. Fixes CID 1401591. - - diff --git a/changes/bug22753 b/changes/bug22753 deleted file mode 100644 index 32a6dfa..0000000 --- a/changes/bug22753 +++ /dev/null @@ -1,7 +0,0 @@ - o Major bugfixes (path selection, security): - - When choosing which guard to use for a circuit, avoid the - exit's family along with the exit itself. Previously, the new - guard selection logic avoided the exit, but did not consider - its family. Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked - as TROVE-2016-006 and CVE-2017-0377. - diff --git a/changes/geoip-june2017 b/changes/geoip-june2017 deleted file mode 100644 index 2ea7bf1..0000000 --- a/changes/geoip-june2017 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the June 8 2017 Maxmind GeoLite2 - Country database. -

1 0

[tor/release-0.3.1] last minute fixes
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit fab91a290ded3e74e806cf9d05b36b6fcb695785 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 16:56:13 2017 -0400 last minute fixes --- ChangeLog | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 21857d2..fe5fc14 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,8 +5,8 @@ Changes in version 0.3.1.4-alpha - 2017-06-29 versions of 0.3.0.x or 0.3.1.x should upgrade to 0.3.0.9 or 0.3.1.4-alpha. - This release also fixes several other bugs related to new features in - 0.3.0.x and 0.3.1.x, including others that can effect bandwidth usage + This release also fixes several other bugs introduced in 0.3.0.x + and 0.3.1.x, including others that can affect bandwidth usage and correctness. o New dependencies:

1 0

[tor/release-0.3.1] add an article, fix a double-word, mention a ticket.
by nickm＠torproject.org 29 Jun '17

29 Jun '17

commit 26fd00418c327774eacee3afdfaeb0349f8e9a64 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 29 16:49:32 2017 -0400 add an article, fix a double-word, mention a ticket. --- ChangeLog | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/ChangeLog b/ChangeLog index d9765be..21857d2 100644 --- a/ChangeLog +++ b/ChangeLog @@ -85,7 +85,7 @@ Changes in version 0.3.1.4-alpha - 2017-06-29 starting with the seccomp2 sandbox and an unexpected set of permissions on the data directory or its contents. Fixes bug 22516; bugfix on 0.2.5.4-alpha. - - Fix a crash in LZMA module, when the sandbox was enabled, and + - Fix a crash in the LZMA module, when the sandbox was enabled, and liblzma would allocate more than 16 MB of memory. We solve this by bumping the mprotect() limit in the sandbox module from 16 MB to 20 MB. Fixes bug 22751; bugfix on 0.3.1.1-alpha. @@ -102,10 +102,10 @@ Changes in version 0.3.1.4-alpha - 2017-06-29 has already been logged, or no warning is warranted. Fixes bug 22356; bugfix on 0.2.6.3-alpha. - Demote a warn that was caused by libevent delays to info if - netflow padding padding is less than 4.5 seconds late, or to - notice if it is more (4.5 seconds is the amount of time that a - netflow record might be emitted after, if we chose the maximum - timeout). Fixes bug 22212; bugfix on 0.3.1.1-alpha. + netflow padding is less than 4.5 seconds late, or to notice + if it is more (4.5 seconds is the amount of time that a netflow + record might be emitted after, if we chose the maximum timeout). + Fixes bug 22212; bugfix on 0.3.1.1-alpha. o Minor bugfixes (process behavior): - When exiting because of an error, always exit with a nonzero exit @@ -124,7 +124,8 @@ Changes in version 0.3.1.4-alpha - 2017-06-29 ticket 16082. - Document more of the files in the Tor data directory, including cached-extrainfo, secret_onion_key{,_ntor}.old, hidserv-stats, - approved-routers, sr-random, and diff-cache. + approved-routers, sr-random, and diff-cache. Found while fixing + ticket 22347. Changes in version 0.3.1.3-alpha - 2017-06-08

1 0