May 2021 - tor-commits - lists.torproject.org

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into maint-0.4.6
by dgoulet＠torproject.org 07 May '21

07 May '21

commit b1b4c05fb32b1f5a5306a16e9b61b7a4912c9209 Merge: cf6e72b702 80c404c4b7 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri May 7 09:03:39 2021 -0400 Merge branch 'maint-0.4.5' into maint-0.4.6

1 0

[tor/release-0.4.6] Log warning when connecting to soon-to-be-deprecated v2 onions.
by dgoulet＠torproject.org 07 May '21

07 May '21

commit 80c404c4b79f3bcba3fc4585d4c62a62a04f3ed9 Author: George Kadianakis <desnacked(a)riseup.net> Date: Wed May 5 10:50:29 2021 +0300 Log warning when connecting to soon-to-be-deprecated v2 onions. --- changes/ticket40373 | 3 +++ src/core/or/connection_edge.c | 10 ++++++++++ 2 files changed, 13 insertions(+) diff --git a/changes/ticket40373 b/changes/ticket40373 new file mode 100644 index 0000000000..e2ea297bc2 --- /dev/null +++ b/changes/ticket40373 @@ -0,0 +1,3 @@ + o Minor features (onion services): + - Add warning message when connecting to soon-to-be-deprecated v2 onions. + Closes ticket 40373. diff --git a/src/core/or/connection_edge.c b/src/core/or/connection_edge.c index a33c64fe19..7f260ba185 100644 --- a/src/core/or/connection_edge.c +++ b/src/core/or/connection_edge.c @@ -2582,6 +2582,16 @@ connection_ap_handshake_rewrite_and_attach(entry_connection_t *conn, tor_assert(addresstype == ONION_V2_HOSTNAME || addresstype == ONION_V3_HOSTNAME); tor_assert(!automap); + + if (addresstype == ONION_V2_HOSTNAME) { + log_warn(LD_PROTOCOL, + "Warning! You've just connected to a v2 onion address. These " + "addresses are deprecated for security reasons, and are no " + "longer supported in Tor. Please encourage the site operator " + "to upgrade. For more information see " + "https://blog.torproject.org/v2-deprecation-timeline"); + } + return connection_ap_handle_onion(conn, socks, circ, addresstype); }

1 0

[tor/release-0.4.6] Merge branch 'release-0.4.5' into release-0.4.6
by dgoulet＠torproject.org 07 May '21

07 May '21

commit 0f03bd298bb247c8892561cad7640ccfeeaa1973 Merge: cf6e72b702 7aa75d0738 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri May 7 09:03:59 2021 -0400 Merge branch 'release-0.4.5' into release-0.4.6

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.6' into release-0.4.6
by dgoulet＠torproject.org 07 May '21

07 May '21

commit 432695a61ea1c09adfcdb7e35702090f38a5be85 Merge: 0f03bd298b b1b4c05fb3 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri May 7 09:04:53 2021 -0400 Merge branch 'maint-0.4.6' into release-0.4.6

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.6' into release-0.4.6
by dgoulet＠torproject.org 07 May '21

07 May '21

commit 993238aa2d6e8d038a0e0a101518cb57d42b87c4 Merge: 432695a61e a42e58a284 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri May 7 09:05:21 2021 -0400 Merge branch 'maint-0.4.6' into release-0.4.6 changes/ticket40373 | 3 +++ src/core/or/connection_edge.c | 43 +++++++++++++++++++++++++++++++++++++++++-- src/core/or/connection_edge.h | 1 + src/test/test_hs_common.c | 10 ++++++++++ 4 files changed, 55 insertions(+), 2 deletions(-)

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into release-0.4.5
by dgoulet＠torproject.org 07 May '21

07 May '21

commit d041f083c8c7e95bbcac408d6b30a516a0c0af76 Merge: 6ffa0f3e6b b83777f7b2 Author: Alexander Færøy <ahf(a)torproject.org> Date: Wed Dec 16 20:31:46 2020 +0000 Merge branch 'maint-0.4.5' into release-0.4.5 configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into release-0.4.5
by dgoulet＠torproject.org 07 May '21

07 May '21

commit 649ca08dd9f36b6d71034203a1fe8b57629a1665 Merge: d041f083c8 5a2d01ae57 Author: Alexander Færøy <ahf(a)torproject.org> Date: Wed Dec 16 20:39:01 2020 +0000 Merge branch 'maint-0.4.5' into release-0.4.5 changes/ticket40106 | 5 +++++ src/app/config/config.c | 3 ++- src/feature/client/transports.c | 22 ++++++++++++++++++++++ src/feature/client/transports.h | 1 + 4 files changed, 30 insertions(+), 1 deletion(-)

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into release-0.4.5
by dgoulet＠torproject.org 07 May '21

07 May '21

commit 34ac582f470532f37460f4679f4cc88840b0941d Merge: 649ca08dd9 d45354d5ea Author: David Goulet <dgoulet(a)torproject.org> Date: Thu Dec 17 08:25:29 2020 -0500 Merge branch 'maint-0.4.5' into release-0.4.5 changes/bug40210 | 5 +++++ src/ext/keccak-tiny/keccak-tiny.h | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-)

1 0

[tor/release-0.4.6] Start a changelog for 0.4.5.3-rc
by dgoulet＠torproject.org 07 May '21

07 May '21

commit 2e2c3795ad448d40e2f3f241090b5c73c30a21af Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jan 11 12:51:26 2021 -0500 Start a changelog for 0.4.5.3-rc --- ChangeLog | 55 +++++++++++++++++++++++++++++++++++++++++++++++++++++ changes/bug40190 | 4 ---- changes/bug40210 | 5 ----- changes/ticket40106 | 5 ----- changes/ticket40111 | 7 ------- changes/ticket40188 | 4 ---- changes/ticket40201 | 3 --- changes/ticket40205 | 5 ----- changes/ticket40226 | 5 ----- 9 files changed, 55 insertions(+), 38 deletions(-) diff --git a/ChangeLog b/ChangeLog index 62e00c17c8..910e6c1d44 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,58 @@ +Changes in version 0.4.5.3-rc - 2021-01-12 + Tor 0.4.5.3-rc is the first release candidate in its series. It fixes + several bugs, including one that broke onion services on certain older ARM + CPUs. + + Though we anticipate that we'll be doing a bit more clean-up between now + and the stable release, we expect that our remaining changes will be fairly + simple. There will be at lease one more release candidate before 0.4.5.x + is stable. + + o Minor features (crypto): + - Fix undefined behavior on our Keccak library. The bug only appears on + platforms with 32-byte CPU cache lines (e.g. armv5tel) and would result + in wrong digests. Fixes bug 40210; bugfix on 0.2.8.1-alpha. Thanks to + Bernhard Übelacker, Arnd Bergmann and weasel for diagnosing this. + + o Minor features (documentation): + - Mention the !badexit directive that can appear in an authority's + approved-routers file, and update the description of the !invalid + directive. Closes ticket 40188. + + o Minor bugfixes (config, bridge): + - Really fix the case where torrc has a missing ClientTransportPlugin but + configured with a Bridge line and UseBridges. Previously, we failed to + also look at the managed proxy list and thus it would fail for the + "exec" case. Fixes bug 40106; bugfix on 0.4.5.1-alpha. + + o Minor bugfixes (build): + - Fix the --enable-static-tor switch to properly set the -static compile + option onto the tor binary only. Fixes bug 40111; bugfix on + 0.2.3.1-alpha. + - Path to static libevent has been fixed as well which affects the + --enable-static-libevent to behave correctly now. The .a file is in + .libs/ of libevent repository, not at the root. + + o Minor bugfixes (logging, relay): + - Logs the address discovered by the directory authorities if none were + configured or detected before. Fixes bug 40201; bugfix on 0.4.5.1-alpha. + - When launching bandwidth testing circuit, don't log notice that we are + doing a reachability test. Furthermore, avoid to trigger a + "CHECKING_REACHABILITY" control event. Fixes bug 40205; bugfix on + 0.4.5.1-alpha. + + o Minor bugfixes (relay, statistics): + - The connection statistics were wrongly exported in the extrainfo document + due to a problem in the file loading function which would wrongly truncate + the file reporting the wrong information. It is now fixed. Fixes bug + 40226; bugfix on 0.4.5.1-alpha. + + o Minor bugfixes (SOCKS5): + - Handle partial socks5 messages correctly. Previously, our code would + send an incorrect error message if it got a socks5 request that wasn't + complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha. + + Changes in version 0.4.5.2-alpha - 2020-11-23 Tor 0.4.5.2-alpha is the second alpha release in the 0.4.5.x series. It fixes several bugs present in earlier releases, including one that diff --git a/changes/bug40190 b/changes/bug40190 deleted file mode 100644 index 0f3d6941dc..0000000000 --- a/changes/bug40190 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (SOCKS5): - - Handle partial socks5 messages correctly. Previously, our code would - send an incorrect error message if it got a socks5 request that wasn't - complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha. diff --git a/changes/bug40210 b/changes/bug40210 deleted file mode 100644 index f492262a11..0000000000 --- a/changes/bug40210 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (crypto): - - Fix undefined behavior on our Keccak library. The bug only appears on - platforms with 32-byte CPU cache lines (e.g. armv5tel) and would result - in wrong digests. Fixes bug 40210; bugfix on 0.2.8.1-alpha. Thanks to - Bernhard Übelacker, Arnd Bergmann and weasel for diagnosing this. diff --git a/changes/ticket40106 b/changes/ticket40106 deleted file mode 100644 index d007cf535e..0000000000 --- a/changes/ticket40106 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (config, bridge): - - Really fix the case where torrc has a missing ClientTransportPlugin but - configured with a Bridge line and UseBridges. Previously, we failed to - also look at the managed proxy list and thus it would fail for the - "exec" case. Fixes bug 40106; bugfix on 0.4.5.1-alpha. diff --git a/changes/ticket40111 b/changes/ticket40111 deleted file mode 100644 index a82ca0d489..0000000000 --- a/changes/ticket40111 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor bugfixes (configure, build): - - Fix the --enable-static-tor switch to properly set the -static compile - option onto the tor binary only. Fixes bug 40111; bugfix on - 0.2.3.1-alpha. - - Path to static libevent has been fixed as well which affects the - --enable-static-libevent to behave correctly now. The .a file is in - .libs/ of libevent repository, not at the root. diff --git a/changes/ticket40188 b/changes/ticket40188 deleted file mode 100644 index e29b2a9438..0000000000 --- a/changes/ticket40188 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (documentation): - - Mention the !badexit directive that can appear in an authority's - approved-routers file, and update the description of the !invalid - directive. Closes ticket 40188. diff --git a/changes/ticket40201 b/changes/ticket40201 deleted file mode 100644 index cdf8d99172..0000000000 --- a/changes/ticket40201 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (logging, relay): - - Logs the address discovered by the directory authorities if none were - configured or detected before. Fixes bug 40201; bugfix on 0.4.5.1-alpha. diff --git a/changes/ticket40205 b/changes/ticket40205 deleted file mode 100644 index e21c7fab7c..0000000000 --- a/changes/ticket40205 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (relay, logging, reachability): - - When launching bandwidth testing circuit, don't log notice that we are - doing a reachability test. Furthermore, avoid to trigger a - "CHECKING_REACHABILITY" control event. Fixes bug 40205; bugfix on - 0.4.5.1-alpha. diff --git a/changes/ticket40226 b/changes/ticket40226 deleted file mode 100644 index 4775438f63..0000000000 --- a/changes/ticket40226 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (relay, statistics): - - The connection statistics were wrongly exported in the extrainfo document - due to a problem in the file loading function which would wrongly truncate - the file reporting the wrong information. It is now fixed. Fixes bug - 40226; bugfix on 0.4.5.1-alpha.

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into release-0.4.5
by dgoulet＠torproject.org 07 May '21

07 May '21

commit f44c12a708de1bceb4dfac9490a67c8f41baee6e Merge: 7bbec935c5 aae9a05a01 Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Dec 21 14:55:44 2020 -0500 Merge branch 'maint-0.4.5' into release-0.4.5 changes/ticket40201 | 3 +++ src/app/config/resolve_addr.c | 12 ++++++++++-- 2 files changed, 13 insertions(+), 2 deletions(-)

1 0