June 2021 - tor-commits - lists.torproject.org

[tor/release-0.4.6] Begin a ChangeLog for 0.4.6.5
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit 5d91a3bcaf0a5e1ccbebd4247a9f6f2e42643ae7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:47:46 2021 -0400 Begin a ChangeLog for 0.4.6.5 --- ChangeLog | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/ChangeLog b/ChangeLog index 6d9c224a9c..1cdc87e9c3 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,22 @@ +Changes in version 0.4.6.5 - 2021-06-1? + Tor 0.4.6.5 is the first stable release in its series. The 0.4.6.x + series includes BLAH BLAH BLAH WRITEME. + + This release also includes security fixes for several security issues, + including a denial-of-service attack against onion service clients, + and another denial-of-service attack against relays. Everybody should + upgrade to one of 0.3.5.15, 0.4.4.9, 0.4.5.9, or 0.4.6.5. + + Below are the changes since 0.4.6.4-rc. For a complete list of changes + since 0.4.5.8, see the ReleaseNotes file. + + o Minor features (logging, diagnostic): + - Log decompression failures at a higher severity level, since they + can help provide missing context for other warning messages. We + rate-limit these messages, to avoid flooding the logs if they + begin to occur frequently. Closes ticket 40175. + + Changes in version 0.4.6.4-rc - 2021-05-28 Tor 0.4.6.4-rc fixes a few bugs from previous releases. This, we hope, the final release candidate in its series: unless major new issues are

1 0

[tor/main] Copy 0.4.5.8 changelog into the main branch changelog.
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit c62bd0e70883088713f3bc78eba9fc1451dd7ddc Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:50:53 2021 -0400 Copy 0.4.5.8 changelog into the main branch changelog. --- ChangeLog | 62 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 62 insertions(+) diff --git a/ChangeLog b/ChangeLog index 6d9c224a9c..c7395daa30 100644 --- a/ChangeLog +++ b/ChangeLog @@ -34,6 +34,68 @@ Changes in version 0.4.6.4-rc - 2021-05-28 onion services, which are now unsupported. Closes ticket 40374. +Changes in version 0.4.5.8 - 2021-05-10 + Tor 0.4.5.8 fixes several bugs in earlier version, backporting fixes + from the 0.4.6.x series. + + o Minor features (compatibility, Linux seccomp sandbox, backport from 0.4.6.3-rc): + - Add a workaround to enable the Linux sandbox to work correctly + with Glibc 2.33. This version of Glibc has started using the + fstatat() system call, which previously our sandbox did not allow. + Closes ticket 40382; see the ticket for a discussion of trade-offs. + + o Minor features (compilation, backport from 0.4.6.3-rc): + - Make the autoconf script build correctly with autoconf versions + 2.70 and later. Closes part of ticket 40335. + + o Minor features (fallback directory list, backport from 0.4.6.2-alpha): + - Regenerate the list of fallback directories to contain a new set + of 200 relays. Closes ticket 40265. + + o Minor features (geoip data): + - Update the geoip files to match the IPFire Location Database, as + retrieved on 2021/05/07. + + o Minor features (onion services): + - Add warning message when connecting to now deprecated v2 onion + services. As announced, Tor 0.4.5.x is the last series that will + support v2 onions. Closes ticket 40373. + + o Minor bugfixes (bridge, pluggable transport, backport from 0.4.6.2-alpha): + - Fix a regression that made it impossible start Tor using a bridge + line with a transport name and no fingerprint. Fixes bug 40360; + bugfix on 0.4.5.4-rc. + + o Minor bugfixes (build, cross-compilation, backport from 0.4.6.3-rc): + - Allow a custom "ar" for cross-compilation. Our previous build + script had used the $AR environment variable in most places, but + it missed one. Fixes bug 40369; bugfix on 0.4.5.1-alpha. + + o Minor bugfixes (channel, DoS, backport from 0.4.6.2-alpha): + - Fix a non-fatal BUG() message due to a too-early free of a string, + when listing a client connection from the DoS defenses subsystem. + Fixes bug 40345; bugfix on 0.4.3.4-rc. + + o Minor bugfixes (compiler warnings, backport from 0.4.6.3-rc): + - Fix an indentation problem that led to a warning from GCC 11.1.1. + Fixes bug 40380; bugfix on 0.3.0.1-alpha. + + o Minor bugfixes (controller, backport from 0.4.6.1-alpha): + - Fix a "BUG" warning that would appear when a controller chooses + the first hop for a circuit, and that circuit completes. Fixes bug + 40285; bugfix on 0.3.2.1-alpha. + + o Minor bugfixes (onion service, client, memory leak, backport from 0.4.6.3-rc): + - Fix a bug where an expired cached descriptor could get overwritten + with a new one without freeing it, leading to a memory leak. Fixes + bug 40356; bugfix on 0.3.5.1-alpha. + + o Minor bugfixes (testing, BSD, backport from 0.4.6.2-alpha): + - Fix pattern-matching errors when patterns expand to invalid paths + on BSD systems. Fixes bug 40318; bugfix on 0.4.5.1-alpha. Patch by + Daniel Pinto. + + Changes in version 0.4.6.3-rc - 2021-05-10 Tor 0.4.6.3-rc is the first release candidate in its series. It fixes a few small bugs from previous versions, and adds a better error

1 0

[tor/main] Add a checklist to releasingtor.md
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit f93d9d8bacb672c123674cfe9fbb01320e6cb3d7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:51:05 2021 -0400 Add a checklist to releasingtor.md --- doc/HACKING/ReleasingTor.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/doc/HACKING/ReleasingTor.md b/doc/HACKING/ReleasingTor.md index 358b53a8db..8ee57b0cb5 100644 --- a/doc/HACKING/ReleasingTor.md +++ b/doc/HACKING/ReleasingTor.md @@ -1,3 +1,14 @@ +# CHECKLIST + +Here's a summary checklist, with the things that Nick messes up most often. + +Did you: + + * [ ] Copy the ChangeLog to the ReleaseNotes? + * [ ] Check that the new versions got approved? + * [ ] Check the release date in the ChangeLog? + * [ ] Update the GeoIP file? + # Putting out a new release Here are the steps that the maintainer should take when putting out a

1 0

[tor/release-0.4.6] Bump to 0.4.5.9.
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit c80b98520b08b0b1bdc9c1417d5dc5c4782db670 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:31:10 2021 -0400 Bump to 0.4.5.9. --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index 6d7cd1dd6a..df721512fc 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.5.8-dev]) +AC_INIT([tor],[0.4.5.9]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -16,7 +16,7 @@ configure_flags="$*" # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2021-05-10"], # for 0.4.5.8-dev +AC_DEFINE(APPROX_RELEASE_DATE, ["2021-06-07"], # for 0.4.5.9 [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 8276264392..966057bab1 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.5.8-dev" +!define VERSION "0.4.5.9" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 716363261c..58943025d7 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.5.8-dev" +#define VERSION "0.4.5.9" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.5' into maint-0.4.6
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit 66701c61951a13534b3e802e478270a5f04dbd15 Merge: f832b4bcee c80b98520b Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:31:21 2021 -0400 Merge branch 'maint-0.4.5' into maint-0.4.6 "ours" to avoid version bump.

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.4' into maint-0.4.5
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit b3ca2faf46913fb6d1c334667e81de3570a7a177 Merge: 8b6e919086 1956f63d6b Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:30:36 2021 -0400 Merge branch 'maint-0.4.4' into maint-0.4.5 "ours" to avoid version bump.

1 0

[tor/release-0.4.6] Bump to 0.4.6.5
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit b3fe9d51629a7be5b05cf106cadcb76d2770f187 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:32:07 2021 -0400 Bump to 0.4.6.5 --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index 780db66936..016b6664b8 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.6.4-rc-dev]) +AC_INIT([tor],[0.4.6.5]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -18,7 +18,7 @@ AC_DEFINE_UNQUOTED([CONFIG_FLAGS], ["$configure_flags"], [Flags passed to config # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2021-05-28"], # for 0.4.6.4-rc-dev +AC_DEFINE(APPROX_RELEASE_DATE, ["2021-06-07"], # for 0.4.6.5 [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 04df5c3ec2..062333eb9c 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.6.4-rc-dev" +!define VERSION "0.4.6.5" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 5d8b01e739..8443e04c38 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.6.4-rc-dev" +#define VERSION "0.4.6.5" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR

1 0

[tor/release-0.4.6] Merge branch 'maint-0.4.6' into release-0.4.6
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit 0d402eefa55716086db2c871e05d42e5667643ab Merge: 9a37cf4883 b3fe9d5162 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:32:36 2021 -0400 Merge branch 'maint-0.4.6' into release-0.4.6 configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0

[tor/main] Merge branch 'maint-0.3.5' into maint-0.4.4
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit 6bcb0fb8812774e0714a0e5c1afb3b27acc66bca Merge: 11c7e65730 ed7f4ad4a9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:29:49 2021 -0400 Merge branch 'maint-0.3.5' into maint-0.4.4

1 0

[tor/maint-0.4.4] Bump to 0.3.5.15.
by nickm＠torproject.org 07 Jun '21

07 Jun '21

commit ed7f4ad4a9309fb480495f036ebfdc9807a24848 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 7 13:29:35 2021 -0400 Bump to 0.3.5.15. --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 619e91528c..82ef4f5554 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.3.5.14-dev]) +AC_INIT([tor],[0.3.5.15]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 094a53105a..9d2e25a9e8 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.3.5.14-dev" +!define VERSION "0.3.5.15" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 1186954db9..dff63efa18 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -218,7 +218,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.3.5.14-dev" +#define VERSION "0.3.5.15"

1 0