September 2021 - tor-commits - lists.torproject.org

[translation/gettor-website-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-contentspot
by translation＠torproject.org 18 Sep '21

18 Sep '21

commit 6fd5d790155ec8aba606e09b15cc9829ea6c52c8 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Sep 18 03:45:25 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-cont… --- contents+ru.po | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/contents+ru.po b/contents+ru.po index faaf10b01e..cb3c044a58 100644 --- a/contents+ru.po +++ b/contents+ru.po @@ -221,10 +221,12 @@ msgid "" "Check [how to verify a digital signature](https://support.torproject.org/tbb" "/how-to-verify-signature/)." msgstr "" +"Узнайте, [как проверить цифровую подпись](https://support.torproject.org/tbb" +"/how-to-verify-signature/)." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "## How to get bridges" -msgstr "" +msgstr "Как получить мосты" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" @@ -257,6 +259,9 @@ msgid "" "to use bridges. To use pluggable transports, click 'Configure' in the Tor " "Launcher window that appears when you first run Tor Browser." msgstr "" +"При первом запуске TorBrowser вас спросят, хотите ли вы использовать мосты. " +"Чтобы использовать подключаемые транспорты, нажмите 'Configure' в окне Tor " +"Launcher, которое появляется при первом запуске Tor Browser." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" @@ -265,6 +270,9 @@ msgid "" "bar. Once in Preferences, navigate to 'Tor Settings' from the menu on the " "left of the screen." msgstr "" +"Вы также можете настроить подключаемые транспорты во время работы Tor " +"Browser, зайдя в настройки и выбрав 'Tor Settings' из меню в левой части " +"экрана." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" @@ -285,6 +293,9 @@ msgid "" "torproject.org'. This will require you solve a CAPTCHA and will " "automatically populate your settings with one or more bridges." msgstr "" +"Если встроенные мосты не работают, вы также можете выбрать 'Запросить мост с" +" torproject.org'. Это потребует от вас решения CAPTCHA и автоматически " +"заполнит ваши настройки одним или несколькими мостами." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" @@ -292,6 +303,10 @@ msgid "" "Please note that you must send the email using an address from one of the " "following email providers: Riseup or Gmail." msgstr "" +"Другой способ получить мосты - отправить электронное письмо на адрес " +"bridges(a)torproject.org. Обратите внимание, что вы должны отправить письмо, " +"используя адрес одного из следующих провайдеров электронной почты: Riseup " +"или Gmail." #: lego/templates/banner.html:3 lego/templates/banner.html:5 #: templates/banner.html:3 templates/banner.html:5

1 0

[translation/gettor-website-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-contentspot
by translation＠torproject.org 18 Sep '21

18 Sep '21

commit 6763b9aa80c27efb5851d549b71bf2c47e0dfe0a Author: Translation commit bot <translation(a)torproject.org> Date: Sat Sep 18 03:15:31 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=gettor-website-cont… --- contents+ru.po | 31 +++++++++++++++++++++++-------- 1 file changed, 23 insertions(+), 8 deletions(-) diff --git a/contents+ru.po b/contents+ru.po index 1c2ae0f52e..faaf10b01e 100644 --- a/contents+ru.po +++ b/contents+ru.po @@ -11,6 +11,7 @@ # Sergey Smirnov <cj75300(a)gmail.com>, 2021 # Виктор Ерухин <official159ru(a)mail.ru>, 2021 # Đorđe Marušić <djordje(a)hzontal.org>, 2021 +# T9 T9, 2021 # msgid "" msgstr "" @@ -18,7 +19,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2021-04-17 07:56+CET\n" "PO-Revision-Date: 2021-03-24 14:33+0000\n" -"Last-Translator: Đorđe Marušić <djordje(a)hzontal.org>, 2021\n" +"Last-Translator: T9 T9, 2021\n" "Language-Team: Russian (https://www.transifex.com/otf/teams/1519/ru/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -124,7 +125,7 @@ msgstr "" #: https//gettor.torproject.org/ (content/contents+en.lrpage.title) msgid "What is GetTor?" -msgstr "" +msgstr "Что такое GetTor?" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" @@ -132,48 +133,57 @@ msgid "" "Browser, especially for people living in places with high levels of " "censorship, where access to Tor Project's website is restricted." msgstr "" +"GetTor - это сервис, который предоставляет альтернативные методы загрузки " +"браузера Tor, особенно для людей, живущих в местах с высоким уровнем " +"цензуры, где доступ к веб-сайту Tor Project ограничен." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "# How does it work?" -msgstr "" +msgstr "Как это работает?" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "The idea behind GetTor is very simple:" -msgstr "" +msgstr "Идея GetTor очень проста:" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" "- Step 1: Send a request to GetTor (gettor(a)torproject.org) specifying your " "operating system (and your locale). Ex: \"windows es\"" msgstr "" +"Шаг 1. Отправьте запрос в GetTor (gettor(a)torproject.org) указав вашу " +"операционную систему (и ваш регион). Пример: \"windows es\"" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" "- Step 2: GetTor will send you back a reply with links to download Tor " "Browser from our supported providers." msgstr "" +"Шаг 2: GetTor отправит вам ответ со ссылками для загрузки Tor Browser от " +"наших поддерживаемых провайдеров." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" "- Step 3: Download Tor Browser from one of the providers. When done, check " "the integrity of the downloaded files by verifying its signature." msgstr "" +"Шаг 3: Загрузите Tor Browser от одного из провайдеров. Когда закончите, " +"проверьте целостность загруженных файлов, проверив его подпись." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "- Step 4: If required, get some bridges!" -msgstr "" +msgstr "Шаг 4: При необходимости получите мосты!" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "## GetTor Responder on Twitter" -msgstr "" +msgstr "GetTor Responder в Twitter" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "GetTor is currently not working on Twitter." -msgstr "" +msgstr "GetTor в настоящее время не работает в Twitter." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "## How to verify a digital signature" -msgstr "" +msgstr "Как проверить цифровую подпись" #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" @@ -188,6 +198,9 @@ msgid "" "In GetTor emails we provide a link to a file with the same name as the " "package and the extension \".asc\". These .asc files are OpenPGP signatures." msgstr "" +"В электронных письмах GetTor мы предоставляем ссылку на файл с тем же " +"именем, что и пакет, и расширением «.asc». Эти файлы .asc являются подписями" +" OpenPGP." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid "" @@ -200,6 +213,8 @@ msgid "" "For example, `torbrowser-install-win64-8.5.4_en-US.exe` is accompanied by " "`torbrowser-install-win64-8.5.4_en-US.exe.asc`." msgstr "" +"Например, torbrowser-install-win64-8.5.4_en-US.exe сопровождается " +"torbrowser-install-win64-8.5.4_en-US.exe.asc." #: https//gettor.torproject.org/ (content/contents+en.lrpage.body) msgid ""

1 0

[tpo/master] Bump tor-alpha version to 0.4.7.1-alpha.
by ahf＠torproject.org 17 Sep '21

17 Sep '21

commit 0f7971812d37bf107f0314a48a4b1bb9f0b3bc2c Author: Alexander Færøy <ahf(a)torproject.org> Date: Fri Sep 17 18:27:43 2021 +0000 Bump tor-alpha version to 0.4.7.1-alpha. --- databags/versions.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/databags/versions.ini b/databags/versions.ini index b55ccee1..b1e5e1da 100644 --- a/databags/versions.ini +++ b/databags/versions.ini @@ -24,5 +24,5 @@ version = 11.0a5 version = 0.4.6.7 [tor-alpha] -version = 0.4.6.4-rc +version = 0.4.7.1-alpha

1 0

[translation/tbmanual-contentspot_completed] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot_completed
by translation＠torproject.org 17 Sep '21

17 Sep '21

commit cc503d25569c250a5cae4933905c57c2da8d14fe Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 17 16:46:55 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspo… --- contents+tr.po | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/contents+tr.po b/contents+tr.po index 1b9a147981..3754252b02 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -379,6 +379,8 @@ msgid "" "You can also add a language code to get Tor Browser on a language different " "than English." msgstr "" +"Tor Browser uygulamasını İngilizce dışında bir dilde kullanmak için bir dil " +"kodu da ekleyebilirsiniz." #: https//tb-manual.torproject.org/downloading/ #: (content/downloading/contents+en.lrtopic.body) @@ -388,6 +390,10 @@ msgid "" "[gettor@torproject.org](mailto:gettor@torproject.org) with the words " "\"windows zh_CN\" in it." msgstr "" +"Örneğin, Windows üzerinde çalışacak Çince (Çin) Tor Browser indirme " +"bağlantılarını almak için " +"[gettor@torproject.org](mailto:gettor@torproject.org) adresine içinde " +"\"windows zh_CN\" sözcükleri bulunan bir e-posta gönderin." #: https//tb-manual.torproject.org/downloading/ #: (content/downloading/contents+en.lrtopic.body) @@ -397,6 +403,9 @@ msgid "" "verifying the download), the fingerprint of the key used to make the " "signature, and the package’s checksum." msgstr "" +"GetTor, Tor Browser paketini indirebileceğiniz bağlantılar, şifrelenmiş imza" +" (indirmeyi doğrulamak için), imzayı oluşturmak için kullanılan parmak izi " +"ve paketin sağlama değerini içeren bir e-posta ile yanıt verir." #: https//tb-manual.torproject.org/downloading/ #: (content/downloading/contents+en.lrtopic.body) @@ -404,6 +413,8 @@ msgid "" "You may be offered a choice of “32-bit” or “64-bit” software: this depends " "on the model of the computer you are using." msgstr "" +"Kullandığınız bilgisayarın modeline bağlı olarak \"32 bit\" ya da \"64 bit\"" +" uygulamalardan biri sunulabilir." #: https//tb-manual.torproject.org/installation/ #: (content/installation/contents+en.lrtopic.title)

1 0

[translation/tbmanual-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot
by translation＠torproject.org 17 Sep '21

17 Sep '21

commit 7de6b4a6930564171d014d0ab0f6f22472f666ce Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 17 16:46:52 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot --- contents+tr.po | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/contents+tr.po b/contents+tr.po index 1b9a147981..3754252b02 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -379,6 +379,8 @@ msgid "" "You can also add a language code to get Tor Browser on a language different " "than English." msgstr "" +"Tor Browser uygulamasını İngilizce dışında bir dilde kullanmak için bir dil " +"kodu da ekleyebilirsiniz." #: https//tb-manual.torproject.org/downloading/ #: (content/downloading/contents+en.lrtopic.body) @@ -388,6 +390,10 @@ msgid "" "[gettor@torproject.org](mailto:gettor@torproject.org) with the words " "\"windows zh_CN\" in it." msgstr "" +"Örneğin, Windows üzerinde çalışacak Çince (Çin) Tor Browser indirme " +"bağlantılarını almak için " +"[gettor@torproject.org](mailto:gettor@torproject.org) adresine içinde " +"\"windows zh_CN\" sözcükleri bulunan bir e-posta gönderin." #: https//tb-manual.torproject.org/downloading/ #: (content/downloading/contents+en.lrtopic.body) @@ -397,6 +403,9 @@ msgid "" "verifying the download), the fingerprint of the key used to make the " "signature, and the package’s checksum." msgstr "" +"GetTor, Tor Browser paketini indirebileceğiniz bağlantılar, şifrelenmiş imza" +" (indirmeyi doğrulamak için), imzayı oluşturmak için kullanılan parmak izi " +"ve paketin sağlama değerini içeren bir e-posta ile yanıt verir." #: https//tb-manual.torproject.org/downloading/ #: (content/downloading/contents+en.lrtopic.body) @@ -404,6 +413,8 @@ msgid "" "You may be offered a choice of “32-bit” or “64-bit” software: this depends " "on the model of the computer you are using." msgstr "" +"Kullandığınız bilgisayarın modeline bağlı olarak \"32 bit\" ya da \"64 bit\"" +" uygulamalardan biri sunulabilir." #: https//tb-manual.torproject.org/installation/ #: (content/installation/contents+en.lrtopic.title)

1 0

[tor/main] one more pass over the changelog
by arma＠torproject.org 17 Sep '21

17 Sep '21

commit ecb91e75e4770fa76c64c7b1932985de024d693e Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Sep 17 11:01:37 2021 -0400 one more pass over the changelog --- ChangeLog | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index 09c9fe1bd4..2340716696 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,7 +9,7 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 guard relays for use as the middle hop in all onion circuits. These relays are kept in place for a randomized duration averaging 1 week. This mitigates guard discovery attacks against clients and - short-lived onion services such as OnionShare. Long- lived onion + short-lived onion services such as OnionShare. Long-lived onion services that need high security should still use the Vanguards addon (https://github.com/mikeperry-tor/vanguards) Closes ticket 40363; implements proposal 333. @@ -65,7 +65,7 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 o Minor bugfixes (logging, relay): - Add spaces between the "and" when logging the "Your server has not - managed to confirm reachability for its" on dual-stack relays + managed to confirm reachability for its" on dual-stack relays. Fixes bug 40453; bugfix on 0.4.5.1-alpha. Patch by Neel Chauhan. o Minor bugfixes (onion service): @@ -76,10 +76,9 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. o Minor bugfixes (statistics): - - Fix a fencepost issue when we check stability_last_downrated that - had caused us to call where we call rep_hist_downrate_old_runs() - twice. Fixes bug 40394; bugfix on 0.2.0.5-alpha. Patch by - Neel Chauhan. + - Fix a fencepost issue when we check stability_last_downrated where + we called rep_hist_downrate_old_runs() twice. Fixes bug 40394; + bugfix on 0.2.0.5-alpha. Patch by Neel Chauhan. o Minor bugfixes (tests): - Fix a bug that prevented some tests from running with the correct @@ -89,8 +88,8 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 - Add links to original tor design paper and anonbib to docs/HACKING/README.1st.md. Closes ticket 33742. Patch from Emily Bones. - - Describe the "fingerprint-ed25519" file the tor.1 man page. Fixes - bug 40467; bugfix on 0.4.3.1-alpha. Patch by Neel Chauhan. + - Describe the "fingerprint-ed25519" file in the tor.1 man page. + Fixes bug 40467; bugfix on 0.4.3.1-alpha. Patch by Neel Chauhan. Changes in version 0.4.6.7 - 2021-08-16

1 0

[tor/main] Run format_changelog.
by nickm＠torproject.org 17 Sep '21

17 Sep '21

commit 0877eee18c7a9e70eb531e2961433f920d2cb4c5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 17 10:50:40 2021 -0400 Run format_changelog. --- ChangeLog | 44 ++++++++++++++++++++++---------------------- 1 file changed, 22 insertions(+), 22 deletions(-) diff --git a/ChangeLog b/ChangeLog index c3abd9b0e4..09c9fe1bd4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,17 +1,18 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 - This version is the first alpha release of the 0.4.7.x series. One major - feature is Vanguards Lite, from proposal 333, to help mitigate guard - discovery attacks against onion services. It also includes numerous bugfixes. + This version is the first alpha release of the 0.4.7.x series. One + major feature is Vanguards Lite, from proposal 333, to help mitigate + guard discovery attacks against onion services. It also includes + numerous bugfixes. o Major features (Proposal 332, onion services, guard selection algorithm): - Clients and onion services now choose four long-lived "layer 2" guard relays for use as the middle hop in all onion circuits. These relays are kept in place for a randomized duration averaging - 1 week. This mitigates guard discovery attacks against - clients and short-lived onion services such as OnionShare. Long- - lived onion services that need high security should still use the - Vanguards addon (https://github.com/mikeperry-tor/vanguards) - Closes ticket 40363; implements proposal 333. + 1 week. This mitigates guard discovery attacks against clients and + short-lived onion services such as OnionShare. Long- lived onion + services that need high security should still use the Vanguards + addon (https://github.com/mikeperry-tor/vanguards) Closes ticket + 40363; implements proposal 333. o Minor features (bridge testing support): - Let external bridge reachability testing tools discard cached @@ -39,13 +40,6 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 immediately from startup. Previously, they waited until they had been running for a full day. Closes ticket 40337. - o Minor bugfixes (onion service): - - Do not flag an HSDir as non-running in case the descriptor upload - or fetch fails. An onion service closes pending directory - connections before uploading a new descriptor which leads to - wrongly flagging many relays and thus affecting circuit path - selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. - o Minor bugfixes (circuit padding): - Don't send STOP circuit padding cells when the other side has already shut down the corresponding padding machine. Fixes bug @@ -74,11 +68,18 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 managed to confirm reachability for its" on dual-stack relays Fixes bug 40453; bugfix on 0.4.5.1-alpha. Patch by Neel Chauhan. + o Minor bugfixes (onion service): + - Do not flag an HSDir as non-running in case the descriptor upload + or fetch fails. An onion service closes pending directory + connections before uploading a new descriptor which leads to + wrongly flagging many relays and thus affecting circuit path + selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. + o Minor bugfixes (statistics): - - Fix a fencepost issue when we check stability_last_downrated - that had caused us to call - where we call rep_hist_downrate_old_runs() twice. Fixes bug 40394; - bugfix on 0.2.0.5-alpha. Patch by Neel Chauhan. + - Fix a fencepost issue when we check stability_last_downrated that + had caused us to call where we call rep_hist_downrate_old_runs() + twice. Fixes bug 40394; bugfix on 0.2.0.5-alpha. Patch by + Neel Chauhan. o Minor bugfixes (tests): - Fix a bug that prevented some tests from running with the correct @@ -88,9 +89,8 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 - Add links to original tor design paper and anonbib to docs/HACKING/README.1st.md. Closes ticket 33742. Patch from Emily Bones. - - Describe the "fingerprint-ed25519" file the tor.1 - man page. Fixes bug 40467; - bugfix on 0.4.3.1-alpha. Patch by Neel Chauhan. + - Describe the "fingerprint-ed25519" file the tor.1 man page. Fixes + bug 40467; bugfix on 0.4.3.1-alpha. Patch by Neel Chauhan. Changes in version 0.4.6.7 - 2021-08-16

1 0

[tor/main] Edit changelog with a few grammar and simplicity fixes.
by nickm＠torproject.org 17 Sep '21

17 Sep '21

commit 46094d1ec03230eb4fa6be3823efb9d28374cba2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 17 10:50:23 2021 -0400 Edit changelog with a few grammar and simplicity fixes. --- ChangeLog | 28 ++++++++++++---------------- 1 file changed, 12 insertions(+), 16 deletions(-) diff --git a/ChangeLog b/ChangeLog index 8e424096b9..c3abd9b0e4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,13 +1,13 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 This version is the first alpha release of the 0.4.7.x series. One major - feature is the Vanguard Lite, from proposal 333, that help mitigate guard - discovery attacks for onion services. It also includes numerous bugfixes. + feature is Vanguards Lite, from proposal 333, to help mitigate guard + discovery attacks against onion services. It also includes numerous bugfixes. o Major features (Proposal 332, onion services, guard selection algorithm): - Clients and onion services now choose four long-lived "layer 2" guard relays for use as the middle hop in all onion circuits. These relays are kept in place for a randomized duration averaging - 1 week each. This mitigates guard discovery attacks against + 1 week. This mitigates guard discovery attacks against clients and short-lived onion services such as OnionShare. Long- lived onion services that need high security should still use the Vanguards addon (https://github.com/mikeperry-tor/vanguards) @@ -24,10 +24,8 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 were using a set of flags from 2017. Closes ticket 40407. o Minor features (testing configuration): - - When TestingTorNetwork is enabled, skip the permission check on - the hidden service directory. Closes ticket 40338. - - o Minor features (testing): + - When TestingTorNetwork is enabled, skip the permissions check on + hidden service directories. Closes ticket 40338. - On a testing network, relays can now use the TestingMinTimeToReportBandwidth option to change the smallest amount of time over which they're willing to report their observed @@ -41,7 +39,7 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 immediately from startup. Previously, they waited until they had been running for a full day. Closes ticket 40337. - o Minor bugfix (onion service): + o Minor bugfixes (onion service): - Do not flag an HSDir as non-running in case the descriptor upload or fetch fails. An onion service closes pending directory connections before uploading a new descriptor which leads to @@ -62,16 +60,10 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 o Minor bugfixes (control, sandbox): - Allows the control command SAVECONF to succeed when the seccomp - sandbox is enabled. Makes SAVECONF keep only one backup file to + sandbox is enabled. Makes SAVECONF keep only one backup file, to simplify implementation. Fixes bug 40317; bugfix on 0.2.5.4-alpha. Patch by Daniel Pinto. - o Minor bugfixes (documentation): - - Add a mention of the "fingerprint-ed25519" for relays in the tor.1 - man page. Also clarify the difference between the RSA-based - "fingerprint" and "fingerprint-ed25519" files. Fixes bug 40467; - bugfix on 0.4.3.1-alpha. Patch by Neel Chauhan. - o Minor bugfixes (heartbeat): - Adjust the heartbeat log message about distinct clients to consider the HeartbeatPeriod rather than a flat 6-hour delay. @@ -83,7 +75,8 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 Fixes bug 40453; bugfix on 0.4.5.1-alpha. Patch by Neel Chauhan. o Minor bugfixes (statistics): - - Fix the fencepost issue when we check stability_last_downrated + - Fix a fencepost issue when we check stability_last_downrated + that had caused us to call where we call rep_hist_downrate_old_runs() twice. Fixes bug 40394; bugfix on 0.2.0.5-alpha. Patch by Neel Chauhan. @@ -95,6 +88,9 @@ Changes in version 0.4.7.1-alpha - 2021-09-17 - Add links to original tor design paper and anonbib to docs/HACKING/README.1st.md. Closes ticket 33742. Patch from Emily Bones. + - Describe the "fingerprint-ed25519" file the tor.1 + man page. Fixes bug 40467; + bugfix on 0.4.3.1-alpha. Patch by Neel Chauhan. Changes in version 0.4.6.7 - 2021-08-16

1 0

[tor/main] Bump version to 0.4.7.1-alpha
by dgoulet＠torproject.org 17 Sep '21

17 Sep '21

commit 927f9a12a6502e43c0374fea6c2a3c67696e0437 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri Sep 17 09:32:57 2021 -0400 Bump version to 0.4.7.1-alpha Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index 1b1d3a9892..23ba4b0d2d 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.7.0-alpha-dev]) +AC_INIT([tor],[0.4.7.1-alpha]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -18,7 +18,7 @@ AC_DEFINE_UNQUOTED([CONFIG_FLAGS], ["$configure_flags"], [Flags passed to config # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2021-04-15"], # for 0.4.7.0-alpha-dev +AC_DEFINE(APPROX_RELEASE_DATE, ["2021-09-17"], # for 0.4.7.1-alpha [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 1bf6554630..5b285a5ca9 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.7.0-alpha-dev" +!define VERSION "0.4.7.1-alpha" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 841d227a43..2d97ea858a 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.7.0-alpha-dev" +#define VERSION "0.4.7.1-alpha" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR

1 0

[tor/main] changelog: ChangeLog for 0.4.7.1-alpha release
by dgoulet＠torproject.org 17 Sep '21

17 Sep '21

commit 9a7fe5d131e036417f373fea13044eba7cd3abb3 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri Sep 17 09:20:00 2021 -0400 changelog: ChangeLog for 0.4.7.1-alpha release Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- ChangeLog | 99 +++++++++++++++++++++++++++++++++++++++++++++++++++++ changes/bug40317 | 5 --- changes/bug40330 | 4 --- changes/bug40365 | 3 -- changes/bug40371 | 6 ---- changes/bug40394 | 4 --- changes/bug40407 | 5 --- changes/bug40435 | 4 --- changes/bug40453 | 4 --- changes/bug40467 | 5 --- changes/issue40338 | 3 -- changes/ticket33742 | 3 -- changes/ticket40209 | 4 --- changes/ticket40337 | 16 --------- changes/ticket40363 | 9 ----- changes/ticket40434 | 6 ---- 16 files changed, 99 insertions(+), 81 deletions(-) diff --git a/ChangeLog b/ChangeLog index 6b1e11f77a..8e424096b9 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,102 @@ +Changes in version 0.4.7.1-alpha - 2021-09-17 + This version is the first alpha release of the 0.4.7.x series. One major + feature is the Vanguard Lite, from proposal 333, that help mitigate guard + discovery attacks for onion services. It also includes numerous bugfixes. + + o Major features (Proposal 332, onion services, guard selection algorithm): + - Clients and onion services now choose four long-lived "layer 2" + guard relays for use as the middle hop in all onion circuits. + These relays are kept in place for a randomized duration averaging + 1 week each. This mitigates guard discovery attacks against + clients and short-lived onion services such as OnionShare. Long- + lived onion services that need high security should still use the + Vanguards addon (https://github.com/mikeperry-tor/vanguards) + Closes ticket 40363; implements proposal 333. + + o Minor features (bridge testing support): + - Let external bridge reachability testing tools discard cached + bridge descriptors when setting new bridges, so they can be sure + to get a clean reachability test. Implements ticket 40209. + + o Minor features (fuzzing): + - When building with --enable-libfuzzer, use a set of compiler flags + that works with more recent versions of the library. Previously we + were using a set of flags from 2017. Closes ticket 40407. + + o Minor features (testing configuration): + - When TestingTorNetwork is enabled, skip the permission check on + the hidden service directory. Closes ticket 40338. + + o Minor features (testing): + - On a testing network, relays can now use the + TestingMinTimeToReportBandwidth option to change the smallest + amount of time over which they're willing to report their observed + maximum bandwidth. Previously, this was fixed at 1 day. For + safety, values under 2 hours are only supported on testing + networks. Part of a fix for ticket 40337. + - Relays on testing networks no longer rate-limit how frequently + they are willing to report new bandwidth measurements. Part of a + fix for ticket 40337. + - Relays on testing networks now report their observed bandwidths + immediately from startup. Previously, they waited until they had + been running for a full day. Closes ticket 40337. + + o Minor bugfix (onion service): + - Do not flag an HSDir as non-running in case the descriptor upload + or fetch fails. An onion service closes pending directory + connections before uploading a new descriptor which leads to + wrongly flagging many relays and thus affecting circuit path + selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. + + o Minor bugfixes (circuit padding): + - Don't send STOP circuit padding cells when the other side has + already shut down the corresponding padding machine. Fixes bug + 40435; bugfix on 0.4.0.1-alpha. + + o Minor bugfixes (compatibility): + - Fix compatibility with the most recent Libevent versions, which no + longer have an evdns_set_random_bytes() function. Because this + function has been a no-op since Libevent 2.0.4-alpha, it is safe + for us to just stop calling it. Fixes bug 40371; bugfix + on 0.2.1.7-alpha. + + o Minor bugfixes (control, sandbox): + - Allows the control command SAVECONF to succeed when the seccomp + sandbox is enabled. Makes SAVECONF keep only one backup file to + simplify implementation. Fixes bug 40317; bugfix on 0.2.5.4-alpha. + Patch by Daniel Pinto. + + o Minor bugfixes (documentation): + - Add a mention of the "fingerprint-ed25519" for relays in the tor.1 + man page. Also clarify the difference between the RSA-based + "fingerprint" and "fingerprint-ed25519" files. Fixes bug 40467; + bugfix on 0.4.3.1-alpha. Patch by Neel Chauhan. + + o Minor bugfixes (heartbeat): + - Adjust the heartbeat log message about distinct clients to + consider the HeartbeatPeriod rather than a flat 6-hour delay. + Fixes bug 40330; bugfix on 0.2.6.3-alpha. + + o Minor bugfixes (logging, relay): + - Add spaces between the "and" when logging the "Your server has not + managed to confirm reachability for its" on dual-stack relays + Fixes bug 40453; bugfix on 0.4.5.1-alpha. Patch by Neel Chauhan. + + o Minor bugfixes (statistics): + - Fix the fencepost issue when we check stability_last_downrated + where we call rep_hist_downrate_old_runs() twice. Fixes bug 40394; + bugfix on 0.2.0.5-alpha. Patch by Neel Chauhan. + + o Minor bugfixes (tests): + - Fix a bug that prevented some tests from running with the correct + names. Fixes bug 40365; bugfix on 0.4.3.1-alpha. + + o Documentation: + - Add links to original tor design paper and anonbib to + docs/HACKING/README.1st.md. Closes ticket 33742. Patch from + Emily Bones. + + Changes in version 0.4.6.7 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone diff --git a/changes/bug40317 b/changes/bug40317 deleted file mode 100644 index 18ec499a51..0000000000 --- a/changes/bug40317 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (control, sandbox): - - Allows the control command SAVECONF to succeed when the seccomp - sandbox is enabled. Makes SAVECONF keep only one backup file to - simplify implementation. Fixes bug 40317; bugfix on 0.2.5.4-alpha. - Patch by Daniel Pinto. diff --git a/changes/bug40330 b/changes/bug40330 deleted file mode 100644 index 8752ba5be7..0000000000 --- a/changes/bug40330 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (heartbeat): - - Adjust the heartbeat log message about distinct clients to consider - the HeartbeatPeriod rather than a flat 6-hour delay. - Fixes bug 40330; bugfix on 0.2.6.3-alpha. diff --git a/changes/bug40365 b/changes/bug40365 deleted file mode 100644 index e4ee7b3b90..0000000000 --- a/changes/bug40365 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (tests): - - Fix a bug that prevented some tests from running with the correct names. - Fixes bug 40365; bugfix on 0.4.3.1-alpha. diff --git a/changes/bug40371 b/changes/bug40371 deleted file mode 100644 index 8cc7117f9f..0000000000 --- a/changes/bug40371 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (compatibility): - - Fix compatibility with the most recent Libevent versions, which - no longer have an evdns_set_random_bytes() function. Because - this function has been a no-op since Libevent 2.0.4-alpha, - it is safe for us to just stop calling it. Fixes bug 40371; - bugfix on 0.2.1.7-alpha. diff --git a/changes/bug40394 b/changes/bug40394 deleted file mode 100644 index f55167f2dd..0000000000 --- a/changes/bug40394 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (statistics): - - Fix the fencepost issue when we check stability_last_downrated where - we call rep_hist_downrate_old_runs() twice. Fixes bug 40394; bugfix - on 0.2.0.5-alpha. Patch by Neel Chauhan. diff --git a/changes/bug40407 b/changes/bug40407 deleted file mode 100644 index 068d278e14..0000000000 --- a/changes/bug40407 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (fuzzing): - - When building with --enable-libfuzzer, use a set of compiler flags - that works with more recent versions of the library. Previously - we were using a set of flags from 2017. - Closes ticket 40407. diff --git a/changes/bug40435 b/changes/bug40435 deleted file mode 100644 index 76d0a687eb..0000000000 --- a/changes/bug40435 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (circuit padding): - - Don't send STOP circuit padding cells when the other side has already - shut down the corresponding padding machine. Fixes bug 40435; bugfix on - 0.4.0.1-alpha. \ No newline at end of file diff --git a/changes/bug40453 b/changes/bug40453 deleted file mode 100644 index 28ed13b47a..0000000000 --- a/changes/bug40453 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (logging, relay): - - Add spaces between the "and" when logging the "Your server has - not managed to confirm reachability for its" on dual-stack relays - Fixes bug 40453; bugfix on 0.4.5.1-alpha. Patch by Neel Chauhan. diff --git a/changes/bug40467 b/changes/bug40467 deleted file mode 100644 index 03f1cc3816..0000000000 --- a/changes/bug40467 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (documentation): - - Add a mention of the `fingerprint-ed25519` for relays in the tor.1 man - page. Also clarify the difference between the RSA-based `fingerprint` and - `fingerprint-ed25519` files. Fixes bug 40467; bugfix on 0.4.3.1-alpha. - Patch by Neel Chauhan. diff --git a/changes/issue40338 b/changes/issue40338 deleted file mode 100644 index bc2cafff61..0000000000 --- a/changes/issue40338 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (testing configuration): - - When TestingTorNetwork is enabled, skip the permission check on - the hidden service directory. Closes ticket 40338. diff --git a/changes/ticket33742 b/changes/ticket33742 deleted file mode 100644 index 3669e76f48..0000000000 --- a/changes/ticket33742 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Add links to original tor design paper and anonbib to - docs/HACKING/README.1st.md. Closes ticket 33742. Patch from Emily Bones. diff --git a/changes/ticket40209 b/changes/ticket40209 deleted file mode 100644 index a90243be8c..0000000000 --- a/changes/ticket40209 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (bridge testing support): - - Let external bridge reachability testing tools discard cached - bridge descriptors when setting new bridges, so they can be sure - to get a clean reachability test. Implements ticket 40209. diff --git a/changes/ticket40337 b/changes/ticket40337 deleted file mode 100644 index 1c86fc4c99..0000000000 --- a/changes/ticket40337 +++ /dev/null @@ -1,16 +0,0 @@ - o Minor features (testing): - - On a testing network, relays can now use the - TestingMinTimeToReportBandwidth option to change - the smallest amount of time over which they're willing to report - their observed maximum bandwidth. Previously, this was fixed - at 1 day. For safety, values under 2 hours are only supported on - testing networks. Part of a fix for ticket 40337. - - o Minor features (testing): - - Relays on testing networks now report their observed bandwidths - immediately from startup. Previously, they waited - until they had been running for a full day. Closes ticket - 40337. - - Relays on testing networks no longer rate-limit how frequently - they are willing to report new bandwidth measurements. Part of a fix - for ticket 40337. diff --git a/changes/ticket40363 b/changes/ticket40363 deleted file mode 100644 index 713f943020..0000000000 --- a/changes/ticket40363 +++ /dev/null @@ -1,9 +0,0 @@ - o Major features (Proposal 332, onion services, guard selection algorithm): - - Clients and onion services now choose four long-lived "layer 2" guard - relays for use as the middle hop in all onion circuits. These relays are - kept in place for a randomized duration averaging 1 week each. This - mitigates guard discovery attacks against clients and short-lived onion - services such as OnionShare. Long-lived onion services that need high - security should still use the Vanguards addon - (https://github.com/mikeperry-tor/vanguards) Closes ticket 40363; - implements proposal 333. diff --git a/changes/ticket40434 b/changes/ticket40434 deleted file mode 100644 index 988bb416be..0000000000 --- a/changes/ticket40434 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfix (onion service): - - Do not flag an HSDir as non-running in case the descriptor upload or - fetch fails. An onion service closes pending directory connections - before uploading a new descriptor which can thus lead to wrongly - flagging many relays and thus affecting circuit building path selection. - Fixes bug 40434; bugfix on 0.2.0.13-alpha.

1 0