- tor-commits - lists.torproject.org

[translation/abouttor-homepage_completed] https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage_completed
by translation＠torproject.org 25 Oct '21

25 Oct '21

commit 9ea39247c689ee34c936f1e49357af2ea41ed90c Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 25 15:45:05 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage_c… --- fr/aboutTor.dtd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/fr/aboutTor.dtd b/fr/aboutTor.dtd index 82ed7fe280..4b0fbbd854 100644 --- a/fr/aboutTor.dtd +++ b/fr/aboutTor.dtd @@ -47,8 +47,8 @@ Thank you! --> -<!ENTITY aboutTor.yec.slogan ""> -<!ENTITY aboutTor.yec.motto ""> +<!ENTITY aboutTor.yec.slogan "NE TOUCHEZ\nPAS\nÀ MES\nDONNÉES"> +<!ENTITY aboutTor.yec.motto "La vie privée est un droit de la personne">  -<!ENTITY aboutTor.yec.donationMatch ""> +<!ENTITY aboutTor.yec.donationMatch "Votre don sera égalé par les Amis de Tor à concurrence de 150 000 $.">

1 0

[translation/abouttor-homepage] https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage
by translation＠torproject.org 25 Oct '21

25 Oct '21

commit ab9791be6ac8d6d079c47c25ef9b587aa9115ad1 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 25 15:45:02 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage --- fr/aboutTor.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fr/aboutTor.dtd b/fr/aboutTor.dtd index 77b638e032..4b0fbbd854 100644 --- a/fr/aboutTor.dtd +++ b/fr/aboutTor.dtd @@ -47,7 +47,7 @@ Thank you! --> -<!ENTITY aboutTor.yec.slogan "NE TOUCHEZ\nPAS À\nMES\nDONNÉES"> +<!ENTITY aboutTor.yec.slogan "NE TOUCHEZ\nPAS\nÀ MES\nDONNÉES"> <!ENTITY aboutTor.yec.motto "La vie privée est un droit de la personne"> <!-- LOCALIZATION NOTE (aboutTor.yec.donationMatch): Please translate the 'Friends of Tor' phrase, but also format it like the name of an organization in whichever way that is appropriate for your locale.

1 0

[tor/release-0.4.6] Remove already released ChangeLog entry.
by ahf＠torproject.org 25 Oct '21

25 Oct '21

commit 546d63e18f37758980381557dc1286a2962b4e0c Author: Alexander Færøy <ahf(a)torproject.org> Date: Mon Oct 25 15:23:16 2021 +0000 Remove already released ChangeLog entry. --- ChangeLog | 5 ----- 1 file changed, 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index a110b80ab4..069efafc87 100644 --- a/ChangeLog +++ b/ChangeLog @@ -13,11 +13,6 @@ Changes in version 0.4.6.8 - 2021-10-26 respectively but they are also controlled by consensus parameters. Fixes bug 40491; bugfix on 0.4.6.1-alpha. - o Minor features (bridge): - - We now announce the URL to Tor's new bridge status at - https://bridges.torproject.org/ when Tor is configured to run as a - bridge relay. Closes ticket 30477. - o Minor features (fallbackdir): - Regenerate fallback directories for October 2021. Close ticket 40493.

1 0

[tor/main] Typo: bugfixes -> bugs.
by ahf＠torproject.org 25 Oct '21

25 Oct '21

commit e1f93f29cf3a6d23c0e62b37b05239c3c8c83d6d Author: Alexander Færøy <ahf(a)torproject.org> Date: Mon Oct 25 15:25:30 2021 +0000 Typo: bugfixes -> bugs. --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 6a41c5a3a4..218e16d003 100644 --- a/ChangeLog +++ b/ChangeLog @@ -3,7 +3,7 @@ Changes in version 0.4.7.2-alpha - 2021-10-26 major features were added which are congestion control (prop334) for network performance and the MiddleOnly flag (prop335) voted by the authorities used to pin relays to the middle position for various - network health reasons. This version also fixes numerous bugfixes. + network health reasons. This version also fixes numerous bugs. The congestion control feature, detailed in proposal 324, still needs more work before we can enabled it by default. It is currently in its

1 0

[tor/main] Remove already released ChangeLog entry.
by ahf＠torproject.org 25 Oct '21

25 Oct '21

commit 0945dbbe520b3516c0e5834bf9c2635968a1ed8d Author: Alexander Færøy <ahf(a)torproject.org> Date: Mon Oct 25 15:18:14 2021 +0000 Remove already released ChangeLog entry. --- ChangeLog | 5 ----- 1 file changed, 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index 6d3d8f8700..6a41c5a3a4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -53,11 +53,6 @@ Changes in version 0.4.7.2-alpha - 2021-10-26 - See https://blog.torproject.org/v2-deprecation-timeline for details on how to transition from v2 to v3. - o Minor features (bridge): - - We now announce the URL to Tor's new bridge status at - https://bridges.torproject.org/ when Tor is configured to run as a - bridge relay. Closes ticket 30477. - o Minor features (fallbackdir): - Regenerate fallback directories for October 2021. Close ticket 40493.

1 0

[tor/main] changelog: ChangeLog for 0.4.7.2-alpha release
by dgoulet＠torproject.org 25 Oct '21

25 Oct '21

commit 78f5c96272bba39a9bd43944e588ced4728266ae Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Oct 25 10:13:46 2021 -0400 changelog: ChangeLog for 0.4.7.2-alpha release Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- ChangeLog | 153 +++++++++++++++++++++++++++++++++++++++++++++++++ changes/bug40400 | 6 -- changes/bug40400_part2 | 5 -- changes/bug40400_part3 | 7 --- changes/bug40465 | 3 - changes/bug40471 | 4 -- changes/bug40486 | 5 -- changes/bug40488 | 4 -- changes/issue11477 | 8 --- changes/issue16803 | 2 - changes/prop335 | 11 ---- changes/ticket30477 | 4 -- changes/ticket34083 | 5 -- changes/ticket40182 | 4 -- changes/ticket40450 | 3 - changes/ticket40469 | 4 -- changes/ticket40474 | 5 -- changes/ticket40476 | 7 --- changes/ticket40480 | 3 - changes/ticket40484 | 5 -- changes/ticket40485 | 3 - changes/ticket40490 | 5 -- changes/ticket40491 | 7 --- changes/ticket40493 | 2 - 24 files changed, 153 insertions(+), 112 deletions(-) diff --git a/ChangeLog b/ChangeLog index 2340716696..6d3d8f8700 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,156 @@ +Changes in version 0.4.7.2-alpha - 2021-10-26 + This version is the second alpha release of the 0.4.7.x series. Two + major features were added which are congestion control (prop334) for + network performance and the MiddleOnly flag (prop335) voted by the + authorities used to pin relays to the middle position for various + network health reasons. This version also fixes numerous bugfixes. + + The congestion control feature, detailed in proposal 324, still needs + more work before we can enabled it by default. It is currently in its + testing and tuning phase which means that you should expect more + 0.4.7.x alphas as congestion control gets stabilized and tuned for + optimal performance. And so, at this release, it can not be used + without a custom patch. + + o Major features (congestion control): + - Implement support for flow control over congestion controlled + circuits. This work comes from proposal 324. Closes ticket 40450. + + o Major features (directory authority): + - Add a new consensus method to handle MiddleOnly specially. When + enough authorities are using this method, then any relay tagged + with the MiddleOnly flag will have its Exit, Guard, HSDir, and + V2Dir flags automatically cleared, and will have its BadExit flag + automatically set. Implements part of proposal 335. + - Authorities can now be configured to label relays as "MiddleOnly". + When voting for this flag, authorities automatically vote against + Exit, Guard, HSDir, and V2Dir; and in favor of BadExit. Implements + part of proposal 335. Based on a patch from Neel Chauhan. + + o Major bugfix (relay, metrics): + - On the MetricsPort, the DNS error statistics are not reported by + record type ("record=...") anymore due to a libevent bug + (https://github.com/libevent/libevent/issues/1219) Fixes bug + 40490; bugfix on 0.4.7.1-alpha. + + o Major bugfixes (relay, overload state): + - Report the general overload state for DNS timeout errors only if + X% of all DNS queries over Y seconds are errors. Before that, it + only took 1 timeout to report the overload state which was just + too low of a threshold. The X and Y values are 1% and 10 minutes + respectively but they are also controlled by consensus parameters. + Fixes bug 40491; bugfix on 0.4.6.1-alpha. + + o Minor feature (authority, relay): + - Reject End-Of-Life relays running version 0.4.2.x, 0.4.3.x, + 0.4.4.x and 0.4.5 alphas/rc. Closes ticket 40480. + + o Minor feature (onion service v2): + - Onion service v2 addresses are now not recognized anymore by tor + meaning a bad hostname is returned when attempting to pass it on a + SOCKS connection. No more deprecation log is emitted client side. + Closes ticket 40476. + - See https://blog.torproject.org/v2-deprecation-timeline for + details on how to transition from v2 to v3. + + o Minor features (bridge): + - We now announce the URL to Tor's new bridge status at + https://bridges.torproject.org/ when Tor is configured to run as a + bridge relay. Closes ticket 30477. + + o Minor features (fallbackdir): + - Regenerate fallback directories for October 2021. Close + ticket 40493. + + o Minor features (logging, heartbeat): + - When a relay receives a cell that isn't encrypted properly for it, + but the relay is the last hop on the circuit, the relay now counts + how many cells of this kind it receives, on how many circuits, and + reports this information in the log. Previously, we'd log each + cell at PROTOCOL_WARN level, which is far too verbose to be + useful. Fixes part of ticket 40400. + + o Minor features (testing): + - We now have separate fuzzers for the inner layers of v3 onion + service descriptors, to prevent future bugs like 40392. Closes + ticket 40488. + + o Minor bugfixes (compilation): + - Fix compilation error when __NR_time is not defined. Fixes bug + 40465; bugfix on 0.2.5.5-alpha. Patch by Daniel Pinto. + + o Minor bugfixes (dirauth, bandwidth scanner): + - Add the AuthDirDontVoteOnDirAuthBandwidth dirauth config parameter + to avoid voting on bandwidth scanner weights to v3 directory + authorities. Fixes bug 40471; bugfix on 0.2.2.1-alpha. Patch by + Neel Chauhan. + + o Minor bugfixes (fragile-hardening, sandbox): + - When building with --enable-fragile-hardening, add or relax Linux + seccomp rules to allow AddressSanitizer to execute normally if the + process terminates with the sandbox active. This has the side + effect of disabling the filtering of file- and directory-open + requests on most systems and dilutes the effectiveness of the + sandbox overall, as a wider range of system calls must be + permitted. Fixes bug 11477; bugfix on 0.2.5.4-alpha. + + o Minor bugfixes (logging): + - If a channel has never received, transmitted a cell or seen a + client, do not calculate time diffs against 1/1/1970 but log + another prettier message. Fixes bug 40182; bugfix on 0.2.4.4. + + o Minor bugfixes (onion service): + - Fix a warning BUG that would occur often on heavily loaded onion + service leading to filling the logs with useless warnings. Fixes + bug 34083; bugfix on 0.3.2.1-alpha. + + o Minor bugfixes (onion service, config): + - Fix a memory leak for a small config line string that could occur + if the service failed to be configured from file properly. Fixes + bug 40484; bugfix on 0.3.2.1-alpha. + + o Minor bugfixes (onion service, TROVE-2021-008): + - Only log once any v2 access attempts in order to not pollute the + logs with warnings and avoid recording the times on disk when v2 + access was attempted. Important to note that the onion address was + _never_ logged. That is a Low security issue. Fixes bug 40474; + bugfix on 0.4.5.8. + - Note that due to #40476 which removes v2 support entirely, this + log line is not emitted anymore. We still mention this in the + changelog because it is a low security TROVE. + + o Minor bugfixes (usability): + - Do not log "RENDEZVOUS1 cell with unrecognized rendezvous cookie" + at LOG_PROTOCOL_WARN; instead log it at DEBUG. This warning can + happen naturally if a client gives up on a rendezvous circuit + after sending INTRODUCE1. Fixes part of bug 40400; bugfix + on 0.1.1.13-alpha. + - Do not log "circuit_receive_relay_cell failed" at + LOG_PROTOCOL_WARN; instead log it at DEBUG. In every case where we + would want to log this as a protocol warning, we are already + logging another warning from inside circuit_receive_relay_cell. + Fixes part of bug 40400; bugfix on 0.1.1.9-alpha. + + o Code simplification and refactoring: + - Lower the official maximum for "guard-extreme-restriction-percent" + to 100. This has no effect on when the guard code will generate a + warning, but it makes the intent of the option clearer. Fixes bug + 40486; bugfix on 0.3.0.1-alpha. + + o Testing: + - Add unit tests for the Linux seccomp sandbox. Resolves + issue 16803. + + o Code simplification and refactoring (rust): + - Remove Rust support and its associated code. It is unsupported and + Rust focus should be shifted to arti. Closes 40469. + + o Testing (CI, chutney): + - Bump the data size that chutney transmit to 5MB in order to + trigger flow control and congestion window code. Closes + ticket 40485. + + Changes in version 0.4.7.1-alpha - 2021-09-17 This version is the first alpha release of the 0.4.7.x series. One major feature is Vanguards Lite, from proposal 333, to help mitigate diff --git a/changes/bug40400 b/changes/bug40400 deleted file mode 100644 index 47bb1e6a1e..0000000000 --- a/changes/bug40400 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (usability): - - Do not log "circuit_receive_relay_cell failed" at LOG_PROTOCOL_WARN; - instead log it at DEBUG. In every case where we would want to log - this as a protocol warning, we are already logging another warning - from inside circuit_receive_relay_cell. Fixes part of bug 40400; - bugfix on 0.1.1.9-alpha. diff --git a/changes/bug40400_part2 b/changes/bug40400_part2 deleted file mode 100644 index 9b834d5ea1..0000000000 --- a/changes/bug40400_part2 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (usability): - - Do not log "RENDEZVOUS1 cell with unrecognized rendezvous cookie" - at LOG_PROTOCOL_WARN; instead log it at DEBUG. This warning can happen - naturally if a client gives up on a rendezvous circuit after sending - INTRODUCE1. Fixes part of bug 40400; bugfix on 0.1.1.13-alpha. diff --git a/changes/bug40400_part3 b/changes/bug40400_part3 deleted file mode 100644 index b78e800229..0000000000 --- a/changes/bug40400_part3 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor features (logging, heartbeat): - - When a relay receives a cell that isn't encrypted properly for - it, but the relay is the last hop on the circuit, the relay - now counts how many cells of this kind it receives, on how - many circuits, and reports this information in the log. - Previously, we'd log each cell at PROTOCOL_WARN level, which - is far too verbose to be useful. Fixes part of ticket 40400. diff --git a/changes/bug40465 b/changes/bug40465 deleted file mode 100644 index d4d225c62e..0000000000 --- a/changes/bug40465 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (compilation): - - Fix compilation error when __NR_time is not defined. Fixes bug - 40465; bugfix on 0.2.5.5-alpha. Patch by Daniel Pinto. diff --git a/changes/bug40471 b/changes/bug40471 deleted file mode 100644 index 323e049599..0000000000 --- a/changes/bug40471 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (dirauth, bandwidth scanner): - - Add the AuthDirDontVoteOnDirAuthBandwidth dirauth config parameter to - avoid voting on bandwidth scanner weights to v3 directory authorities. - Fixes bug 40471; bugfix on 0.2.2.1-alpha. Patch by Neel Chauhan. diff --git a/changes/bug40486 b/changes/bug40486 deleted file mode 100644 index 83315bfb2b..0000000000 --- a/changes/bug40486 +++ /dev/null @@ -1,5 +0,0 @@ - o Code simplification and refactoring: - - Lower the official maximum for "guard-extreme-restriction-percent" to - 100. This has no effect on when the guard code will generate a warning, - but it makes the intent of the option clearer. Fixes bug 40486; bugfix - on 0.3.0.1-alpha. diff --git a/changes/bug40488 b/changes/bug40488 deleted file mode 100644 index 6fc265cc20..0000000000 --- a/changes/bug40488 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (testing): - - We now have separate fuzzers for the inner layers of v3 onion - service descriptors, to prevent future bugs like 40392. - Closes ticket 40488. diff --git a/changes/issue11477 b/changes/issue11477 deleted file mode 100644 index bb5d9e4099..0000000000 --- a/changes/issue11477 +++ /dev/null @@ -1,8 +0,0 @@ - o Minor bugfixes (fragile-hardening, sandbox): - - When building with --enable-fragile-hardening, add or relax Linux - seccomp rules to allow AddressSanitizer to execute normally if the - process terminates with the sandbox active. This has the side - effect of disabling the filtering of file- and directory-open - requests on most systems and dilutes the effectiveness of the - sandbox overall, as a wider range of system calls must be - permitted. Fixes bug 11477; bugfix on 0.2.5.4-alpha. diff --git a/changes/issue16803 b/changes/issue16803 deleted file mode 100644 index 7d0dd833e2..0000000000 --- a/changes/issue16803 +++ /dev/null @@ -1,2 +0,0 @@ - o Testing: - - Add unit tests for the Linux seccomp sandbox. Resolves issue 16803. diff --git a/changes/prop335 b/changes/prop335 deleted file mode 100644 index 4fa61ca2e9..0000000000 --- a/changes/prop335 +++ /dev/null @@ -1,11 +0,0 @@ - o Major features (directory authority): - - Authorities can now be configured to label relays as "MiddleOnly". - When voting for this flag, authorities automatically vote against - Exit, Guard, HSDir, and V2Dir; and in favor of BadExit. - Implements part of proposal 335. Based on a patch from Neel - Chauhan. - - Add a new consensus method to handle MiddleOnly specially. When - enough authorities are using this method, then any relay - tagged with the MiddleOnly flag will have its Exit, Guard, HSDir, - and V2Dir flags automatically cleared, and will have its BadExit flag - automatically set. Implements part of proposal 335. diff --git a/changes/ticket30477 b/changes/ticket30477 deleted file mode 100644 index 379fc4e7eb..0000000000 --- a/changes/ticket30477 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (bridge): - - We now announce the URL to Tor's new bridge status at - https://bridges.torproject.org/ when Tor is configured to run as a bridge - relay. Closes ticket 30477. diff --git a/changes/ticket34083 b/changes/ticket34083 deleted file mode 100644 index 417d01c5a5..0000000000 --- a/changes/ticket34083 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (onion service): - - Fix a warning BUG that would occur often on heavily loaded onion service - leading to filling the logs with useless warnings. Fixes bug 34083; bugfix - on 0.3.2.1-alpha. - diff --git a/changes/ticket40182 b/changes/ticket40182 deleted file mode 100644 index ad75c38534..0000000000 --- a/changes/ticket40182 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (logging): - - If a channel has never received, transmitted a cell or seen a client, do - not calculate time diffs against 1/1/1970 but log another prettier - message. Fixes bug 40182; bugfix on 0.2.4.4. diff --git a/changes/ticket40450 b/changes/ticket40450 deleted file mode 100644 index 6753bd04f5..0000000000 --- a/changes/ticket40450 +++ /dev/null @@ -1,3 +0,0 @@ - o Major features (congestion control): - - Implement support for flow control over congestion controlled circuits. - This work comes from proposal 324. Closes ticket 40450. diff --git a/changes/ticket40469 b/changes/ticket40469 deleted file mode 100644 index 1cb792b4ba..0000000000 --- a/changes/ticket40469 +++ /dev/null @@ -1,4 +0,0 @@ - o Code simplification and refactoring (rust): - - Remove Rust support and its associated code. It is unsupported and Rust - focus should be shifted to arti. Closes 40469. - diff --git a/changes/ticket40474 b/changes/ticket40474 deleted file mode 100644 index d2a7231106..0000000000 --- a/changes/ticket40474 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (onion service, TROVE-2021-008): - - Only log once any v2 access attempts in order to not pollute the logs - with warnings and avoid recording the times on disk when v2 access was - attempted. Important to note that the onion address was _never_ logged. - That is a Low security issue. Fixes bug 40474; bugfix on 0.4.5.8. diff --git a/changes/ticket40476 b/changes/ticket40476 deleted file mode 100644 index 7179d8b1c6..0000000000 --- a/changes/ticket40476 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor feature (onion service v2): - - Onion service v2 address are now not recognized anymore by tor meaning a - bad hostname is returned when attempting to pass it on a SOCKS - connection. No more deprecation log is emitted client side. Closes - ticket 40476. - - See https://blog.torproject.org/v2-deprecation-timeline for details on - how to transition from v2 to v3. diff --git a/changes/ticket40480 b/changes/ticket40480 deleted file mode 100644 index 525e848a1f..0000000000 --- a/changes/ticket40480 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor feature (authority, relay): - - Reject End-Of-Life relays running version 0.4.2.x, 0.4.3.x, 0.4.4.x and - 0.4.5 alphas and rc. Closes ticket 40480. diff --git a/changes/ticket40484 b/changes/ticket40484 deleted file mode 100644 index 9a9ffdf448..0000000000 --- a/changes/ticket40484 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (onion service, config): - - Fix a memory leak for a small config line string that could occur if the - service failed to be configured from file properly. Fixes bug 40484; - bugfix on 0.3.2.1-alpha. - diff --git a/changes/ticket40485 b/changes/ticket40485 deleted file mode 100644 index 849ee0719f..0000000000 --- a/changes/ticket40485 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing (CI, chutney): - - Bump the data size that chutney transmit to 5MB in order to trigger flow - control and congestion window code. Closes ticket 40485. diff --git a/changes/ticket40490 b/changes/ticket40490 deleted file mode 100644 index 6e9ef50b42..0000000000 --- a/changes/ticket40490 +++ /dev/null @@ -1,5 +0,0 @@ - o Major bugfix (relay, metrics): - - On the MetricsPort, the DNS error statistics are not reported by record - type ("record=...") anymore due to a libevent bug - (https://github.com/libevent/libevent/issues/1219) Fixes bug 40490; - bugfix on 0.4.7.1-alpha. diff --git a/changes/ticket40491 b/changes/ticket40491 deleted file mode 100644 index 01c6c7d748..0000000000 --- a/changes/ticket40491 +++ /dev/null @@ -1,7 +0,0 @@ - o Major bugfixes (relay, overload state): - - Report the general overload state for DNS timeout errors only if X% of all - DNS queries over Y seconds are errors. Before that, it only took 1 timeout - to report the overload state which was just too low of a threshold. The X - and Y values are 1% and 10 minutes respectively but they are also - controlled by consensus parameters. Fixes bug 40491; bugfix on - 0.4.6.1-alpha. diff --git a/changes/ticket40493 b/changes/ticket40493 deleted file mode 100644 index eb9baf916b..0000000000 --- a/changes/ticket40493 +++ /dev/null @@ -1,2 +0,0 @@ - o Minor features (fallbackdir): - - Regenerate fallback directories for October 2021. Close ticket 40493.

1 0

[tor/release-0.4.5] changelog: Changelog for 0.4.5.11
by dgoulet＠torproject.org 25 Oct '21

25 Oct '21

commit 0c9e27ddbef4c9f46b45c76d5c829f87ade740b7 Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Oct 25 10:43:42 2021 -0400 changelog: Changelog for 0.4.5.11 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- ChangeLog | 77 +++++++++++++++++++++++++++++++++++++++++++++++++++++ ReleaseNotes | 77 +++++++++++++++++++++++++++++++++++++++++++++++++++++ changes/bug40175 | 5 ---- changes/bug40371 | 6 ----- changes/bug40375 | 5 ---- changes/ticket30477 | 4 --- changes/ticket40337 | 16 ----------- changes/ticket40434 | 6 ----- changes/ticket40474 | 5 ---- changes/ticket40476 | 8 ------ changes/ticket40493 | 2 -- 11 files changed, 154 insertions(+), 57 deletions(-) diff --git a/ChangeLog b/ChangeLog index c60d9fa7b2..618da8ee3c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,80 @@ +Changes in version 0.4.5.11 - 2021-10-26 + This version fixes several bugs from earlier versions of Tor. A major + change is that v2 onion service are now disabled at the client, + service and relay meaning that any tor nodes running this version and + onward will stops supporting v2. This is the last step into the long + deprecation process of onion service version 2. Everyone running an + earlier version, whether as a client, a relay, or an onion service, + should upgrade to Tor 0.3.5.17, 0.4.5.11, or 0.4.6.8. + + o Major feature (onion service v2): + - See https://blog.torproject.org/v2-deprecation-timeline for + details on how to transition from v2 to v3. + - The control port command HSFETCH and HSPOST don't allow version 2 + as well. It is also not possible to create a v2 service + with ADD_ONION. + - Tor does NOT allow anymore to create v2 services, to connect as a + client to a v2 service and for a relay to be a v2 HSDir or + introduction point. This effectively disable onion service version + 2 tor wide. Closes 40476. + + o Minor features (bridge, backport from 0.4.6.8): + - We now announce the URL to Tor's new bridge status at + https://bridges.torproject.org/ when Tor is configured to run as a + bridge relay. Closes ticket 30477. + + o Minor features (fallbackdir): + - Regenerate fallback directories for October 2021. Close + ticket 40493. + + o Minor features (logging, diagnostic, backport from 0.4.6.5): + - Log decompression failures at a higher severity level, since they + can help provide missing context for other warning messages. We + rate-limit these messages, to avoid flooding the logs if they + begin to occur frequently. Closes ticket 40175. + + o Minor features (testing, backport from 0.4.6.8): + - On a testing network, relays can now use the + TestingMinTimeToReportBandwidth option to change the smallest + amount of time over which they're willing to report their observed + maximum bandwidth. Previously, this was fixed at 1 day. For + safety, values under 2 hours are only supported on testing + networks. Part of a fix for ticket 40337. + - Relays on testing networks no longer rate-limit how frequently + they are willing to report new bandwidth measurements. Part of a + fix for ticket 40337. + - Relays on testing networks now report their observed bandwidths + immediately from startup. Previously, they waited until they had + been running for a full day. Closes ticket 40337. + + o Minor bugfix (onion service, backport from 0.4.6.8): + - Do not flag an HSDir as non-running in case the descriptor upload + or fetch fails. An onion service closes pending directory + connections before uploading a new descriptor which can thus lead + to wrongly flagging many relays and thus affecting circuit building + path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. + + o Minor bugfixes (compatibility, backport from 0.4.6.8): + - Fix compatibility with the most recent Libevent versions, which no + longer have an evdns_set_random_bytes() function. Because this + function has been a no-op since Libevent 2.0.4-alpha, it is safe + for us to just stop calling it. Fixes bug 40371; bugfix + on 0.2.1.7-alpha. + + o Minor bugfixes (consensus handling, backport from 0.4.6.4-rc): + - Avoid a set of bugs that could be caused by inconsistently + preferring an out-of-date consensus stored in a stale directory + cache over a more recent one stored on disk as the latest + consensus. Fixes bug 40375; bugfix on 0.3.1.1-alpha. + + o Minor bugfixes (onion service, TROVE-2021-008, backport from 0.4.6.8): + - Only log once any v2 access attempts in order to not pollute the + logs with warnings and avoid recording the times on disk when v2 + access was attempted. Important to note that the onion address was + _never_ logged. That is a Low security issue. Fixes bug 40474; + bugfix on 0.4.5.8. + + Changes in version 0.4.5.10 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone diff --git a/ReleaseNotes b/ReleaseNotes index a6e39c2362..58f4a9b263 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,83 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.4.5.11 - 2021-10-26 + This version fixes several bugs from earlier versions of Tor. A major + change is that v2 onion service are now disabled at the client, + service and relay meaning that any tor nodes running this version and + onward will stops supporting v2. This is the last step into the long + deprecation process of onion service version 2. Everyone running an + earlier version, whether as a client, a relay, or an onion service, + should upgrade to Tor 0.3.5.17, 0.4.5.11, or 0.4.6.8. + + o Major feature (onion service v2): + - See https://blog.torproject.org/v2-deprecation-timeline for + details on how to transition from v2 to v3. + - The control port command HSFETCH and HSPOST don't allow version 2 + as well. It is also not possible to create a v2 service + with ADD_ONION. + - Tor does NOT allow anymore to create v2 services, to connect as a + client to a v2 service and for a relay to be a v2 HSDir or + introduction point. This effectively disable onion service version + 2 tor wide. Closes 40476. + + o Minor features (bridge, backport from 0.4.6.8): + - We now announce the URL to Tor's new bridge status at + https://bridges.torproject.org/ when Tor is configured to run as a + bridge relay. Closes ticket 30477. + + o Minor features (fallbackdir): + - Regenerate fallback directories for October 2021. Close + ticket 40493. + + o Minor features (logging, diagnostic, backport from 0.4.6.5): + - Log decompression failures at a higher severity level, since they + can help provide missing context for other warning messages. We + rate-limit these messages, to avoid flooding the logs if they + begin to occur frequently. Closes ticket 40175. + + o Minor features (testing, backport from 0.4.6.8): + - On a testing network, relays can now use the + TestingMinTimeToReportBandwidth option to change the smallest + amount of time over which they're willing to report their observed + maximum bandwidth. Previously, this was fixed at 1 day. For + safety, values under 2 hours are only supported on testing + networks. Part of a fix for ticket 40337. + - Relays on testing networks no longer rate-limit how frequently + they are willing to report new bandwidth measurements. Part of a + fix for ticket 40337. + - Relays on testing networks now report their observed bandwidths + immediately from startup. Previously, they waited until they had + been running for a full day. Closes ticket 40337. + + o Minor bugfix (onion service, backport from 0.4.6.8): + - Do not flag an HSDir as non-running in case the descriptor upload + or fetch fails. An onion service closes pending directory + connections before uploading a new descriptor which can thus lead + to wrongly flagging many relays and thus affecting circuit building + path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. + + o Minor bugfixes (compatibility, backport from 0.4.6.8): + - Fix compatibility with the most recent Libevent versions, which no + longer have an evdns_set_random_bytes() function. Because this + function has been a no-op since Libevent 2.0.4-alpha, it is safe + for us to just stop calling it. Fixes bug 40371; bugfix + on 0.2.1.7-alpha. + + o Minor bugfixes (consensus handling, backport from 0.4.6.4-rc): + - Avoid a set of bugs that could be caused by inconsistently + preferring an out-of-date consensus stored in a stale directory + cache over a more recent one stored on disk as the latest + consensus. Fixes bug 40375; bugfix on 0.3.1.1-alpha. + + o Minor bugfixes (onion service, TROVE-2021-008, backport from 0.4.6.8): + - Only log once any v2 access attempts in order to not pollute the + logs with warnings and avoid recording the times on disk when v2 + access was attempted. Important to note that the onion address was + _never_ logged. That is a Low security issue. Fixes bug 40474; + bugfix on 0.4.5.8. + + Changes in version 0.4.5.10 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone running an earlier diff --git a/changes/bug40175 b/changes/bug40175 deleted file mode 100644 index aa2ce9566f..0000000000 --- a/changes/bug40175 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (logging, diagnostic): - - Log decompression failures at a higher severity level, since they - can help provide missing context for other warning messages. - We rate-limit these messages, to avoid flooding the logs if they - begin to occur frequently. Closes ticket 40175. diff --git a/changes/bug40371 b/changes/bug40371 deleted file mode 100644 index 8cc7117f9f..0000000000 --- a/changes/bug40371 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (compatibility): - - Fix compatibility with the most recent Libevent versions, which - no longer have an evdns_set_random_bytes() function. Because - this function has been a no-op since Libevent 2.0.4-alpha, - it is safe for us to just stop calling it. Fixes bug 40371; - bugfix on 0.2.1.7-alpha. diff --git a/changes/bug40375 b/changes/bug40375 deleted file mode 100644 index 7ac32bc628..0000000000 --- a/changes/bug40375 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (consensus handling): - - Avoid a set of bugs that could be caused by inconsistently preferring - an out-of-date consensus stored in a stale directory cache over - a more recent one stored on disk as the latest consensus. - Fixes bug 40375; bugfix on 0.3.1.1-alpha. diff --git a/changes/ticket30477 b/changes/ticket30477 deleted file mode 100644 index 379fc4e7eb..0000000000 --- a/changes/ticket30477 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (bridge): - - We now announce the URL to Tor's new bridge status at - https://bridges.torproject.org/ when Tor is configured to run as a bridge - relay. Closes ticket 30477. diff --git a/changes/ticket40337 b/changes/ticket40337 deleted file mode 100644 index 1c86fc4c99..0000000000 --- a/changes/ticket40337 +++ /dev/null @@ -1,16 +0,0 @@ - o Minor features (testing): - - On a testing network, relays can now use the - TestingMinTimeToReportBandwidth option to change - the smallest amount of time over which they're willing to report - their observed maximum bandwidth. Previously, this was fixed - at 1 day. For safety, values under 2 hours are only supported on - testing networks. Part of a fix for ticket 40337. - - o Minor features (testing): - - Relays on testing networks now report their observed bandwidths - immediately from startup. Previously, they waited - until they had been running for a full day. Closes ticket - 40337. - - Relays on testing networks no longer rate-limit how frequently - they are willing to report new bandwidth measurements. Part of a fix - for ticket 40337. diff --git a/changes/ticket40434 b/changes/ticket40434 deleted file mode 100644 index 988bb416be..0000000000 --- a/changes/ticket40434 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfix (onion service): - - Do not flag an HSDir as non-running in case the descriptor upload or - fetch fails. An onion service closes pending directory connections - before uploading a new descriptor which can thus lead to wrongly - flagging many relays and thus affecting circuit building path selection. - Fixes bug 40434; bugfix on 0.2.0.13-alpha. diff --git a/changes/ticket40474 b/changes/ticket40474 deleted file mode 100644 index d2a7231106..0000000000 --- a/changes/ticket40474 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (onion service, TROVE-2021-008): - - Only log once any v2 access attempts in order to not pollute the logs - with warnings and avoid recording the times on disk when v2 access was - attempted. Important to note that the onion address was _never_ logged. - That is a Low security issue. Fixes bug 40474; bugfix on 0.4.5.8. diff --git a/changes/ticket40476 b/changes/ticket40476 deleted file mode 100644 index 062e36f9bc..0000000000 --- a/changes/ticket40476 +++ /dev/null @@ -1,8 +0,0 @@ - o Major feature (onion service v2): - - Tor does NOT allow anymore to create v2 services, to connect as a client - to a v2 service and for a relay to be a v2 HSDir or introduction point. - This effectively disable onion service version 2 tor wide. Closes 40476. - - The control port command HSFETCH and HSPOST don't allow version 2 as well. - It is also not possible to create a v2 service with ADD_ONION. - - See https://blog.torproject.org/v2-deprecation-timeline for details on - how to transition from v2 to v3. diff --git a/changes/ticket40493 b/changes/ticket40493 deleted file mode 100644 index eb9baf916b..0000000000 --- a/changes/ticket40493 +++ /dev/null @@ -1,2 +0,0 @@ - o Minor features (fallbackdir): - - Regenerate fallback directories for October 2021. Close ticket 40493.

1 0

[tor/release-0.3.5] changelog: Changelog for 0.3.5.17
by dgoulet＠torproject.org 25 Oct '21

25 Oct '21

commit 5aa7bd43080ffeb020944b2c0b1bc184c44f860b Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Oct 25 10:43:33 2021 -0400 changelog: Changelog for 0.3.5.17 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- ChangeLog | 37 +++++++++++++++++++++++++++++++++++++ ReleaseNotes | 37 +++++++++++++++++++++++++++++++++++++ changes/bug40371 | 6 ------ changes/ticket30477 | 4 ---- changes/ticket40476 | 8 -------- changes/ticket40493 | 2 -- scripts/maint/sortChanges.py | 10 +++++----- 7 files changed, 79 insertions(+), 25 deletions(-) diff --git a/ChangeLog b/ChangeLog index ba5bb7ed53..d933b5e751 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,40 @@ +Changes in version 0.3.5.17 - 2021-10-26 + This version as a major change which is that v2 onion service are now + disabled at the client, service and relay meaning that any tor nodes + running this version and onward will stops supporting v2. This is the + last step into the long deprecation process of onion service version + 2. Everyone running an earlier version, whether as a client, a relay, + or an onion service, should upgrade to Tor 0.3.5.17, 0.4.5.11, or + 0.4.6.8. + + o Major feature (onion service v2, backport from 0.4.5.11): + - See https://blog.torproject.org/v2-deprecation-timeline for + details on how to transition from v2 to v3. + - The control port command HSFETCH and HSPOST don't allow version 2 + as well. It is also not possible to create a v2 service with + ADD_ONION. + - Tor does NOT allow anymore to create v2 services, to connect as a + client to a v2 service and for a relay to be a v2 HSDir or + introduction point. This effectively disable onion service version + 2 tor wide. Closes 40476. + + o Minor features (bridge, backport from 0.4.6.8): + - We now announce the URL to Tor's new bridge status at + https://bridges.torproject.org/ when Tor is configured to run as a + bridge relay. Closes ticket 30477. + + o Minor features (fallbackdir): + - Regenerate fallback directories for October 2021. Close + ticket 40493. + + o Minor bugfixes (compatibility, backport from 0.4.6.8): + - Fix compatibility with the most recent Libevent versions, which no + longer have an evdns_set_random_bytes() function. Because this + function has been a no-op since Libevent 2.0.4-alpha, it is safe + for us to just stop calling it. Fixes bug 40371; bugfix on + 0.2.1.7-alpha. + + Changes in version 0.3.5.16 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone diff --git a/ReleaseNotes b/ReleaseNotes index 77b9047761..4044390c58 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,43 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.3.5.17 - 2021-10-26 + This version as a major change which is that v2 onion service are now + disabled at the client, service and relay meaning that any tor nodes + running this version and onward will stops supporting v2. This is the + last step into the long deprecation process of onion service version + 2. Everyone running an earlier version, whether as a client, a relay, + or an onion service, should upgrade to Tor 0.3.5.17, 0.4.5.11, or + 0.4.6.8. + + o Major feature (onion service v2, backport from 0.4.5.11): + - See https://blog.torproject.org/v2-deprecation-timeline for + details on how to transition from v2 to v3. + - The control port command HSFETCH and HSPOST don't allow version 2 + as well. It is also not possible to create a v2 service with + ADD_ONION. + - Tor does NOT allow anymore to create v2 services, to connect as a + client to a v2 service and for a relay to be a v2 HSDir or + introduction point. This effectively disable onion service version + 2 tor wide. Closes 40476. + + o Minor features (bridge, backport from 0.4.6.8): + - We now announce the URL to Tor's new bridge status at + https://bridges.torproject.org/ when Tor is configured to run as a + bridge relay. Closes ticket 30477. + + o Minor features (fallbackdir): + - Regenerate fallback directories for October 2021. Close + ticket 40493. + + o Minor bugfixes (compatibility, backport from 0.4.6.8): + - Fix compatibility with the most recent Libevent versions, which no + longer have an evdns_set_random_bytes() function. Because this + function has been a no-op since Libevent 2.0.4-alpha, it is safe + for us to just stop calling it. Fixes bug 40371; bugfix on + 0.2.1.7-alpha. + + Changes in version 0.3.5.16 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone running an earlier diff --git a/changes/bug40371 b/changes/bug40371 deleted file mode 100644 index 8cc7117f9f..0000000000 --- a/changes/bug40371 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (compatibility): - - Fix compatibility with the most recent Libevent versions, which - no longer have an evdns_set_random_bytes() function. Because - this function has been a no-op since Libevent 2.0.4-alpha, - it is safe for us to just stop calling it. Fixes bug 40371; - bugfix on 0.2.1.7-alpha. diff --git a/changes/ticket30477 b/changes/ticket30477 deleted file mode 100644 index 379fc4e7eb..0000000000 --- a/changes/ticket30477 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (bridge): - - We now announce the URL to Tor's new bridge status at - https://bridges.torproject.org/ when Tor is configured to run as a bridge - relay. Closes ticket 30477. diff --git a/changes/ticket40476 b/changes/ticket40476 deleted file mode 100644 index 062e36f9bc..0000000000 --- a/changes/ticket40476 +++ /dev/null @@ -1,8 +0,0 @@ - o Major feature (onion service v2): - - Tor does NOT allow anymore to create v2 services, to connect as a client - to a v2 service and for a relay to be a v2 HSDir or introduction point. - This effectively disable onion service version 2 tor wide. Closes 40476. - - The control port command HSFETCH and HSPOST don't allow version 2 as well. - It is also not possible to create a v2 service with ADD_ONION. - - See https://blog.torproject.org/v2-deprecation-timeline for details on - how to transition from v2 to v3. diff --git a/changes/ticket40493 b/changes/ticket40493 deleted file mode 100644 index eb9baf916b..0000000000 --- a/changes/ticket40493 +++ /dev/null @@ -1,2 +0,0 @@ - o Minor features (fallbackdir): - - Regenerate fallback directories for October 2021. Close ticket 40493. diff --git a/scripts/maint/sortChanges.py b/scripts/maint/sortChanges.py index 986b94b025..2264b1c7fa 100755 --- a/scripts/maint/sortChanges.py +++ b/scripts/maint/sortChanges.py @@ -43,7 +43,7 @@ REPLACEMENTS = { def score(s,fname=None): m = re.match(r'^ +o ([^\n]*)\n(.*)', s, re.M|re.S) if not m: - print >>sys.stderr, "Can't score %r from %s"%(s,fname) + print("Can't score %r from %s"%(s,fname)) heading = m.group(1) heading = REPLACEMENTS.get(heading, heading) lw = m.group(1).lower() @@ -100,9 +100,9 @@ changes.sort() last_lw = "this is not a header" for _, lw, header, rest in changes: if lw == last_lw: - print rest, + print(rest) else: - print - print " o",header - print rest, + print("") + print(" o %s" % (header)) + print(rest), last_lw = lw

1 0

[tor/release-0.4.6] changelog: Changelog for 0.4.6.8
by dgoulet＠torproject.org 25 Oct '21

25 Oct '21

commit 43a711694745cacdfbcb612805bf1f7d8132b486 Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Oct 25 10:43:50 2021 -0400 changelog: Changelog for 0.4.6.8 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- ChangeLog | 62 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ReleaseNotes | 62 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 124 insertions(+) diff --git a/ChangeLog b/ChangeLog index 6411324083..a110b80ab4 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,65 @@ +Changes in version 0.4.6.8 - 2021-10-26 + This version fixes several bugs from earlier versions of Tor. Worth + noting is a fix on how we use DNS timeout to report general overload. + Everyone running an earlier version, whether as a client, a relay, or + an onion service, should upgrade to Tor 0.3.5.17, 0.4.5.11, + or 0.4.6.8. + + o Major bugfixes (relay, overload state): + - Report the general overload state for DNS timeout errors only if + X% of all DNS queries over Y seconds are errors. Before that, it + only took 1 timeout to report the overload state which was just + too low of a threshold. The X and Y values are 1% and 10 minutes + respectively but they are also controlled by consensus parameters. + Fixes bug 40491; bugfix on 0.4.6.1-alpha. + + o Minor features (bridge): + - We now announce the URL to Tor's new bridge status at + https://bridges.torproject.org/ when Tor is configured to run as a + bridge relay. Closes ticket 30477. + + o Minor features (fallbackdir): + - Regenerate fallback directories for October 2021. Close + ticket 40493. + + o Minor features (testing): + - On a testing network, relays can now use the + TestingMinTimeToReportBandwidth option to change the smallest + amount of time over which they're willing to report their observed + maximum bandwidth. Previously, this was fixed at 1 day. For + safety, values under 2 hours are only supported on testing + networks. Part of a fix for ticket 40337. + - Relays on testing networks no longer rate-limit how frequently + they are willing to report new bandwidth measurements. Part of a + fix for ticket 40337. + - Relays on testing networks now report their observed bandwidths + immediately from startup. Previously, they waited until they had + been running for a full day. Closes ticket 40337. + + o Minor bugfix (onion service): + - Do not flag an HSDir as non-running in case the descriptor upload + or fetch fails. An onion service closes pending directory + connections before uploading a new descriptor which can thus lead + to wrongly flagging many relays and thus affecting circuit building + path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. + - Improve logging when a bad HS version is given. Fixes bug 40476; + bugfix on 0.4.6.1-alpha. + + o Minor bugfixes (compatibility): + - Fix compatibility with the most recent Libevent versions, which no + longer have an evdns_set_random_bytes() function. Because this + function has been a no-op since Libevent 2.0.4-alpha, it is safe + for us to just stop calling it. Fixes bug 40371; bugfix + on 0.2.1.7-alpha. + + o Minor bugfixes (onion service, TROVE-2021-008): + - Only log once any v2 access attempts in order to not pollute the + logs with warnings and avoid recording the times on disk when v2 + access was attempted. Important to note that the onion address was + _never_ logged. That is a Low security issue. Fixes bug 40474; + bugfix on 0.4.5.8. + + Changes in version 0.4.6.7 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone diff --git a/ReleaseNotes b/ReleaseNotes index aa54953aa7..425ee565ad 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,68 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.4.6.8 - 2021-10-26 + This version fixes several bugs from earlier versions of Tor. Worth + noting is a fix on how we use DNS timeout to report general overload. + Everyone running an earlier version, whether as a client, a relay, or + an onion service, should upgrade to Tor 0.3.5.17, 0.4.5.11, + or 0.4.6.8. + + o Major bugfixes (relay, overload state): + - Report the general overload state for DNS timeout errors only if + X% of all DNS queries over Y seconds are errors. Before that, it + only took 1 timeout to report the overload state which was just + too low of a threshold. The X and Y values are 1% and 10 minutes + respectively but they are also controlled by consensus parameters. + Fixes bug 40491; bugfix on 0.4.6.1-alpha. + + o Minor features (bridge): + - We now announce the URL to Tor's new bridge status at + https://bridges.torproject.org/ when Tor is configured to run as a + bridge relay. Closes ticket 30477. + + o Minor features (fallbackdir): + - Regenerate fallback directories for October 2021. Close + ticket 40493. + + o Minor features (testing): + - On a testing network, relays can now use the + TestingMinTimeToReportBandwidth option to change the smallest + amount of time over which they're willing to report their observed + maximum bandwidth. Previously, this was fixed at 1 day. For + safety, values under 2 hours are only supported on testing + networks. Part of a fix for ticket 40337. + - Relays on testing networks no longer rate-limit how frequently + they are willing to report new bandwidth measurements. Part of a + fix for ticket 40337. + - Relays on testing networks now report their observed bandwidths + immediately from startup. Previously, they waited until they had + been running for a full day. Closes ticket 40337. + + o Minor bugfix (onion service): + - Do not flag an HSDir as non-running in case the descriptor upload + or fetch fails. An onion service closes pending directory + connections before uploading a new descriptor which can thus lead + to wrongly flagging many relays and thus affecting circuit building + path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha. + - Improve logging when a bad HS version is given. Fixes bug 40476; + bugfix on 0.4.6.1-alpha. + + o Minor bugfixes (compatibility): + - Fix compatibility with the most recent Libevent versions, which no + longer have an evdns_set_random_bytes() function. Because this + function has been a no-op since Libevent 2.0.4-alpha, it is safe + for us to just stop calling it. Fixes bug 40371; bugfix + on 0.2.1.7-alpha. + + o Minor bugfixes (onion service, TROVE-2021-008): + - Only log once any v2 access attempts in order to not pollute the + logs with warnings and avoid recording the times on disk when v2 + access was attempted. Important to note that the onion address was + _never_ logged. That is a Low security issue. Fixes bug 40474; + bugfix on 0.4.5.8. + + Changes in version 0.4.6.7 - 2021-08-16 This version fixes several bugs from earlier versions of Tor, including one that could lead to a denial-of-service attack. Everyone running an earlier

1 0

[community/master] Add backslashes to the /etc/login.conf snippet
by gus＠torproject.org 25 Oct '21

25 Oct '21

commit 6397c477fa080d74b4e747eed0e148f46830e80b Author: Douglas Silva <doug.hs(a)protonmail.ch> Date: Sun Oct 24 14:16:26 2021 -0300 Add backslashes to the /etc/login.conf snippet --- content/relay/setup/guard/openbsd/contents.lr | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/relay/setup/guard/openbsd/contents.lr b/content/relay/setup/guard/openbsd/contents.lr index 232a2fe..d7cc1ce 100644 --- a/content/relay/setup/guard/openbsd/contents.lr +++ b/content/relay/setup/guard/openbsd/contents.lr @@ -59,8 +59,8 @@ By default, OpenBSD maintains a rather low limit on the maximum number of open f Append the following section to `/etc/login.conf`: ``` -tor: - :openfiles-max=13500: +tor:\ + :openfiles-max=13500:\ :tc=daemon: ```

1 0