commit a64f3ab3ee5c433cc1f046a7e26df7a49e308e4c Author: Roger Dingledine arma@torproject.org Date: Mon Sep 22 14:19:34 2014 -0400

put an ordering on 0.2.4.24 vs 0.2.5.8-rc --- ChangeLog | 27 +++++++++++++++++++++++++++ ReleaseNotes | 27 +++++++++++++++++++++++++++ 2 files changed, 54 insertions(+)

diff --git a/ChangeLog b/ChangeLog index 995bf0f..c58f98e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -22,6 +22,33 @@ Changes in version 0.2.5.8-rc - 2014-09-22 - Change IP address for gabelmoo (v3 directory authority).

+Changes in version 0.2.4.24 - 2014-09-22 + Tor 0.2.4.24 fixes a bug that affects consistency and speed when + connecting to hidden services, and it updates the location of one of + the directory authorities. + + o Major bugfixes: + - Clients now send the correct address for their chosen rendezvous + point when trying to access a hidden service. They used to send + the wrong address, which would still work some of the time because + they also sent the identity digest of the rendezvous point, and if + the hidden service happened to try connecting to the rendezvous + point from a relay that already had a connection open to it, + the relay would reuse that connection. Now connections to hidden + services should be more robust and faster. Also, this bug meant + that clients were leaking to the hidden service whether they were + on a little-endian (common) or big-endian (rare) system, which for + some users might have reduced their anonymity. Fixes bug 13151; + bugfix on 0.2.1.5-alpha. + + o Directory authority changes: + - Change IP address for gabelmoo (v3 directory authority). + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2014 Maxmind GeoLite2 + Country database. + + Changes in version 0.2.5.7-rc - 2014-09-11 Tor 0.2.5.7-rc fixes several regressions from earlier in the 0.2.5.x release series, and some long-standing bugs related to ORPort reachability diff --git a/ReleaseNotes b/ReleaseNotes index 12705ac..1cb877c 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -959,6 +959,33 @@ Changes in version 0.2.5.? - 2014-10-?? 1024-bit is uncomfortably small these days). Addresses ticket 10324.

+Changes in version 0.2.4.24 - 2014-09-22 + Tor 0.2.4.24 fixes a bug that affects consistency and speed when + connecting to hidden services, and it updates the location of one of + the directory authorities. + + o Major bugfixes: + - Clients now send the correct address for their chosen rendezvous + point when trying to access a hidden service. They used to send + the wrong address, which would still work some of the time because + they also sent the identity digest of the rendezvous point, and if + the hidden service happened to try connecting to the rendezvous + point from a relay that already had a connection open to it, + the relay would reuse that connection. Now connections to hidden + services should be more robust and faster. Also, this bug meant + that clients were leaking to the hidden service whether they were + on a little-endian (common) or big-endian (rare) system, which for + some users might have reduced their anonymity. Fixes bug 13151; + bugfix on 0.2.1.5-alpha. + + o Directory authority changes: + - Change IP address for gabelmoo (v3 directory authority). + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2014 Maxmind GeoLite2 + Country database. + + Changes in version 0.2.4.23 - 2014-07-28 Tor 0.2.4.23 brings us a big step closer to slowing down the risk from guard rotation, and also backports several important fixes from the