commit 8c88e876628e4ef1b7092c43cb80ad0be5d91448 Author: Nick Mathewson <nickm@torproject.org> Date: Tue May 17 11:49:15 2016 -0400 Lightly sort and edit 0.2.8.3-?? changelog entries --- ChangeLog | 114 ++++++++++++++++++++++++++++---------------------------------- 1 file changed, 51 insertions(+), 63 deletions(-) diff --git a/ChangeLog b/ChangeLog index 3fefe6e..3c5c1fa 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,55 +1,41 @@ Changes in version 0.2.8.3-?? - 2016-05-?? xxx blurb goes here xxx - o Major bugfixes (security, directory authorities): - - Fix a crash and out-of-bounds write during authority voting, when - the list of relays includes duplicate ed25519 identity keys. Fixes - bug 19032; bugfix on 0.2.8.2-alpha. + o Major bugfixes (security, client, DNS proxy): + - Stop a crash that could occur when a client running with DNSPort + received a query with multiple address types, and the first + address type was not supported. Found and fixed by Scott Dial. + Fixes bug 18710; bugfix on 0.2.5.4-alpha. - o Major bugfixes (compilation): + o Major bugfixes (security, compilation): - Correctly detect compiler flags on systems where _FORTIFY_SOURCE is predefined. Previously, our use of -D_FORTIFY_SOURCE would - cause a compiler warning, thereby making other checks fail. Fixes - one case of bug 18841; bugfix on 0.2.3.17-beta. Patch - from "trudokal". + cause a compiler warning, thereby making other checks fail, and + needlessly disabling compiler-hardening support. Fixes one case of + bug 18841; bugfix on 0.2.3.17-beta. Patch from "trudokal". - o Major bugfixes (crypto, portability): - - The SHA3 and SHAKE routines now produce the correct output on Big - Endian systems, unbreaking the unit tests. No code calls either - algorithm family yet, so this is primarily a build fix. Fixes bug - 18943; bugfix on 0.2.8.1-alpha. + o Major bugfixes (security, directory authorities): + - Fix a crash and out-of-bounds write during authority voting, when + the list of relays includes duplicate ed25519 identity keys. Fixes + bug 19032; bugfix on 0.2.8.2-alpha. o Major bugfixes (directory mirrors): - - Decide whether to advertise begindir support the same way we - decide whether to advertise our DirPort. These decisions being out - of sync led to surprising behavior like advertising begindir - support when our hibernation config options made us not advertise - a DirPort. Resolves bug 18616; bugfix on 0.2.8.1-alpha. Patch - by teor. - - o Major bugfixes (DNS proxy): - - Stop a crash that could occur when a client running with DNSPort - received a query with multiple address types, where the first - address type was not supported. Found and fixed by Scott Dial. - Fixes bug 18710; bugfix on 0.2.5.4-alpha. - - o Major bugfixes (IPv6 bridges): - - Fix directory address selection for IPv6 bridges. Fixes bug 18921; - bugfix on 0.2.8.1-alpha. Patch by "teor". + - Decide whether to advertise begindir support in the the same way + we decide whether to advertise our DirPort. Allowing these + decisions to become out-of-sync led to surprising behavior like + advertising begindir support when hibernation made us not + advertise a DirPort. Resolves bug 18616; bugfix on 0.2.8.1-alpha. + Patch by teor. + + o Major bugfixes (IPv6 bridges, client): + - Actually use IPv6 addresses when selecting directory addresses for + IPv6 bridges. Fixes bug 18921; bugfix on 0.2.8.1-alpha. Patch + by "teor". o Major bugfixes (testing): - Fix a bug that would block 'make test-network-all' on systems where IPv6 packets were lost. Fixes bug 19008; bugfix on tor-0.2.7.3-rc. - o Minor feature (logging): - - When rejecting a misformed INTRODUCE2 cell, only log at - PROTOCOL_WARN severity. Closes ticket 18761. - - o Minor features (build): - - Tor now builds again with the recent OpenSSL 1.1 development - branch (tested against 1.1.0-pre4 and 1.1.0-pre5-dev). Closes - ticket 18286. - o Minor features (clients): - Make clients, onion services, and bridge relays always use an encrypted begindir connection for directory requests. Resolves @@ -65,25 +51,18 @@ Changes in version 0.2.8.3-?? - 2016-05-?? 18812 on 0.2.8.1-alpha; patch by "teor". o Minor features (geoip): - - Update geoip and geoip6 to the April 5 2016 Maxmind GeoLite2 - Country database. - Update geoip and geoip6 to the May 4 2016 Maxmind GeoLite2 Country database. - o Minor features (logging): - - Stop blasting twelve lines per second from - periodic_event_dispatch() at loglevel debug. Resolves ticket - 18729; fix on 0.2.8.1-alpha. - - o Minor bugfix (bootstrap): - - Consistently use the consensus download schedule for authority - certificates. Fixes bug 18816; bugfix on 0.2.4.13-alpha. - o Minor bugfixes (assert, portability): - Fix an assertion failure in memarea.c on systems where "long" is shorter than the size of a pointer. Fixes bug 18716; bugfix on 0.2.1.1-alpha + o Minor bugfixes (bootstrap): + - Consistently use the consensus download schedule for authority + certificates. Fixes bug 18816; bugfix on 0.2.4.13-alpha. + o Minor bugfixes (build): - Remove a pair of redundant AM_CONDITIONAL declarations from configure.ac. Fixes one final case of bug 17744; bugfix @@ -97,6 +76,9 @@ Changes in version 0.2.8.3-?? - 2016-05-?? This changes simply renames them by removing "Testing" in front of them and they do not require TestingTorNetwork to be enabled anymore. Fixes bug 18481; bugfix on 0.2.8.1-alpha. + - Make directory node selection more reliable, mainly for IPv6-only + clients and clients with few reachable addresses. Fixes bug 18929; + bugfix on 0.2.8.1-alpha. Patch by "teor". o Minor bugfixes (controller, microdescriptors): - Make GETINFO dir/status-vote/current/consensus conform to the @@ -104,20 +86,23 @@ Changes in version 0.2.8.3-?? - 2016-05-?? consensus..." when not caching consensuses. Fixes bug 18920; bugfix on 0.2.2.6-alpha. - o Minor bugfixes (IPv6): - - Make directory node selection more reliable, mainly for IPv6-only - clients and clients with few reachable addresses. Fixes bug 18929; - bugfix on 0.2.8.1-alpha. Patch by "teor". + o Minor bugfixes (crypto, portability): + - The SHA3 and SHAKE routines now produce the correct output on Big + Endian systems, unbreaking the unit tests. No code calls either + algorithm family yet, so this is primarily a build fix. Fixes bug + 18943; bugfix on 0.2.8.1-alpha. + - Tor now builds again with the recent OpenSSL 1.1 development + branch (tested against 1.1.0-pre4 and 1.1.0-pre5-dev). Closes + ticket 18286. o Minor bugfixes (logging): - When we can't generate a signing key because OfflineMasterKey is set, do not imply that we should have been able to load it. Fixes bug 18133; bugfix on 0.2.7.2-alpha. - - o Minor bugfixes (memory leak): - - Fix a small memory leak that would occur when the - TestingEnableCellStatsEvent option was turned on. Fixes bug 18673; - bugfix on 0.2.5.2-alpha. + - Stop periodic_event_dispatch() from blasting twelve lines per + second at loglevel debug. Fixes bug 18729; fix on 0.2.8.1-alpha. + - When rejecting a misformed INTRODUCE2 cell, only log at + PROTOCOL_WARN severity. Fixes bug 18761; bugfix on 0.2.8.2-alpha. o Minor bugfixes (pluggable transports): - Avoid reporting a spurious error when we decide that we don't need @@ -132,15 +117,18 @@ Changes in version 0.2.8.3-?? - 2016-05-?? reachability check even when DisableNetwork is set. Noticed while fixing bug 18616; bugfix on 0.2.3.9-alpha. - o Minor bugfixes (small networks): - - Allow directories in small networks to bootstrap by skipping - DirPort checks when the consensus has no exits. Fixes bug 19003; - bugfix on 0.2.8.1-alpha. Patch by teor. - o Minor bugfixes (statistics): - We now include consensus downloads via IPv6 in our directory- request statistics. Fixes bug 18460; bugfix on 0.2.3.14-alpha. + o Minor bugfixes (testing): + - Allow directories in small networks to bootstrap by skipping + DirPort checks when the consensus has no exits. Fixes bug 19003; + bugfix on 0.2.8.1-alpha. Patch by teor. + - Fix a small memory leak that would occur when the + TestingEnableCellStatsEvent option was turned on. Fixes bug 18673; + bugfix on 0.2.5.2-alpha. + o Minor bugfixes (time handling): - When correcting a corrupt 'struct tm' value, fill in the tm_wday field. Otherwise, our unit tests crash on Windows. Fixes bug