commit 99f9816efa08ab83f90a307ea41844d693488fde Author: Nick Mathewson <nickm@torproject.org> Date: Mon Jul 9 10:54:10 2018 -0400 Build a changelog and releasenotes for 0.3.3.8 --- ChangeLog | 73 ++++++++++++++++++++++++++++++++++++++++++- ReleaseNotes | 75 +++++++++++++++++++++++++++++++++++++++++++-- changes/bug25512 | 5 --- changes/bug25686_diagnostic | 4 --- changes/bug25705 | 5 --- changes/bug26158 | 5 --- changes/bug26258_033 | 4 --- changes/bug26269 | 5 --- changes/bug26435 | 5 --- changes/bug26523 | 5 --- changes/bug26535.029 | 5 --- changes/bug26535.032 | 5 --- changes/feature26372_029 | 4 --- changes/geoip-2018-07-03 | 4 --- changes/ticket26467 | 3 -- 15 files changed, 145 insertions(+), 62 deletions(-) diff --git a/ChangeLog b/ChangeLog index 6fcf7aab4..c20e69f7d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,75 @@ +Changes in version 0.3.3.8 - 2018-07-09 + Tor 0.3.3.8 backports several changes from the 0.3.4.x series, including + fixes for a memory leak affecting directory authorities. + + o Major bugfixes (directory authority, backport from 0.3.4.3-alpha): + - Stop leaking memory on directory authorities when planning to + vote. This bug was crashing authorities by exhausting their + memory. Fixes bug 26435; bugfix on 0.3.3.6. + + o Major bugfixes (rust, testing, backport from 0.3.4.3-alpha): + - Make sure that failing tests in Rust will actually cause the build + to fail: previously, they were ignored. Fixes bug 26258; bugfix + on 0.3.3.4-alpha. + + o Minor features (compilation, backport from 0.3.4.4-rc): + - When building Tor, prefer to use Python 3 over Python 2, and more + recent (contemplated) versions over older ones. Closes + ticket 26372. + + o Minor features (geoip): + - Update geoip and geoip6 to the July 3 2018 Maxmind GeoLite2 + Country database. Closes ticket 26674. + + o Minor features (relay, diagnostic, backport from 0.3.4.3-alpha): + - Add several checks to detect whether Tor relays are uploading + their descriptors without specifying why they regenerated them. + Diagnostic for ticket 25686. + + o Minor bugfixes (circuit path selection, backport from 0.3.4.1-alpha): + - Don't count path selection failures as circuit build failures. + This change should eliminate cases where Tor blames its guard or + the network for situations like insufficient microdescriptors + and/or overly restrictive torrc settings. Fixes bug 25705; bugfix + on 0.3.3.1-alpha. + + o Minor bugfixes (compilation, backport from 0.3.4.4-rc): + - Fix a compilation warning on some versions of GCC when building + code that calls routerinfo_get_my_routerinfo() twice, assuming + that the second call will succeed if the first one did. Fixes bug + 26269; bugfix on 0.2.8.2-alpha. + + o Minor bugfixes (control port, backport from 0.3.4.4-rc): + - Handle the HSADDRESS= argument to the HSPOST command properly. + (Previously, this argument was misparsed and thus ignored.) Fixes + bug 26523; bugfix on 0.3.3.1-alpha. Patch by "akwizgran". + + o Minor bugfixes (memory, correctness, backport from 0.3.4.4-rc): + - Fix a number of small memory leaks identified by coverity. Fixes + bug 26467; bugfix on numerous Tor versions. + + o Minor bugfixes (relay, backport from 0.3.4.3-alpha): + - Relays now correctly block attempts to re-extend to the previous + relay by Ed25519 identity. Previously they would warn in this + case, but not actually reject the attempt. Fixes bug 26158; bugfix + on 0.3.0.1-alpha. + + o Minor bugfixes (restart-in-process, backport from 0.3.4.1-alpha): + - When shutting down, Tor now clears all the flags in the control.c + module. This should prevent a bug where authentication cookies are + not generated on restart. Fixes bug 25512; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (testing, compatibility, backport from 0.3.4.4-rc): + - When running the hs_ntor_ref.py test, make sure only to pass + strings (rather than "bytes" objects) to the Python subprocess + module. Python 3 on Windows seems to require this. Fixes bug + 26535; bugfix on 0.3.1.1-alpha. + - When running the ntor_ref.py test, make sure only to pass strings + (rather than "bytes" objects) to the Python subprocess module. + Python 3 on Windows seems to require this. Fixes bug 26535; bugfix + on 0.2.5.5-alpha. + + Changes in version 0.3.3.7 - 2018-06-12 Tor 0.3.3.7 backports several changes from the 0.3.4.x series, including fixes for bugs affecting compatibility and stability. @@ -27960,4 +28032,3 @@ Changes in version 0.0.2pre13 - 2003-10-19 - If --DebugLogFile is specified, log to it at -l debug - If --LogFile is specified, use it instead of commandline - If --RunAsDaemon is set, tor forks and backgrounds on startup - diff --git a/ReleaseNotes b/ReleaseNotes index ad2b7180f..b021cf8a2 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,78 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.3.3.8 - 2018-07-09 + Tor 0.3.3.8 backports several changes from the 0.3.4.x series, including + fixes for a memory leak affecting directory authorities. + + o Major bugfixes (directory authority, backport from 0.3.4.3-alpha): + - Stop leaking memory on directory authorities when planning to + vote. This bug was crashing authorities by exhausting their + memory. Fixes bug 26435; bugfix on 0.3.3.6. + + o Major bugfixes (rust, testing, backport from 0.3.4.3-alpha): + - Make sure that failing tests in Rust will actually cause the build + to fail: previously, they were ignored. Fixes bug 26258; bugfix + on 0.3.3.4-alpha. + + o Minor features (compilation, backport from 0.3.4.4-rc): + - When building Tor, prefer to use Python 3 over Python 2, and more + recent (contemplated) versions over older ones. Closes + ticket 26372. + + o Minor features (geoip): + - Update geoip and geoip6 to the July 3 2018 Maxmind GeoLite2 + Country database. Closes ticket 26674. + + o Minor features (relay, diagnostic, backport from 0.3.4.3-alpha): + - Add several checks to detect whether Tor relays are uploading + their descriptors without specifying why they regenerated them. + Diagnostic for ticket 25686. + + o Minor bugfixes (circuit path selection, backport from 0.3.4.1-alpha): + - Don't count path selection failures as circuit build failures. + This change should eliminate cases where Tor blames its guard or + the network for situations like insufficient microdescriptors + and/or overly restrictive torrc settings. Fixes bug 25705; bugfix + on 0.3.3.1-alpha. + + o Minor bugfixes (compilation, backport from 0.3.4.4-rc): + - Fix a compilation warning on some versions of GCC when building + code that calls routerinfo_get_my_routerinfo() twice, assuming + that the second call will succeed if the first one did. Fixes bug + 26269; bugfix on 0.2.8.2-alpha. + + o Minor bugfixes (control port, backport from 0.3.4.4-rc): + - Handle the HSADDRESS= argument to the HSPOST command properly. + (Previously, this argument was misparsed and thus ignored.) Fixes + bug 26523; bugfix on 0.3.3.1-alpha. Patch by "akwizgran". + + o Minor bugfixes (memory, correctness, backport from 0.3.4.4-rc): + - Fix a number of small memory leaks identified by coverity. Fixes + bug 26467; bugfix on numerous Tor versions. + + o Minor bugfixes (relay, backport from 0.3.4.3-alpha): + - Relays now correctly block attempts to re-extend to the previous + relay by Ed25519 identity. Previously they would warn in this + case, but not actually reject the attempt. Fixes bug 26158; bugfix + on 0.3.0.1-alpha. + + o Minor bugfixes (restart-in-process, backport from 0.3.4.1-alpha): + - When shutting down, Tor now clears all the flags in the control.c + module. This should prevent a bug where authentication cookies are + not generated on restart. Fixes bug 25512; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (testing, compatibility, backport from 0.3.4.4-rc): + - When running the hs_ntor_ref.py test, make sure only to pass + strings (rather than "bytes" objects) to the Python subprocess + module. Python 3 on Windows seems to require this. Fixes bug + 26535; bugfix on 0.3.1.1-alpha. + - When running the ntor_ref.py test, make sure only to pass strings + (rather than "bytes" objects) to the Python subprocess module. + Python 3 on Windows seems to require this. Fixes bug 26535; bugfix + on 0.2.5.5-alpha. + + Changes in version 0.3.3.7 - 2018-06-12 Tor 0.3.3.7 backports several changes from the 0.3.4.x series, including fixes for bugs affecting compatibility and stability. @@ -12405,7 +12477,7 @@ Changes in version 0.2.1.31 - 2011-10-26 circuit EXTEND request. Now relays can protect clients from the CVE-2011-2768 issue even if the clients haven't upgraded yet. - Bridges now refuse CREATE or CREATE_FAST cells on OR connections - that they initiated. Relays could distinguish incoming bridge + that they initiated. Relays could distinguish incoming bridge connections from client connections, creating another avenue for enumerating bridges. Fixes CVE-2011-2769. Bugfix on 0.2.0.3-alpha. Found by "frosty_un". @@ -19024,4 +19096,3 @@ Changes in version 0.0.2pre13 - 2003-10-19 - If --DebugLogFile is specified, log to it at -l debug - If --LogFile is specified, use it instead of commandline - If --RunAsDaemon is set, tor forks and backgrounds on startup - diff --git a/changes/bug25512 b/changes/bug25512 deleted file mode 100644 index 4b6491867..000000000 --- a/changes/bug25512 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (restart-in-process): - - When shutting down, Tor now clears all the flags in the control.c - module. This should prevent a bug where authentication cookies - are not generated on restart. Fixes bug 25512; bugfix on 0.3.3.1-alpha. - diff --git a/changes/bug25686_diagnostic b/changes/bug25686_diagnostic deleted file mode 100644 index 96323145d..000000000 --- a/changes/bug25686_diagnostic +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (relay, diagnostic): - - Add several checks to detect whether Tor relays are uploading their - descriptors without specifying why they regenerated. Diagnostic for - ticket 25686. diff --git a/changes/bug25705 b/changes/bug25705 deleted file mode 100644 index 360d96d4c..000000000 --- a/changes/bug25705 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (circuit path selection): - - Don't count path selection failures as circuit build failures. This - should eliminate cases where Tor blames its guard or the network - for situations like insufficient microdescriptors and/or overly - restrictive torrc settings. Fixes bug 25705; bugfix on 0.3.3.1-alpha. diff --git a/changes/bug26158 b/changes/bug26158 deleted file mode 100644 index 0d74cf116..000000000 --- a/changes/bug26158 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (relay): - - Relays now correctly block attempts to re-extend to the previous - relay by Ed25519 identity. Previously they would warn in this case, - but not actually reject the attempt. Fixes bug 26158; bugfix on - 0.3.0.1-alpha. diff --git a/changes/bug26258_033 b/changes/bug26258_033 deleted file mode 100644 index ceca38333..000000000 --- a/changes/bug26258_033 +++ /dev/null @@ -1,4 +0,0 @@ - o Major bugfixes (rust, testing): - - Fix a bug where a failure in the rust unit tests would not actually - cause the build to fail. Fixes bug 26258; bugfix on 0.3.3.4-alpha. - diff --git a/changes/bug26269 b/changes/bug26269 deleted file mode 100644 index 73dcdbf5c..000000000 --- a/changes/bug26269 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (compilation): - - Fix a compilation warning on some versions of GCC when - building code that calls routerinfo_get_my_routerinfo() twice, - assuming that the second call will succeed if the first one did. - Fixes bug 26269; bugfix on 0.2.8.2-alpha. diff --git a/changes/bug26435 b/changes/bug26435 deleted file mode 100644 index f66c503dd..000000000 --- a/changes/bug26435 +++ /dev/null @@ -1,5 +0,0 @@ - o Major bugfixes (directory authority): - - Fix a memory leak where directory authorities would leak a chunk - of memory for every router descriptor every time they considered - voting. This bug was taking down directory authorities due to - out-of-memory issues. Fixes bug 26435; bugfix on 0.3.3.6. diff --git a/changes/bug26523 b/changes/bug26523 deleted file mode 100644 index a739d240e..000000000 --- a/changes/bug26523 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (hidden service, control port): - - The HSPOST command wasn't parsing properly the HSADDRESS= parameter and - thus not using it. It now handles it correctly. Fixes bug 26523; bugfix on - 0.3.3.1-alpha. Patch by "akwizgran". - diff --git a/changes/bug26535.029 b/changes/bug26535.029 deleted file mode 100644 index 111b539f1..000000000 --- a/changes/bug26535.029 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (testing, compatibility): - - When running the ntor_ref.py test, make sure only to pass strings - (rather than "bytes" objects) to the Python subprocess module. - Python 3 on Windows seems to require this. Fixes bug 26535; bugfix on - 0.2.5.5-alpha. diff --git a/changes/bug26535.032 b/changes/bug26535.032 deleted file mode 100644 index 395d08d81..000000000 --- a/changes/bug26535.032 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (testing, compatibility): - - When running the hs_ntor_ref.py test, make sure only to pass strings - (rather than "bytes" objects) to the Python subprocess module. - Python 3 on Windows seems to require this. Fixes bug 26535; bugfix on - 0.3.1.1-alpha. diff --git a/changes/feature26372_029 b/changes/feature26372_029 deleted file mode 100644 index 150ac3055..000000000 --- a/changes/feature26372_029 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (compilation): - - - When building Tor, prefer to use Python 3 over Python 2, and more - recent (contemplated) versions over older ones. Closes ticket 26372. diff --git a/changes/geoip-2018-07-03 b/changes/geoip-2018-07-03 deleted file mode 100644 index e921d63c9..000000000 --- a/changes/geoip-2018-07-03 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (geoip): - - Update geoip and geoip6 to the July 3 2018 Maxmind GeoLite2 - Country database. Closes ticket 26674. - diff --git a/changes/ticket26467 b/changes/ticket26467 deleted file mode 100644 index 45883786c..000000000 --- a/changes/ticket26467 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (memory, correctness): - - Fix a number of small memory leaks identified by coverity. Fixes - bug 26467; bugfix on numerous Tor versions.