commit c82aaaa48a436176c21ce67aaaa0b4852b36ee9f Author: Nick Mathewson <nickm@torproject.org> Date: Sun Oct 19 12:50:12 2014 -0400 Copy changes/* into the ChangeLog file for 0.2.5.9 --- ChangeLog | 28 ++++++++++++++++++++++++++++ changes/13295 | 5 ----- changes/bug13325 | 4 ---- changes/bug8093 | 3 --- changes/disable_sslv3 | 4 ---- 5 files changed, 28 insertions(+), 16 deletions(-) diff --git a/ChangeLog b/ChangeLog index c58f98e..dceb27f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,31 @@ +Changes in version 0.2.5.9 - 2014-10-2x + Tor 0.2.5.9, the first stable release in the 0.2.5 branch, XXXXX WRITEME + XXXXX DO NOT RELEASE WITHOUT FINISHING THIS PARAGRAPH. XXXXX + + Below are the changes since 0.2.5.8-rc; see the ReleaseNotes file for a + list of changes since the 0.2.4 branch. + + o Major security fixes: + - Disable support for SSLv3. All versions of OpenSSL in use with + Tor today support TLS 1.0 or later, so we can safely turn off + support for this old (and insecure) protocol. Fixes bug 13426. + + o Minor bugfixes: + - Disable sandbox name resolver cache when running tor-resolve: + tor-resolve doesn't use the sandbox code, and turning it on was + breaking attempts to do tor-resolve on a non-default server on + Linux. Fixes bug 13295; bugfix on 0.2.5.3-alpha. + + o Compilation fixes: + - Build and run correctly on systems like OpenBSD-current that + have patched OpenSSL to remove get_cipher_by_char and/or its + implementations. Fixes issue 13325. + + o Downgraded warnings: + - Downgrade the severity of the 'unexpected sendme cell from client' from + 'warn' to 'protocol warning'. Closes ticket 8093. + + Changes in version 0.2.5.8-rc - 2014-09-22 Tor 0.2.5.8-rc is the second release candidate for the Tor 0.2.5.x series. It fixes a bug that affects consistency and speed when diff --git a/changes/13295 b/changes/13295 deleted file mode 100644 index 4334325..0000000 --- a/changes/13295 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - Disable sandbox name resolver cache when running tor-resolve: - tor-resolve doesn't use the sandbox code, and turning it on was - breaking attempts to do tor-resolve on a non-default server on - Linux. Fixes bug 13295; bugfix on 0.2.5.3-alpha. diff --git a/changes/bug13325 b/changes/bug13325 deleted file mode 100644 index b1da4d0..0000000 --- a/changes/bug13325 +++ /dev/null @@ -1,4 +0,0 @@ - o Compilation fixes: - - Build and run correctly on systems like OpenBSD-current that - have patched OpenSSL to remove get_cipher_by_char and/or its - implementations. Fixes issue 13325. diff --git a/changes/bug8093 b/changes/bug8093 deleted file mode 100644 index f0fbc61..0000000 --- a/changes/bug8093 +++ /dev/null @@ -1,3 +0,0 @@ - o Downgraded warnings: - - Downgrade the severity of the 'unexpected sendme cell from client' from - 'warn' to 'protocol warning'. Closes ticket 8093. diff --git a/changes/disable_sslv3 b/changes/disable_sslv3 deleted file mode 100644 index bb4c2df..0000000 --- a/changes/disable_sslv3 +++ /dev/null @@ -1,4 +0,0 @@ - o Major security fixes: - - Disable support for SSLv3. All versions of OpenSSL in use with - Tor today support TLS 1.0 or later, so we can safely turn off - support for this old (and insecure) protocol. Fixes bug 13426.