- tor-packagers - lists.torproject.org

Tor 0.3.5.6-rc is signed and uploaded
by Nick Mathewson 18 Dec '18

18 Dec '18

Hi, all! I have just signed and taged Tor 0.3.5.6-rc, and uploaded it to the usual place at https://dist.torproject.org/ . Please be sure to check the signature! You can find the changelog at https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.5.6-rc&id=a0… I'll be posting official announcements after the website has updated. best wishes, -- Nick

1 0

Tor 0.3.5.5-alpha is available for download
by Nick Mathewson 16 Nov '18

16 Nov '18

Hi, all! You can get the latest Tor alpha release at https://dist.torproject.org/. Official announcement to follow once the website has updated. Changelog at https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.5.5-alpha We're getting closer and closer to having 0.3.5 be stable, so please do what you can to help users try this one out. yrs, -- Nick

1 0

Tor 0.3.5.4-alpha available for download!
by Nick Mathewson 08 Nov '18

08 Nov '18

Hi! Tor 0.3.5.4-alpha is tagged and signed. You can find it, as usual, on https://dist.torproject.org/. Please remember to check the signature. You can find the changelog at https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.5.4-alpha I'll be sending an official announcement after the download page has updated. cheers, -- Nick

1 0

New stable Tor release: 0.3.4.9
by Nick Mathewson 02 Nov '18

02 Nov '18

Hi, all! There's a new stable release version (0.3.4.9) available at https://dist.torproject.org. Please remember to check the signature. You can find the changelog at https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.4.9 I'll send official announcements once the website has updated. yrs, -- Nick

1 0

New alpha: Tor 0.3.5.3-alpha
by Nick Mathewson 17 Oct '18

17 Oct '18

Hi! There's a new alpha at https://dist.torproject.org/ . Here's the changelog: Changes in version 0.3.5.3-alpha - 2018-10-17 Tor 0.3.5.3-alpha fixes several bugs, mostly from previous 0.3.5.x versions. One important fix for relays addresses a problem with rate- limiting code from back in 0.3.4.x: If the fix works out, we'll be backporting it soon. This release is still an alpha, but we hope it's getting closer and closer to stability. o Major features (onion services): - Version 3 onion services can now use the per-service HiddenServiceExportCircuitID option to differentiate client circuits. It communicates with the service by using the HAProxy protocol to assign virtual IP addresses to inbound client circuits. Closes ticket 4700. Patch by Mahrud Sayrafi. o Major bugfixes (compilation): - Fix compilation on ARM (and other less-used CPUs) when compiling with OpenSSL before 1.1. Fixes bug 27781; bugfix on 0.3.4.1-alpha. o Major bugfixes (initialization, crash): - Fix an assertion crash that would stop Tor from starting up if it tried to activate a periodic event too early. Fixes bug 27861; bugfix on 0.3.5.1-alpha. o Major bugfixes (mainloop, bootstrap): - Make sure Tor bootstraps and works properly if only the ControlPort is set. Prior to this fix, Tor would only bootstrap when a client port was set (Socks, Trans, NATD, DNS or HTTPTunnel port). Fixes bug 27849; bugfix on 0.3.4.1-alpha. o Major bugfixes (relay): - When our write bandwidth limit is exhausted, stop writing on the connection. Previously, we had a typo in the code that would make us stop reading instead, leading to relay connections being stuck indefinitely and consuming kernel RAM. Fixes bug 28089; bugfix on 0.3.4.1-alpha. o Minor features (continuous integration): - Use the Travis Homebrew addon to install packages on macOS during Travis CI. The package list is the same, but the Homebrew addon does not do a `brew update` by default. Implements ticket 27738. - Report what program produced the mysterious core file that we occasionally see on Travis CI during make distcheck. Closes ticket 28024. o Minor features (geoip): - Update geoip and geoip6 to the October 9 2018 Maxmind GeoLite2 Country database. Closes ticket 27991. o Minor bugfixes (code safety): - Rewrite our assertion macros so that they no longer suppress the compiler's -Wparentheses warnings. Fixes bug 27709; bugfix on 0.0.6. o Minor bugfixes (compilation): - Compile the ed25519-donna code with a correct declaration of crypto_strongest_rand(). Previously, we built it with one type, but linked it against another in the unit tests, which caused compilation failures with LTO enabled. This could have caused other undefined behavior in the tests. Fixes bug 27728; bugfix on 0.3.5.1-alpha. o Minor bugfixes (compilation, netbsd): - Add a missing include back into procmon.c. Fixes bug 27990; bugfix on 0.3.5.1-alpha. o Minor bugfixes (continuous integration, appveyor): - Install only the necessary mingw packages during our appveyor builds. This change makes the build a little faster, and prevents a conflict with a preinstalled mingw openssl that appveyor now ships. Fixes bugs 27765 and 27943; bugfix on 0.3.4.2-alpha. o Minor bugfixes (directory permissions): - When a user requests a group-readable DataDirectory, give it to them. Previously, when the DataDirectory and the CacheDirectory were the same, the default setting (0) for CacheDirectoryGroupReadable would override the setting for DataDirectoryGroupReadable. Fixes bug 26913; bugfix on 0.3.3.1-alpha. o Minor bugfixes (memory leaks): - Fix a small memory leak when calling Tor with --dump-config. Fixes bug 27893; bugfix on 0.3.2.1-alpha. o Minor bugfixes (networking): - In retry_listeners_ports(), make sure that we're removing a member of old_conns smartlist at most once. Fixes bug 27808; bugfix on 0.3.5.1-alpha. - Refrain from attempting socket rebinding when old and new listeners are in different address families. Fixes bug 27928; bugfix on 0.3.5.1-alpha. o Minor bugfixes (onion service v3): - Stop dumping a stack trace when trying to connect to an intro point without having a descriptor for it. Fixes bug 27774; bugfix on 0.3.2.1-alpha. - Don't warn so loudly when Tor is unable to decode an onion descriptor. This can now happen as a normal use case if a client gets a descriptor with client authorization but the client is not authorized. Fixes bug 27550; bugfix on 0.3.5.1-alpha. - When selecting a v3 rendezvous point, don't only look at the protover, but also check whether the curve25519 onion key is present. This way we avoid picking a relay that supports the v3 rendezvous but for which we don't have the microdescriptor. Fixes bug 27797; bugfix on 0.3.2.1-alpha. o Minor bugfixes (protover): - Reject protocol names containing bytes other than alphanumeric characters and hyphens ([A-Za-z0-9-]). Fixes bug 27316; bugfix on 0.2.9.4-alpha. o Minor bugfixes (testing): - Make the hs_service tests use the same time source when creating the introduction point and when testing it. Now tests work better on very slow systems like ARM or Travis. Fixes bug 27810; bugfix on 0.3.2.1-alpha. - In test_rebind.py, check if the Python version is in the supported range. Fixes bug 27675; bugfix on 0.3.5.1-alpha. o Code simplification and refactoring: - Divide more large Tor source files -- especially ones that span multiple areas of functionality -- into smaller parts, including onion.c and main.c. Closes ticket 26747. - Divide the "routerparse.c" module into separate modules for each group of parsed objects. Closes ticket 27924. - Move protover_rust.c to the same place protover.c was moved to. Closes ticket 27814. - Split directory.c into separate pieces for client, server, and common functionality. Closes ticket 26744. - Split the non-statistics-related parts from the rephist.c and geoip.c modules. Closes ticket 27892. - Split the router.c file into relay-only and shared components, to help with future modularization. Closes ticket 27864. o Documentation: - In the tor-resolve(1) manpage, fix the reference to socks- extensions.txt by adding a web URL. Resolves ticket 27853. - Mention that we require Python to be 2.7 or newer for some integration tests that we ship with Tor. Resolves ticket 27677.

1 0

Fwd: Stem Release 1.7
by Damian Johnson 10 Oct '18

10 Oct '18

Hi lovely packaging community. Just a quick head's up that there is a new release of Stem (version 1.7). If you spot any issues please let me know! ---------- Forwarded message --------- From: Damian Johnson <atagar(a)torproject.org> Date: Sun, Oct 7, 2018 at 4:23 PM Subject: Stem Release 1.7 To: tor-project <tor-project(a)lists.torproject.org> Hi all, I'm delighted to announce the release of Stem 1.7! https://blog.atagar.com/stem-release-1-7/ This is a full year’s accumulation of fixes and improvements. For a list of everything that's changed please see... https://stem.torproject.org/change_log.html#version-1-7 Cheers! -Damian

3 2

New Tor release: 0.3.5.2-alpha
by Nick Mathewson 21 Sep '18

21 Sep '18

Hello! You can get the latest tor alpha release from https://dist.torproject.org/ This one fixes an important bug affecting busy servers, where they would falsely think that they had run out of fds. Probably anybody who is running a server of any kind on 0.3.5.1-alpha should upgrade. Changelog at https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.3.5.2-alpha peace, -- Nick

1 0

Tor 0.3.5.1-alpha is released
by Nick Mathewson 18 Sep '18

18 Sep '18

Hi, packagers! There's an alpha release for our new stable series. You can see the changelog at https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.5.1-alpha And you can find the source code, as usual, at https://dist.torproject.org/ When you go to check the signature, gpg might tell you that my subkeys are expired. If that happens, you'll need to refresh the key from a public keyserver, or fetch it from https://people.torproject.org/~nickm/public_key.asc . The key and subkeys haven't changed -- only the expiration date has. There are some configuration changes in this version of Tor. Make sure that you at least skim the "major features" section of the changelog for more information. Our plan is for Tor 0.3.5.x to be another long-term-supported release, with support until 2022. For more information on our support policies and calendar, see https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… best wishes, and thanks for helping bring Tor to the world, -- Nick

1 0

Vanguards v0.2.2 is available for packaging
by Mike Perry 12 Sep '18

12 Sep '18

Vanguards v0.2.2 is tagged on github at https://github.com/mikeperry-tor/vanguards. The tag is signed with the gpg key that signed this mail, and all of my other mails. Version 0.2.2 fixes an exception crash bug found by traumschule (https://github.com/mikeperry-tor/vanguards/issues/29) Here is the complete changelog: - Fix exception when a connection to a guard is closed with more than one live circuit. #29 - Catch control+c and exit cleanly. #30. - Use Tor's network liveness events to double-check connectivity. - Print out relevant versions at startup. Again, the preferred interpreter for vanguards is pypy, but you must use either stem 1.5.4 (or below), or stem 1.6.0 with this patch: https://gitweb.torproject.org/stem.git/commit/?id=c52db04 The addon does not require this patch when run under python2 or python3 with stem 1.6.0 (but pypy will be much faster for high traffic onion services). The addon also requires Tor 0.3.3.x or above, and 0.3.4.x is preferred. Please set dependencies and repository placement accordingly. If you previously had issues with the tests, please see: https://github.com/mikeperry-tor/vanguards/blob/master/README_TESTS.md -- Mike Perry

2 2

New releases tagged and uploaded (but see notice!)
by Nick Mathewson 10 Sep '18

10 Sep '18

Hi, all! At long last, Tor 0.3.4 is stable! The new release, 0.3.4.8, has been tagged and signed and uploaded to https://dist.torproject.org/ So have a set of patch releases for the older stable release series: 0.2.9.17, 0.3.2.12, and 0.3.3.10. No earth-shattering bugs there, but worth upgrading for. Changelogs: https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.2.9.17 https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.2.12 https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.3.10 https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.4.8 There's a catch, though: the versioning directory authorities have not yet recommended these versions. When you go to run one of them, you'll get a warning message: This tends to bother users, so I'd suggest not uploading your packages until the versions are recommended and the official announcement is out. One more thing: Tor 0.3.2 is reaching end-of-life. After October 9, it won't get any more patches. If you like tracking the latest-and-greatest stable Tor releases, you should be on 0.3.3 already, and upgrading to 0.3.4 soon. If you like a nice stable long-term release series, you should stick with 0.2.9 for a while longer. For our release plans, see https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… . best wishes, -- Nick

1 0