[tor-commits] [tor/master] Start on a changelog for 0.3.1.3-alpha
nickm at torproject.org
nickm at torproject.org
Wed Jun 7 13:38:47 UTC 2017
commit 5955b63a9a4182f8909a2a31bd3818b574fd0895
Author: Nick Mathewson <nickm at torproject.org>
Date: Wed Jun 7 09:36:12 2017 -0400
Start on a changelog for 0.3.1.3-alpha
---
ChangeLog | 78 ++++++++++++++++++++++++++++++++++++++++++++-
changes/bug22413 | 4 ---
changes/bug22417 | 3 --
changes/bug22424 | 5 ---
changes/bug22446 | 4 ---
changes/bug22460_case1 | 16 ----------
changes/bug22460_case2 | 8 -----
changes/bug22466_diagnostic | 4 ---
changes/bug22466_regenerate | 8 -----
changes/bug22490 | 3 --
changes/bug6298 | 4 ---
changes/torify-manpage | 3 --
12 files changed, 77 insertions(+), 63 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index 60904d3..fc0e833 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,82 @@
-Changes in version 0.3.1.3-alpha - 2017-06-??
+Changes in version 0.3.1.3-alpha - 2017-06-08
+ Tor 0.3.1.3-alpha fixes a pair of bugs that would allow an attacker to
+ remotely crash a hidden service with an assertion failure. Anyone
+ running a hidden service should upgrade to this version, or to some
+ other version with fixes for TROVE-2017-004 and TROVE-2017-005.
+
+ Tor 0.3.1.3-alpha also includes fixes for several key management bugs
+ that sometimes made relays unreliable, as well as several other
+ bugfixes described below.
+
+ o Major bugfixes (relay, link handshake):
+ - When performing the v3 link handshake on a TLS connection, report
+ that we have the x509 certificate that we actually used on that
+ connection, even if we have changed certificates since that
+ connection was first opened. Previously, we would claim to have
+ used our most recent x509 link certificate, which would sometimes
+ make the link handshake fail. Fixes one case of bug 22460; bugfix
+ on 0.2.3.6-alpha.
+
+ o Major bugfixes (relays, key management):
+ - Regenerate link and authentication certificates whenever the key
+ that signs them changes; also, regenerate link certificates
+ whenever the signed key changes. Previously, these processes were
+ only weakly coupled, and we relays could (for minutes to hours)
+ wind up with an inconsistent set of keys and certificates, which
+ other relays would not accept. Fixes two cases of bug 22460;
+ bugfix on 0.3.0.1-alpha.
+ - When sending an Ed25519 signing->link certificate in a CERTS cell,
+ send the certificate that matches the x509 certificate that we
+ used on the TLS connection. Previously, there was a race condition
+ if the TLS context rotated after we began the TLS handshake but
+ before we sent the CERTS cell. Fixes a case of bug 22460; bugfix
+ on 0.3.0.1-alpha.
+
+ o Major bugfixes (torrc, crash):
+ - Fix a crash bug when using %include in torrc. Fixes bug 22417;
+ bugfix on 0.3.1.1-alpha. Patch by Daniel Pinto.
+
+ o Minor features (code style):
+ - Add "Falls through" comments to our codebase, in order to silence
+ GCC 7's -Wimplicit-fallthrough warnings. Patch from Andreas
+ Stieger. Closes ticket 22446.
+ o Minor features (diagnostic):
+ - Add logging messages to try to diagnose a rare bug that seems to
+ generate RSA->Ed25519 cross-certificates dated in the 1970s. We
+ think this is happening because of incorrect system clocks, but
+ we'd like to know for certain. Diagnostic for bug 22466.
+
+ o Minor bugfixes (correctness):
+ - Avoid undefined behavior when parsing IPv6 entries from the geoip6
+ file. Fixes bug 22490; bugfix on 0.2.4.6-alpha.
+
+ o Minor bugfixes (directory protocol):
+ - Check for libzstd >= 1.1, because older versions lack the
+ necessary streaming API. Fixes bug 22413; bugfix on 0.3.1.1-alpha.
+
+ o Minor bugfixes (link handshake):
+ - Lower the lifetime of the RSA->Ed25519 cross-certificate to six
+ months, and regenerate it when it is within one month of expiring.
+ Previously, we had generated this certificate at startup with a
+ ten-year lifetime, but that could lead to weird behavior when Tor
+ was started with a grossly inaccurate clock. Mitigates bug 22466;
+ mitigation on 0.3.0.1-alpha.
+
+ o Minor bugfixes (storage directories):
+ - Always check for underflows in the cached storage directory usage.
+ If the usage does underflow, re-calculate it. Also, avoid a
+ separate underflow when the usage is not known. Fixes bug 22424;
+ bugfix on 0.3.1.1-alpha.
+ o Minor bugfixes (unit tests):
+ - The unit tests now pass on systems where localhost is misconfigured
+ to some IPv4 address other than 127.0.0.1. Fixes bug 6298; bugfix
+ on 0.0.9pre2.
+
+ o Documentation:
+ - Clarify the manpage for the (deprecated) torify script. Closes
+ ticket 6892.
Changes in version 0.3.1.2-alpha - 2017-05-26
diff --git a/changes/bug22413 b/changes/bug22413
deleted file mode 100644
index 5b522f1..0000000
--- a/changes/bug22413
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (directory protocol):
- - Check for libzstd >= 1.1 because older versions lack the
- necessary streaming API. Fixes bug 22413; bugfix on
- 0.3.1.1-alpha.
diff --git a/changes/bug22417 b/changes/bug22417
deleted file mode 100644
index 88c601a..0000000
--- a/changes/bug22417
+++ /dev/null
@@ -1,3 +0,0 @@
- o Major bugfixes (torrc, crash):
- - Fix a crash bug when using %include in torrc. Fixes bug 22417;
- bugfix on 0.3.1.1-alpha. Patch by Daniel Pinto.
diff --git a/changes/bug22424 b/changes/bug22424
deleted file mode 100644
index de4cff7..0000000
--- a/changes/bug22424
+++ /dev/null
@@ -1,5 +0,0 @@
- o Minor bugfixes (storage directories):
- - Always check for underflows in the cached storage directory usage amount.
- If the usage does underflow, re-calculate the usage. Also, avoid a
- separate underflow when the usage is not known.
- Fixes bug 22424 in 0.3.1.1-alpha.
diff --git a/changes/bug22446 b/changes/bug22446
deleted file mode 100644
index 5932a2e..0000000
--- a/changes/bug22446
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (code style):
- - Add "Falls through" comments to our codebase in order to silence
- GCC 7's -Wimplicit-fallthrough warnings. Patch from Andreas Stieger.
- Closes ticket 22446.
diff --git a/changes/bug22460_case1 b/changes/bug22460_case1
deleted file mode 100644
index cfe78ad..0000000
--- a/changes/bug22460_case1
+++ /dev/null
@@ -1,16 +0,0 @@
- o Major bugfixes (relays, key management):
- - Regenerate link and authentication certificates whenever the key that
- signs them changes; also, regenerate link certificates whenever the
- signed key changes. Previously, these processes were only weakly
- coupled, and we relays could (for minutes to hours) wind up with an
- inconsistent set of keys and certificates, which other relays
- would not accept. Fixes two cases of bug 22460; bugfix on
- 0.3.0.1-alpha.
- - When sending an Ed25519 signing->link certificate in a CERTS cell,
- send the certificate that matches the x509 certificate that we used
- on the TLS connection. Previously, there was a race condition if
- the TLS context rotated after we began the TLS handshake but
- before we sent the CERTS cell. Fixes a case of bug 22460; bugfix
- on 0.3.0.1-alpha.
-
-
diff --git a/changes/bug22460_case2 b/changes/bug22460_case2
deleted file mode 100644
index 0a11759..0000000
--- a/changes/bug22460_case2
+++ /dev/null
@@ -1,8 +0,0 @@
- o Major bugfixes (relay, link handshake):
-
- - When performing the v3 link handshake on a TLS connection, report that
- we have the x509 certificate that we actually used on that connection,
- even if we have changed certificates since that connection was first
- opened. Previously, we would claim to have used our most recent x509
- link certificate, which would sometimes make the link handshake fail.
- Fixes one case of bug 22460; bugfix on 0.2.3.6-alpha.
diff --git a/changes/bug22466_diagnostic b/changes/bug22466_diagnostic
deleted file mode 100644
index 0286c65..0000000
--- a/changes/bug22466_diagnostic
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor features (diagnostic):
- - Add logging messages to try to diagnose a rare bug that seems
- to generate RSA->Ed25519 cross-certificates dated in the 1970s.
- Diagnostic for bug 22466.
diff --git a/changes/bug22466_regenerate b/changes/bug22466_regenerate
deleted file mode 100644
index 8dbda89..0000000
--- a/changes/bug22466_regenerate
+++ /dev/null
@@ -1,8 +0,0 @@
- o Minor bugfixes (link handshake):
- - Lower the lifetime of the RSA->Ed25519 cross-certificate to
- six months, and regenerate it when it is within one month of expiring.
- Previously, we had generated this certificate at startup with
- a ten-year lifetime, but that could lead to weird behavior when
- Tor was started with a grossly inaccurate clock. Mitigates
- bug 22466; mitigation on 0.3.0.1-alpha.
-
diff --git a/changes/bug22490 b/changes/bug22490
deleted file mode 100644
index 244dd50..0000000
--- a/changes/bug22490
+++ /dev/null
@@ -1,3 +0,0 @@
- o Minor bugfixes (correctness):
- - Avoid undefined behavior when parsing IPv6 entries from the geoip6
- file. Fixes bug 22490; bugfix on 0.2.4.6-alpha.
diff --git a/changes/bug6298 b/changes/bug6298
deleted file mode 100644
index 8e03ce1..0000000
--- a/changes/bug6298
+++ /dev/null
@@ -1,4 +0,0 @@
- o Minor bugfixes (unit tests):
- - The unit tests now pass on systems where localhost is misconfigured
- to some IPv4 address other than 127.0.0.1. Fixes bug 6298;
- bugfix on 0.0.9pre2.
diff --git a/changes/torify-manpage b/changes/torify-manpage
deleted file mode 100644
index f8bf56c..0000000
--- a/changes/torify-manpage
+++ /dev/null
@@ -1,3 +0,0 @@
- o Documentation:
- - Clarify the manpage for the (deprecated) torify script. Closes
- ticket 6892.
More information about the tor-commits
mailing list