nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-23 20:03:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Move all merged-in-0.2.4.18-rc items into 0.2.5.2-alpha changelog section.

Browse Source
This commit is contained in:
Nick Mathewson 2014-01-20 15:41:06 -05:00
parent 9be105f94b
commit 694562815f
16 changed files with 86 additions and 75 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

86
ChangeLog
View File

@ -1,3 +1,89 @@
Changes in version 0.2.5.2 - 2013-01-??
ALSO IN 0.2.4.18-rc
o Major bugfixes:
- Do not apply connection_consider_empty_read/write_buckets to
non-rate-limited connections.
o Documentation:
- Add anchors to the manpage so we can link to the documentation for
specific options. Resolves ticket 9866.
o Documentation fixes:
- Clarify the usage and risks of ContactInfo. Resolves ticket 9854.
o Documentation:
- Replace remaining references to DirServer in man page and
log entries. Resolves ticket 10124.
o Minor bugfixes:
- Fix an assertion failure that would occur when disabling the
ORPort setting on a running Tor process while accounting was
enabled. Fixes bug 6979; bugfix on 0.2.2.18-alpha.
o Minor features:
- Improve the circuit queue out-of-memory handler. Previously, when
we ran low on memory, we'd close whichever circuits had the most
queued cells. Now, we close those that have the *oldest* queued
cells, on the theory that those are most responsible for us
running low on memory. Based on analysis from a forthcoming paper
by Jansen, Tschorsch, Johnson, and Scheuermann. Fixes bug 9093.
o Minor bugfixes:
- Correctly log long IPv6 exit policy, instead of truncating them
or reporting an error. Fixes bug 9596; bugfix on 0.2.4.7-alpha.
o Minor bugfixes:
- Fix a small memory leak on exit. (We weren't freeing directory
authority certificate download statuses.) Fixes bug 9644; bugfix
on 0.2.4.13-alpha.
o Minor bugfixes (performance, fingerprinting):
- Our default TLS ecdhe groups were backwards: we meant to be using
P224 for relays (for performance win) and P256 for bridges (since
it is more common in the wild). Instead we had it backwards. After
reconsideration, we decided that the default should be P256 on all
hosts, since its security is probably better, and since P224 is
reportedly used quite little in the wild. Found by "skruffy" on
IRC. Fix for bug 9780; bugfix on 0.2.4.8-alpha.
o Minor bugfixes:
- When closing a channel that has already been open, do not close
pending circuits that were waiting to connect to the same relay.
Fixes bug 9880; bugfix on 0.2.5.1-alpha. Thanks to skruffy for
finding this bug. (Bug was merged to 0.2.4 branch but not released
in any 0.2.4 version)
o Minor bugfixes:
- When examining list of network interfaces to find our address, do
not consider non-running or disabled network interfaces. Fixes bug
9904; bugfix on 0.2.3.11-alpha. Patch from "hantwister".
o Minor features:
- Generate bootstrapping status update events correctly for fetching
microdescriptors. Fixes bug 9927.
o Minor bugfixes:
- Avoid an off-by-one error when checking buffer boundaries when
formatting the exit status of a pluggable transport helper.
This is probably not an exploitable bug, but better safe than
sorry. Fixes bug 9928; bugfix on 0.2.3.18-rc. Bug found by
Pedro Ribeiro.
o Minor bugfixes:
- If the guard we choose first doesn't answer, we would try the
second guard, but once we connected to the second guard we would
abandon it and retry the first one, slowing down bootstrapping.
The fix is to treat all our initially chosen guards as acceptable
to use. Fixes bug 9946; bugfix on 0.1.1.11-alpha.
o Major bugfixes:
- Stop trying to fetch all our directory information from our first
guard. Discovered while fixing bug 9946; bugfix on 0.2.4.8-alpha.
o Minor features:
- Update to the October 2 2013 Maxmind GeoLite Country database.
==============================
ALSO IN 0.2.4.19:
==============================
ALSO IN 0.2.4.20:
==============================
Changes in version 0.2.4.20 - 2013-12-22
Tor 0.2.4.20 fixes potentially poor random number generation for users
who 1) use OpenSSL 1.0.0 or later, 2) set "HardwareAccel 1" in their

3
changes/9854
View File

@ -1,3 +0,0 @@
o Documentation fixes:
- Clarify the usage and risks of ContactInfo. Resolves ticket 9854.

3
changes/bug10124
View File

@ -1,3 +0,0 @@
o Documentation:
- Replace remaining references to DirServer in man page and
log entries. Resolves ticket 10124.

4
changes/bug6979
View File

@ -1,4 +0,0 @@
o Minor bugfixes:
- Fix an assertion failure that would occur when disabling the
ORPort setting on a running Tor process while accounting was
enabled. Fixes bug 6979; bugfix on 0.2.2.18-alpha.

7
changes/bug9093
View File

@ -1,7 +0,0 @@
o Minor features:
- Improve the circuit queue out-of-memory handler. Previously, when
we ran low on memory, we'd close whichever circuits had the most
queued cells. Now, we close those that have the *oldest* queued
cells, on the theory that those are most responsible for us
running low on memory. Based on analysis from a forthcoming paper
by Jansen, Tschorsch, Johnson, and Scheuermann. Fixes bug 9093.

4
changes/bug9596
View File

@ -1,4 +0,0 @@
o Minor bugfixes:
- Correctly log long IPv6 exit policy, instead of truncating them
or reporting an error. Fixes bug 9596; bugfix on 0.2.4.7-alpha.

4
changes/bug9644
View File

@ -1,4 +0,0 @@
o Minor bugfixes:
- Fix a small memory leak on exit. (We weren't freeing directory
authority certificate download statuses.) Fixes bug 9644; bugfix
on 0.2.4.13-alpha.

3
changes/bug9731
View File

@ -1,3 +0,0 @@
o Major bugfixes:
- Do not apply connection_consider_empty_read/write_buckets to
non-rate-limited connections.

8
changes/bug9780
View File

@ -1,8 +0,0 @@
o Minor bugfixes (performance, fingerprinting):
- Our default TLS ecdhe groups were backwards: we meant to be using
P224 for relays (for performance win) and P256 for bridges (since
it is more common in the wild). Instead we had it backwards. After
reconsideration, we decided that the default should be P256 on all
hosts, since its security is probably better, and since P224 is
reportedly used quite little in the wild. Found by "skruffy" on
IRC. Fix for bug 9780; bugfix on 0.2.4.8-alpha.

8
changes/bug9880
View File

@ -1,8 +0,0 @@
o Minor bugfixes:
- When closing a channel that has already been open, do not close
pending circuits that were waiting to connect to the same relay.
Fixes bug 9880; bugfix on 0.2.5.1-alpha. Thanks to skruffy for
finding this bug. (Bug was merged to 0.2.4 branch but not released
in any 0.2.4 version)

4
changes/bug9904
View File

@ -1,4 +0,0 @@
o Minor bugfixes:
- When examining list of network interfaces to find our address, do
not consider non-running or disabled network interfaces. Fixes bug
9904; bugfix on 0.2.3.11-alpha. Patch from "hantwister".

4
changes/bug9927
View File

@ -1,4 +0,0 @@
o Minor features:
- Generate bootstrapping status update events correctly for fetching
microdescriptors. Fixes bug 9927.

6
changes/bug9928
View File

@ -1,6 +0,0 @@
o Minor bugfixes:
- Avoid an off-by-one error when checking buffer boundaries when
formatting the exit status of a pluggable transport helper.
This is probably not an exploitable bug, but better safe than
sorry. Fixes bug 9928; bugfix on 0.2.3.18-rc. Bug found by
Pedro Ribeiro.

11
changes/bug9946
View File

@ -1,11 +0,0 @@
o Minor bugfixes:
- If the guard we choose first doesn't answer, we would try the
second guard, but once we connected to the second guard we would
abandon it and retry the first one, slowing down bootstrapping.
The fix is to treat all our initially chosen guards as acceptable
to use. Fixes bug 9946; bugfix on 0.1.1.11-alpha.
o Major bugfixes:
- Stop trying to fetch all our directory information from our first
guard. Discovered while fixing bug 9946; bugfix on 0.2.4.8-alpha.

3
changes/geoip-october2013
View File

@ -1,3 +0,0 @@
o Minor features:
- Update to the October 2 2013 Maxmind GeoLite Country database.

3
changes/ticket9866
View File

@ -1,3 +0,0 @@
o Documentation:
- Add anchors to the manpage so we can link to the documentation for
specific options. Resolves ticket 9866.