sarah
/
tor
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

cleanup and blurb for 0.2.3.13-alpha

This commit is contained in:
Roger Dingledine 2012-03-25 23:58:12 -04:00
parent a5c78639ae
commit 6c5a1377e8
1 changed files with 25 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
ChangeLog
View File

@ -1,15 +1,21 @@
Changes in version 0.2.3.13-alpha - 2012-03-1?
Changes in version 0.2.3.13-alpha - 2012-03-26
Tor 0.2.3.13-alpha fixes a variety of stability and correctness bugs
in managed pluggable transports, as well as providing other cleanups
that get us closer to a release candidate.
o Directory authority changes:
- Change IP address for maatuska (v3 directory authority).
o Security fixes:
- Never use a bridge as an exit, even if it claims to be one. Found by
wanoskarnet. Fixes bug 5342. Bugfix on ????.
- Never use a bridge or a controller-supplied node as an exit, even
if its exit policy allows it. Found by wanoskarnet. Fixes bug
5342. Bugfix on 0.1.1.15-rc (for controller-purpose descriptors)
and 0.2.0.3-alpha (for bridge-purpose descriptors).
- Only build circuits if we have a sufficient threshold of the total
descriptors marked in the consensus with the "Exit" flag. This
mitigates an attack proposed by wanoskarnet, in which all of
a client's bridges collude to restrict the exit nodes that the
client knows about. Fixes bug 5343.
descriptors that are marked in the consensus with the "Exit"
flag. This mitigates an attack proposed by wanoskarnet, in which
all of a client's bridges collude to restrict the exit nodes that
the client knows about. Fixes bug 5343.
o Major bugfixes (on Tor 0.2.3.x):
- Avoid an assert when managed proxies like obfsproxy are configured,
@ -37,7 +43,7 @@ Changes in version 0.2.3.13-alpha - 2012-03-1?
0.1.0.1-rc which introduced cannibalization.
- Detect and reject certain misformed escape sequences in
configuration values. Previously, these values would cause us
to crash if received in a torrc file or over an (authenticated)
to crash if received in a torrc file or over an authenticated
control port. Bug found by Esteban Manchado Velázquez, and
independently by Robert Connolly from Matta Consulting who further
noted that it allows a post-authentication heap overflow. Patch
@ -45,13 +51,13 @@ Changes in version 0.2.3.13-alpha - 2012-03-1?
on 0.2.0.16-alpha.
- Fix a compile warning when using the --enable-openbsd-malloc
configure option. Fixes bug 5340; bugfix on 0.2.0.20-rc.
- Directory caches no longer refuse to clean out descriptors when
because of missing v2 networkstatus documents, unless they're
actually trying to retrieve v2 networkstatus documents. Fixes bug
4838; bugfix on 0.2.2.26-beta. Patch by Daniel Bryg.
- Directory caches no longer refuse to clean out descriptors because
of missing v2 networkstatus documents, unless they're configured
to retrieve v2 networkstatus documents. Fixes bug 4838; bugfix on
0.2.2.26-beta. Patch by Daniel Bryg.
- Update to the latest version of the tinytest unit testing framework.
This includes a couple of bugfixes that can be relevant for
running forked unit tests on Windows, and a removal of all reserved
running forked unit tests on Windows, and removes all reserved
identifiers.
o Minor bugfixes (on 0.2.3.x):
@ -64,13 +70,13 @@ Changes in version 0.2.3.13-alpha - 2012-03-1?
option, so that the IP stack doesn't decide to use it for IPv4
too. Fixes bug 4760; bugfix on 0.2.3.9-alpha.
- Ensure that variables set in Tor's environment cannot override
environment variables which Tor tries to pass to a managed
environment variables that Tor passes to a managed
pluggable-transport proxy. Previously, Tor would pass every
variable in its environment to managed proxies along with the
new ones, in such a way that on many operating systems, the
inherited environment variables would override those which Tor
tried to explicitly set. Bugfix on 0.2.3.12-alpha for most
Unixoid systems; bugfix on 0.2.3.9-alpha for Windows.
variable in its environment to managed proxies along with the new
ones, in such a way that on many operating systems, the inherited
environment variables would override those which Tor tried to
explicitly set. Bugfix on 0.2.3.12-alpha for most Unixoid systems;
bugfix on 0.2.3.9-alpha for Windows.
o Minor features:
- A wide variety of new unit tests by Esteban Manchado Velázquez.