Merge branch 'maint-0.2.8' into release-0.2.8

also reorder a stanza to put the more exciting bug first

changes/19271

@@ -1,2 +0,0 @@
-  o Directory authority changes:
-    - Urras is no longer a directory authority. Closes ticket 19271.

changes/asciidoc-UTC

@@ -1,4 +0,0 @@
-  o Minor bugfixes (build):
-    - When building manual pages, set the timezone to "UTC", so that the
-      output is reproducible. Fixes bug 19558; bugfix on 0.2.2.9-alpha.
-      Patch from intrigeri.

changes/bastet_v6

@@ -1,4 +0,0 @@
-  o Minor features (directory authority):
-    - Add an IPv6 address for the "bastet" directory authority.
-      Closes ticket 24394.
-

changes/broken-028-fallbacks

@@ -1,3 +0,0 @@
-  o Minor feature (fallback directories):
-    - Remove broken fallbacks from the hard-coded fallback directory list.
-      Closes ticket 20190; patch by teor.

changes/buf-sentinel

@@ -1,11 +0,0 @@
-  o Major features (security fixes):
-
-    - Prevent a class of security bugs caused by treating the contents
-      of a buffer chunk as if they were a NUL-terminated string.  At
-      least one such bug seems to be present in all currently used
-      versions of Tor, and would allow an attacker to remotely crash
-      most Tor instances, especially those compiled with extra compiler
-      hardening. With this defense in place, such bugs can't crash Tor,
-      though we should still fix them as they occur. Closes ticket 20384
-      (TROVE-2016-10-001).
-

changes/bug17150

@@ -1,7 +0,0 @@
-  o Minor bugfixes (directory warnings):
-    - When fetching extrainfo documents, compare their SHA256 digests
-      and Ed25519 signing key certificates
-      with the routerinfo that led us to fetch them, rather than
-      with the most recent routerinfo. Otherwise we generate many
-      spurious warnings about mismatches. Fixes bug 17150; bugfix
-      on 0.2.7.2-alpha.

changes/bug17744_redux

@@ -1,5 +0,0 @@
-  o Minor bugfixes (build):
-    - Remove a pair of redundant AM_CONDITIONAL declarations from
-      configure.ac. Fixes one final case of bug 17744; bugfix on
-      0.2.8.2-alpha.
-

changes/bug18133

@@ -1,4 +0,0 @@
-  o Minor bugfixes (logging):
-    - When we can't generate a signing key because OfflineMasterKey is set,
-      do not imply that we should have been able to load it.
-      Fixes bug 18133; bugfix on 0.2.7.2-alpha.

changes/bug18286

@@ -1,5 +0,0 @@
-  o Minor features (build):
-    - Tor now builds again with the recent OpenSSL 1.1 development branch
-      (tested against 1.1.0-pre4 and 1.1.0-pre5-dev). Closes ticket 18286.
-
-

changes/bug18312

@@ -1,4 +0,0 @@
-  o Documentation:
-    - Stop recommending use of nicknames to identify relays in our
-      MapAddress documentation. Closes ticket 18312.
-

changes/bug18329-minimal

@@ -1,6 +0,0 @@
-  o Minor features (bridge):
-    - Bridges now include notice in their descriptors that they are bridges,
-      and notice of their distribution status, based on their publication
-      settings.  Implements ticket 18329.  For more fine-grained control of
-      how a bridge is distributed, upgrade to 0.3.2.x or later.
-

changes/bug18397

@@ -1,7 +0,0 @@
-  o Minor bugfixes (Linux seccomp2 sandbox):
-    - Add a few missing syscalls to the seccomp2 sandbox: sysinfo,
-      getsockopt(SO_SNDBUF), and setsockopt(SO_SNDBUFFORCE). On
-      some systems, these are required for Tor to start with
-      "Sandbox 1" enabled.
-      Fixes bug 18397; bugfix on 0.2.5.1-alpha. Patch from
-      Daniel Pinto.

changes/bug18460

@@ -1,4 +0,0 @@
-  o Minor bugfixes (statistics):
-    - We now include consensus downloads via IPv6 in our directory-request statistics.
-      Fixes bug 18460; bugfix on 0.2.3.14-alpha.
-

changes/bug18481

@@ -1,5 +0,0 @@
-  o Minor bugfixes (client):
-    - Turn all TestingClientBootstrap* into non-testing torrc options. This
-      changes simply renames them by removing "Testing" in front of them and
-      they do not require TestingTorNetwork to be enabled anymore. Fixes
-      bug 18481; bugfix on 0.2.8.1-alpha.

changes/bug18616

@@ -1,14 +0,0 @@
-  o Major bugfixes (directory mirrors):
-    - Decide whether to advertise begindir support the same way we decide
-      whether to advertise our DirPort. These decisions being out of sync
-      led to surprising behavior like advertising begindir support when
-      our hibernation config options made us not advertise a DirPort.
-      Resolves bug 18616; bugfix on 0.2.8.1-alpha. Patch by teor.
-
-  o Minor bugfixes:
-    - Consider more config options when relays decide whether to regenerate
-      their descriptor. Fixes more of bug 12538; bugfix on 0.2.8.1-alpha.
-    - Resolve some edge cases where we might launch an ORPort reachability
-      check even when DisableNetwork is set. Noticed while fixing bug
-      18616; bugfix on 0.2.3.9-alpha.
-

changes/bug18668

@@ -1,3 +0,0 @@
-  o Minor bugfixes (tests):
-    - Avoid "WSANOTINITIALISED" warnings in the unit tests. Fixes bug 18668;
-      bugfix on 0.2.8.1-alpha.

changes/bug18673

@@ -1,4 +0,0 @@
-  o Minor bugfixes (memory leak):
-    - Fix a small memory leak that would occur when the
-      TestingEnableCellStatsEvent option was turned on.  Fixes bug 18673;
-      bugfix on 0.2.5.2-alpha.

changes/bug18686

@@ -1,5 +0,0 @@
-  o Minor bugfixes (pluggable transports):
-    - Avoid reporting a spurious error when we decide that we don't
-      need to terminate a pluggable transport because it has already
-      exited. Fixes bug 18686; bugfix on 0.2.5.5-alpha.
-

changes/bug18710

@@ -1,6 +0,0 @@
-  o Major bugfixes (DNS proxy):
-    - Stop a crash that could occur when a client running with DNSPort
-      received a query with multiple address types, where the first
-      address type was not supported. Found and fixed by Scott Dial.
-      Fixes bug 18710; bugfix on 0.2.5.4-alpha.
-

changes/bug18716

@@ -1,4 +0,0 @@
-  o Minor bugfixes (assert, portability):
-    - Fix an assertion failure in memarea.c on systems where "long" is
-      shorter than the size of a pointer.
-      Fixes bug 18716; bugfix on 0.2.1.1-alpha

changes/bug18728

@@ -1,4 +0,0 @@
-  o Minor bugfixes (build):
-    - Resolve warnings when building on systems that are concerned with
-      signed char. Fixes bug 18728; bugfix on 0.2.7.2-alpha and 
-      0.2.6.1-alpha.

changes/bug18729

@@ -1,3 +0,0 @@
-  o Minor features (logging):
-    - Stop blasting twelve lines per second from periodic_event_dispatch()
-      at loglevel debug. Resolves ticket 18729; fix on 0.2.8.1-alpha.

changes/bug18761

@@ -1,3 +0,0 @@
-  o Minor feature (logging):
-    - When rejecting a misformed INTRODUCE2 cell, only log at PROTOCOL_WARN
-      severity. Closes ticket 18761.

changes/bug18809

@@ -1,16 +0,0 @@
-  o Major bugfixes (bootstrap):
-    - Check if bootstrap consensus downloads are still needed
-      when the linked connection attaches. This prevents tor
-      making unnecessary begindir-style connections, which are
-      the only directory connections tor clients make since
-      the fix for 18483 was merged.
-    - Fix some edge cases where consensus download connections
-      may not have been closed, even though they were not needed.
-      Related to fix  18809.
-    - Make relays retry consensus downloads the correct number of
-      times, rather than the more aggressive client retry count.
-      Fixes part of ticket 18809.
-    - Stop downloading consensuses when we have a consensus,
-      even if we don't have all the certificates for it yet.
-      Fixes bug 18809; bugfix on 0.2.8.1-alpha.
-      Patches by arma and teor.

changes/bug18812

@@ -1,4 +0,0 @@
-  o Minor bugfixes (bootstrap):
-    - When a fallback changes its fingerprint from the hard-coded
-      fingerprint, log a less severe, more explanatory log message.
-      Fixes bug 18812; bugfix on 0.2.8.1-alpha. Patch by teor.

changes/bug18816

@@ -1,4 +0,0 @@
-  o Minor bugfix (bootstrap):
-    - Consistently use the consensus download schedule for
-      authority certificates.
-      Fixes bug 18816; bugfix on 0.2.4.13-alpha.

changes/bug18841.1

@@ -1,7 +0,0 @@
-  o Major bugfixes (compilation):
-    - Correctly detect compiler flags on systems where _FORTIFY_SOURCE
-      is predefined. Previously, our use of -D_FORTIFY_SOURCE would
-      cause a compiler warning, thereby making other checks fail.
-      Fixes one case of bug 18841; bugfix on 0.2.3.17-beta. Patch from
-      "trudokal".
-

changes/bug18849

@@ -1,4 +0,0 @@
-  o Minor bugfix (logging):
-    - Reduce excessive logging when directories can't be found.
-      Fixes bug 18849; bugfix on 0.2.8.3-alpha and 0.2.8.1-alpha.
-      Patch by teor.

changes/bug18920

@@ -1,5 +0,0 @@
-  o Minor bugfixes (controller, microdescriptors):
-    - Make GETINFO dir/status-vote/current/consensus conform to the control
-      specification by returning "551 Could not open cached consensus..."
-      when not caching consensuses.
-      Fixes bug 18920; bugfix on 0.2.2.6-alpha.

changes/bug18921

@@ -1,4 +0,0 @@
-  o Major bugfixes (IPv6 bridges):
-    - Fix directory address selection for IPv6 bridges.
-      Fixes bug 18921; bugfix on 0.2.8.1-alpha.
-      Patch by "teor".

changes/bug18929

@@ -1,5 +0,0 @@
-  o Minor bugfixes (IPv6):
-    - Make directory node selection more reliable, mainly for
-      IPv6-only clients and clients with few reachable addresses.
-      Fixes bug 18929; bugfix on 0.2.8.1-alpha.
-      Patch by "teor".

changes/bug18943

@@ -1,6 +0,0 @@
-  o Major bugfixes (crypto, portability):
-    - The SHA3 and SHAKE routines now produce the correct output on
-      Big Endian systems, unbreaking the unit tests.  No code calls
-      either algorithm family yet, so this is primarily a build fix.
-      Fixes bug 18943; bugfix on 0.2.8.1-alpha.
-

changes/bug18977

@@ -1,4 +0,0 @@
-  o Minor bugfixes (time handling):
-    - When correcting a corrupt 'struct tm' value, fill in the tm_wday
-      field. Otherwise, our unit tests crash on Windows.
-      Fixes bug 18977; bugfix on 0.2.2.25-alpha.

changes/bug19003

@@ -1,5 +0,0 @@
-  o Minor bugfixes (small networks):
-    - Allow directories in small networks to bootstrap by
-      skipping DirPort checks when the consensus has no exits.
-      Fixes bug 19003; bugfix on 0.2.8.1-alpha.
-      Patch by teor.

changes/bug19008

@@ -1,3 +0,0 @@
-  o Major bugfixes (testing):
-    - Fix a bug that would block 'make test-network-all' on systems
-      where IPv6 packets were lost. Fixes bug 19008; bugfix on tor-0.2.7.3-rc.

changes/bug19032

@@ -1,4 +0,0 @@
-  o Major bugfixes (security, directory authorities):
-    - Fix a crash and out-of-bounds write during authority voting, when the
-      list of relays includes duplicate ed25519 identity keys. Fixes bug 19032;
-      bugfix on 0.2.8.2-alpha.

changes/bug19161

@@ -1,3 +0,0 @@
-  o Minor bugfixes (compilation):
-    - When libscrypt.h is found, but no libscrypt library can be linked,
-      treat libscrypt as absent. Fixes bug 19161; bugfix on 0.2.6.1-alpha.

changes/bug19191

@@ -1,5 +0,0 @@
-  o Minor bugfixes (downloading):
-    - Predict more correctly whether we'll be downloading over HTTP when we
-      determine the maximum length of a URL. This should avoid a "BUG"
-      warning about the Squid HTTP proxy and its URL limits. Fixes bug 19191;
-      bugfix on ?????.

changes/bug19203

@@ -1,4 +0,0 @@
-  o Major bugfixes (user interface):
-    - Correctly give a warning in the cases where a relay is specified by
-      nickname, and one such relay is found, but it is not officially Named.
-      Fixes bug 19203; bugfix on 0.2.3.1-alpha.

changes/bug19213

@@ -1,3 +0,0 @@
-  o Minor bugfixes (compilation):
-    - Cause the unit tests to compile correctly on mingw64 versions
-      that lack sscanf. Fixes bug 19213; bugfix on 0.2.7.1-alpha.

changes/bug19406

@@ -1,4 +0,0 @@
-  o Minor features (build):
-    - Tor now again builds with the recent OpenSSL 1.1 development branch
-      (tested against 1.1.0-pre5 and 1.1.0-pre6-dev).
-

changes/bug19454

@@ -1,3 +0,0 @@
-  o Minor bugfixes (heartbeat):
-    - Fix regression that crashes Tor when disabling heartbeats. Fixes bug
-      19454; bugfix on tor-0.2.8.1-alpha. Reported by "kubaku".

changes/bug19464

@@ -1,6 +0,0 @@
-  o Minor bugfixes (user interface):
-    - Remove a warning message "Service [scrubbed] not found after
-      descriptor upload". This message appears when one uses HSPOST control
-      command to upload a service descriptor. Since there is only a descriptor
-      and no service, showing this message is pointless and confusing.
-      Fixes bug 19464; bugfix on 0.2.7.2-alpha.

changes/bug19499

@@ -1,4 +0,0 @@
-  o Minor features (build):
-    - Tor now again builds with the recent OpenSSL 1.1 development branch
-      (tested against 1.1.0-pre6-dev). Closes ticket 19499.
-

changes/bug19556

@@ -1,7 +0,0 @@
-  o Minor bugfixes (sandboxing):
-    - When sandboxing is enabled, we could not write any stats to
-      disk.  check_or_create_data_subdir("stats"), which prepares the
-      private stats directory, calls check_private_dir(), which also
-      opens and not just stats() the directory.  Therefore, we need to
-      also allow open() for the stats dir in our sandboxing setup.
-      Fixes bug 19556; bugfix on 0.2.5.1-alpha.

changes/bug19557

@@ -1,4 +0,0 @@
-  o Major bugfixes (sandboxing):
-    - Our sandboxing code would not allow us to write to stats/hidserv-stats,
-      causing tor to abort while trying to write stats.  This was previously
-      masked by bug 19556. Fixes bug 19557; bugfix on 0.2.6.1-alpha.

changes/bug19608

@@ -1,6 +0,0 @@
-  o Minor bugfixes (IPv6, microdescriptors):
-    - Don't check node addresses when we only have a routerstatus.
-      This allows IPv6-only clients to bootstrap by fetching
-      microdescriptors from fallback directory mirrors.
-      (The microdescriptor consensus has no IPv6 addresses in it.)
-      Fixes bug 19608; bugfix on c281c036 in 0.2.8.2-alpha.

changes/bug19660

@@ -1,8 +0,0 @@
-  o Minor bugfixes (sandboxing):
-    - If we did not find a non-private IPaddress by iterating over
-      interfaces, we would try to get one via
-      get_interface_address6_via_udp_socket_hack().  This opens a
-      datagram socket with IPPROTO_UDP.  Previously all our datagram
-      sockets (via libevent) used IPPROTO_IP, so we did not have that
-      in the sandboxing whitelist.  Add (SOCK_DGRAM, IPPROTO_UDP)
-      sockets to the sandboxing whitelist.  Fixes bug 19660.

changes/bug19682

@@ -1,3 +0,0 @@
-  o Minor bugfixes (compilation):
-    - Fix compilation warning in the unit tests on systems where
-      char is signed. Fixes bug 19682; bugfix on 0.2.8.1-alpha.

changes/bug19728

@@ -1,3 +0,0 @@
-  o Directory authority changes:
-    - The "Tonga" bridge authority has been retired; the new bridge
-      authority is "Bifroest". Closes tickets 19728 and 19690.

changes/bug19782

@@ -1,3 +0,0 @@
-  o Minor bugfixes (fallback directories):
-    - Remove a fallback that was on the hardcoded list, then opted-out.
-      Fixes bug 19782; update to fallback list from 0.2.8.2-alpha.

changes/bug19903

@@ -1,4 +0,0 @@
-  o Minor bugfixes (compilation):
-    - Remove an inappropriate "inline" in tortls.c that was causing warnings
-      on older versions of GCC. Fixes bug 19903; 0.2.8.1-alpha.
-

changes/bug19947

@@ -1,4 +0,0 @@
- o Minor bugfixes (fallback directories):
-    - Avoid logging a NULL string pointer when loading fallback directory information.
-      Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha.
-      Report and patch by "rubiate".

changes/bug19969

@@ -1,10 +0,0 @@
-  o Major bugfixes (client performance);
-    - Clients now respond to new application stream requests when
-      they arrive, rather than waiting up to one second before starting
-      to handle them. Fixes part of bug 19969; bugfix on 0.2.8.1-alpha.
-
-  o Major bugfixes (clients on flaky network connections);
-    - When Tor leaves standby because of a new application request, open
-      circuits as needed to serve that request. Previously, we would
-      potentially wait a very long time. Fixes part of bug 19969; bugfix
-      on 0.2.8.1-alpha.

changes/bug19973

@@ -1,6 +0,0 @@
-  o Major bugfixes (client, security):
-    - Only use the ReachableAddresses option to restrict the first hop
-      in a path. Previously, it would apply to every hop in the path,
-      with a possible degredation in anonymity for anyone using an
-      uncommon ReachableAddress setting. Fixes bug 19973; bugfix on
-      0.2.8.2-alpha.

changes/bug20103

@@ -1,7 +0,0 @@
-  o Major bugfixes (crash):
-
-    - Fix a complicated crash bug that could affect Tor clients
-      configured to use bridges when replacing a networkstatus consensus
-      in which one of their bridges was mentioned. OpenBSD users saw
-      more crashes here, but all platforms were potentially affected.
-      Fixes bug 20103; bugfix on 0.2.8.2-alpha.

changes/bug20203

@@ -1,6 +0,0 @@
-  o Major bugfixes (relay, OOM handler):
-    - Fix a timing-dependent assertion failure that could occur when we
-      tried to flush from a circuit after having freed its cells because
-      of an out-of-memory condition. Fixes bug 20203; bugfix on
-      0.2.8.1-alpha. Thanks to "cypherpunks" for help diagnosing this
-      one.

changes/bug20235

@@ -1,4 +0,0 @@
-  o Minor features (compatibility):
-    - Work around a bug in the OSX 10.12 SDK that would prevent us
-      from successfully targetting earlier versions of OSX.
-      Resolves ticket 20235.

changes/bug20551

@@ -1,3 +0,0 @@
-  o Minor bugfixes (compilation);
-    - Fix implicit conversion warnings under OpenSSL 1.1.
-      Fixes bug 20551; bugfix on 0.2.1.1-alpha.

changes/bug20553

@@ -1,3 +0,0 @@
-  o Minor bugfixes (memory leak):
-    - Work around a memory leak in OpenSSL 1.1 when encoding public keys.
-      Fixes bug 20553; bugfix on 0.0.2pre8.

changes/bug20588

@@ -1,3 +0,0 @@
-  o Minor bugfixes (portability):
-    - Fix compilation with OpenSSL 1.1 and less commonly-used
-      CPU architectures. Closes ticket 20588.

changes/bug20865

@@ -1,7 +0,0 @@
-  o Minor bugfixes (portability):
-    - Avoid compilation errors when building on OSX Sierra. Sierra began
-      to support the getentropy() API, but created a few problems in
-      doing so. Tor 0.2.9 has a more thorough set of workarounds; in
-      0.2.8, we are just using the /dev/urandom interface. Fixes
-      bug 20865. Bugfix on 0.2.8.1-alpha.
-

changes/bug21018

@@ -1,11 +0,0 @@
-  o Major bugfixes (parsing, security):
-
-    - Fix a bug in parsing that could cause clients to read a single
-      byte past the end of an allocated region. This bug could be
-      used to cause hardened clients (built with
-      --enable-expensive-hardening) to crash if they tried to visit
-      a hostile hidden service.  Non-hardened clients are only
-      affected depending on the details of their platform's memory
-      allocator. Fixes bug 21018; bugfix on 0.2.0.8-alpha. Found by
-      using libFuzzer. Also tracked as TROVE-2016-12-002 and as
-      CVE-2016-1254.

changes/bug22490

@@ -1,3 +0,0 @@
-  o Minor bugfixes (correctness):
-    - Avoid undefined behavior when parsing IPv6 entries from the geoip6
-      file. Fixes bug 22490; bugfix on 0.2.4.6-alpha.

changes/bug22636

@@ -1,8 +0,0 @@
- o Build features:
-   - Tor's repository now includes a Travis Continuous Integration (CI)
-     configuration file (.travis.yml). This is meant to help new developers and
-     contributors who fork Tor to a Github repository be better able to test
-     their changes, and understand what we expect to pass. To use this new build
-     feature, you must fork Tor to your Github account, then go into the
-     "Integrations" menu in the repository settings for your fork and enable
-     Travis, then push your changes.

changes/bug22737

@@ -1,12 +0,0 @@
-  o Minor bugfixes (defensive programming, undefined behavior):
-
-    - Fix a memset() off the end of an array when packing cells.  This
-      bug should be harmless in practice, since the corrupted bytes
-      are still in the same structure, and are always padding bytes,
-      ignored, or immediately overwritten, depending on compiler
-      behavior. Nevertheless, because the memset()'s purpose is to
-      make sure that any other cell-handling bugs can't expose bytes
-      to the network, we need to fix it. Fixes bug 22737; bugfix on
-      0.2.4.11-alpha. Fixes CID 1401591.
-
-

changes/bug22789

@@ -1,7 +0,0 @@
-  o Major bugfixes (openbsd, denial-of-service):
-    - Avoid an assertion failure bug affecting our implementation of
-      inet_pton(AF_INET6) on certain OpenBSD systems whose strtol()
-      handling of "0xfoo" differs from what we had expected.
-      Fixes bug 22789; bugfix on 0.2.3.8-alpha. Also tracked as
-      TROVE-2017-007.
-

changes/bug22838_028

@@ -1,5 +0,0 @@
-  o Minor bugfixes (compilation, mingw, backport from 0.3.1.1-alpha):
-    - Backport a fix for an "unused variable" warning that appeared
-      in some versions of mingw. Fixes bug 22838; bugfix on
-      0.2.8.1-alpha.
-

changes/bug23291

@@ -1,3 +0,0 @@
-  o Minor bugfixes (testing):
-    - Fix an undersized buffer in test-memwipe.c. Fixes bug 23291; bugfix on
-      0.2.7.2-alpha. Found and patched by Ties Stuij.

changes/bug23690

@@ -1,5 +0,0 @@
-  o Major bugfixes (relay, crash, assertion failure):
-    - Fix a timing-based assertion failure that could occur when the
-      circuit out-of-memory handler freed a connection's output buffer.
-      Fixes bug 23690; bugfix on 0.2.6.1-alpha.
-

changes/bug24313

@@ -1,5 +0,0 @@
-  o Major bugfixes (security, hidden service v2):
-    - Fix a use-after-free error that could crash v2 Tor hidden services
-      when it failed to open circuits while expiring introductions
-      points. Fixes bug 24313; bugfix on 0.2.7.2-alpha.  This
-      issue is also tracked as TROVE-2017-013 and CVE-2017-8823.

changes/doc17621

@@ -1,3 +0,0 @@
-  o Documentation:
-    - Document the contents of the 'datadir/keys' subdirectory in the manual
-      page. Closes ticket 17621.

changes/fallbacks-201604

@@ -1,9 +0,0 @@
-  o Minor features (fallback directory mirrors):
-    - Give each fallback the same weight for client selection;
-      restrict fallbacks to one per operator;
-      report fallback directory detail changes when rebuilding list;
-      add new fallback directory mirrors to the whitelist;
-      update fallback directories based on the latest OnionOO data;
-      and any other minor simplifications and fixes.
-      Closes tasks 17158, 17905, 18749, bug 18689, and fixes part of
-      bug 18812 on 0.2.8.1-alpha; patch by "teor".

changes/feature18483

@@ -1,4 +0,0 @@
-  o Minor features (clients):
-    - Make clients, onion services, and bridge relays always
-      use an encrypted begindir connection for directory requests.
-      Resolves ticket 18483. Patch by "teor".

changes/geoip-2017-11-06

@@ -1,4 +0,0 @@
-  o Minor features (geoip):
-    - Update geoip and geoip6 to the November 6 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-april2016

@@ -1,4 +0,0 @@
-  o Minor features (geoip):
-    - Update geoip and geoip6 to the April 5 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-april2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the April 4 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-august2016

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-august2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the August 3 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-december2016

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the December 7 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-february2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-january2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-july2016

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the July 6 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-july2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the July 4 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-jun2016

@@ -1,4 +0,0 @@
-  o Minor features (geoip):
-    - Update geoip and geoip6 to the June 7 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-june2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the June 8 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-march2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the March 7 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-may2016

@@ -1,4 +0,0 @@
-  o Minor features (geoip):
-    - Update geoip and geoip6 to the May 4 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-may2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-november2016

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the November 3 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-october2016

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the October 4 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-october2017

@@ -1,4 +0,0 @@
-  o Minor features (geoip):
-    - Update geoip and geoip6 to the October 4 2017 Maxmind GeoLite2
-      Country database.
-

changes/geoip-september2016

@@ -1,4 +0,0 @@
-  o Minor features (geoip):
-    - Update geoip and geoip6 to the September 6 2016 Maxmind GeoLite2
-      Country database.
-

changes/geoip-september2017

@@ -1,4 +0,0 @@
-  o Minor features:
-    - Update geoip and geoip6 to the September 6 2017 Maxmind GeoLite2
-      Country database.
-

changes/longclaw-ipv6

@@ -1,6 +0,0 @@
-  o Minor features (directory authorities):
-    - Remove longclaw's IPv6 address, as it will soon change.
-      Authority IPv6 addresses were originally added in 0.2.8.1-alpha.
-      This leaves 3/8 directory authorities with IPv6 addresses, but there
-      are also 52 fallback directory mirrors with IPv6 addresses.
-      Resolves 19760.

changes/longclaw_23592

@@ -1,3 +0,0 @@
-  o Directory authority changes:
-    - The directory authority "Longclaw" has changed its IP address.
-      Closes ticket 23592.

changes/memarea_overflow

@@ -1,7 +0,0 @@
-  o Minor bugfixes (pointer arithmetic):
-    - Fix a bug in memarea_alloc() that could have resulted in remote heap
-      write access, if Tor had ever passed an unchecked size to
-      memarea_alloc().  Fortunately, all the sizes we pass to memarea_alloc()
-      are pre-checked to be less than 128 kilobytes. Fixes bug 19150; bugfix
-      on 0.2.1.1-alpha. Bug found by Guido Vranken.
-

changes/rsa_init_bug

@@ -1,7 +0,0 @@
-  o Major bugfixes (key management):
-    - If OpenSSL fails to generate an RSA key, do not retain a dangling pointer
-      to the previous (uninitialized) key value. The impact here should be
-      limited to a difficult-to-trigger crash, if OpenSSL is running an
-      engine that makes key generation failures possible, or if OpenSSL runs
-      out of memory. Fixes bug 19152; bugfix on 0.2.1.10-alpha. Found by
-      Yuan Jochen Kang, Suman Jana, and Baishakhi Ray.