2d54f2002a
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-16 16:34:52 -04:00
a8ce645ab0
Bump version to -dev
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-16 16:33:58 -04:00
15139a1c00
changelog: Run format_changelog.py
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-16 15:27:26 -04:00
59c522b964
changelog: Update with security fix stanza
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-16 11:53:34 -04:00
16eb4d4c8b
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-16 13:58:31 +00:00
b07cd2ee90
Use debian:buster instead of debian:stable for now.
2021-08-16 13:57:56 +00:00
c62d13fd8f
Use the correct release date and backport version sources
2021-08-16 08:25:36 -04:00
a2e39fa3b0
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-16 08:21:28 -04:00
2984fba97a
Make the version 0.3.6.16, not 0.3.6.16-dev.
2021-08-16 08:17:59 -04:00
4f20c0d9d4
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-13 09:48:50 -04:00
b3ec9e961e
changelog: Fix missing double newline
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-13 09:48:29 -04:00
041a0a362f
Update version to 0.3.5.16
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-13 09:43:44 -04:00
5c520d5f0d
Changelog for 0.3.5.16
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-13 09:39:43 -04:00
f55edf5b34
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-12 12:13:25 -04:00
eca5b62213
Update GeoIP files to match IPFire location DB as per 2021/08/12.
2021-08-12 15:38:11 +00:00
a141b355a1
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-11 13:15:58 +00:00
7e0971d868
Merge remote-tracking branch 'tor-gitlab/mr/417' into maint-0.3.5
2021-08-11 13:15:35 +00:00
ae6ab63f24
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-11 13:14:26 +00:00
fe5a9db1e6
Disable ed25519-donna's batch verification.
...
Fixes bug 40078.
As reported by hdevalence our batch verification logic can cause an assert
crash.
The assert happens because when the batch verification of ed25519-donna fails,
the code in `ed25519_checksig_batch()` falls back to doing a single
verification for each signature.
The crash occurs because batch verification failed, but then all signatures
individually verified just fine.
That's because batch verification and single verification use a different
equation which means that there are sigs that can pass single verification
but fail batch verification.
Fixing this would require modding ed25519-donna which is not in scope for
this ticket, and will be soon deprecated in favor of arti and
ed25519-dalek, so my branch instead removes batch verification.
2021-08-11 13:14:05 +00:00
0e60b65f6c
fallbackdir: Regenerate list
...
New list for all stable releases.
Closes #40447
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-11 09:07:05 -04:00
9c52846fe5
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-11 12:52:08 +00:00
399518da02
relay: Reduce streaming compression ratio from HIGH to LOW
...
Fixes #40301
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-11 12:51:32 +00:00
f863870398
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-14 11:49:01 -04:00
87492154e0
Bump to 0.3.5.15-dev
2021-06-14 11:45:30 -04:00
b925cef1e3
Copy ChangeLog into ReleaseNotes.
2021-06-14 10:50:47 -04:00
6abafc1018
Pick a date, draft a blurb
2021-06-10 13:19:43 -04:00
31b55c14ca
Backport changelog entries
2021-06-10 13:14:29 -04:00
e2138627f9
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 12:30:29 -04:00
f57b5c48e0
Fix TROVE-2021-006: Out-of-bounds read on v3 desc parsing
2021-06-10 12:11:10 -04:00
b5eb1ba722
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:53:07 -04:00
adb248b6d6
TROVE-2021-003: Check layer_hint before half-closed end and resolve cells
...
This issue was reported by Jann Horn part of Google's Project Zero.
Jann's one-sentence summary: entry/middle relays can spoof RELAY_END cells on
half-closed streams, which can lead to stream confusion between OP and
exit.
Fixes #40389
2021-06-10 08:50:05 -04:00
62128193e2
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:42:14 -04:00
d71bf986b4
Merge branch 'bug40391_035' into maint-0.3.5
2021-06-10 08:41:59 -04:00
aceda67546
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:37:34 -04:00
7fdfc2ea54
Merge branch 'bug40390_035_squashed' into maint-0.3.5
2021-06-10 08:34:25 -04:00
c0aa9e0a1b
Assert on _all_ failures from RAND_bytes().
...
Previously, we would detect errors from a missing RNG
implementation, but not failures from the RNG code itself.
Fortunately, it appears those failures do not happen in practice
when Tor is using OpenSSL's default RNG implementation. Fixes bug
40390; bugfix on 0.2.8.1-alpha. This issue is also tracked as
TROVE-2021-004. Reported by Jann Horn at Google's Project Zero.
2021-06-10 08:33:57 -04:00
c5922244e2
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:32:12 -04:00
9ceb2c317b
Merge remote-tracking branch 'tor-gitlab/mr/386' into maint-0.3.5
2021-06-10 08:31:54 -04:00
d6e2516031
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:21:47 -04:00
520d5c108f
Update geoip files to match ipfire location db, 2021/06/10.
2021-06-10 08:20:13 -04:00
60070546a7
remove rolled-up changes file.
2021-06-07 15:02:55 -04:00
8a3c8925b8
start 0.3.5.15 changelog.
2021-06-07 15:02:43 -04:00
fe328e2f33
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-07 13:32:35 -04:00
ed7f4ad4a9
Bump to 0.3.5.15.
2021-06-07 13:29:35 -04:00
a4e8624db1
Merge branch 'maint-0.3.5' into release-0.3.5
2021-05-25 13:25:23 +00:00
42ba87d964
Remove the function tor_tls_assert_renegotiation_unblocked.
...
It was used nowhere outside its own unit tests, and it was causing
compilation issues with recent OpenSSL 3.0.0 alphas.
Closes ticket 40399.
2021-05-25 07:38:31 -04:00
4c06c619fa
Use a more secure hash function for the circuitmux hashtable.
...
Fixes bug 40931; bugfix on 0.2.4.4-alpha. Also tracked as
TROVE-2021-005.
This issue was reported by Jann Horn from Google's Project Zero.
2021-05-18 08:40:09 -04:00
ee35291a7c
fixup! Assert on _all_ failures from RAND_bytes().
...
Whoops; I forgot to add the changes file. :/
2021-05-18 08:30:47 -04:00
f9a05e464d
Assert on _all_ failures from RAND_bytes().
...
Previously, we would detect errors from a missing RNG
implementation, but not failures from the RNG code itself.
Fortunately, it appears those failures do not happen in practice
when Tor is using OpenSSL's default RNG implementation. Fixes bug
40390; bugfix on 0.2.8.1-alpha. This issue is also tracked as
TROVE-2021-004. Reported by Jann Horn at Google's Project Zero.
2021-05-17 08:50:01 -04:00
6dc3423e3e
Merge branch 'maint-0.3.5' into release-0.3.5
2021-05-07 10:41:33 -04:00
David Goulet
Alexander Færøy
Nick Mathewson
George Kadianakis