caa2ddaa8d
Merge branch 'maint-0.4.8' into release-0.4.8
2024-04-10 15:48:05 -04:00
6ebf436084
version: Bump version to 0.4.8.11-dev
2024-04-10 15:47:49 -04:00
cc3037ba77
Merge branch 'maint-0.4.8' into release-0.4.8
2024-04-10 13:06:37 -04:00
e04dfe6c1f
version: Bump version to 0.4.8.11
2024-04-10 13:06:00 -04:00
101afb7ba2
release: ChangeLog and ReleaseNotes for 0.4.8.11
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2024-04-10 13:04:50 -04:00
32a0a31fea
Merge branch 'maint-0.4.8' into release-0.4.8
2024-04-10 12:59:04 -04:00
461679e8c0
fallbackdir: Update list generated on April 10, 2024
2024-04-10 12:58:56 -04:00
3064d57712
Update geoip files to match ipfire location db, 2024/04/10.
2024-04-10 12:58:51 -04:00
406fb26dae
Merge branch 'maint-0.4.8' into release-0.4.8
2024-04-09 09:23:47 -04:00
e3e4fa35e8
dirauth: New keys and address for tor26
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2024-04-08 10:57:29 -04:00
376df0f1c4
Merge branch 'maint-0.4.8' into release-0.4.8
2024-02-28 16:52:56 +00:00
6b665f25e2
Try to appease the changefile format checker
2024-02-06 19:52:44 +01:00
4db6ab5c18
Update test strings
2024-02-01 17:16:17 +01:00
bbf8f0f1fb
Add a changes file
2024-02-01 16:45:58 +01:00
1abc9a3bd3
dirauth: Warn when failing to post during a vote
...
The only way to figure out that posting a vote or signatures to another
dirauth failed is by counting how many success messages there are on
notice level, and noticing that it is fewer than the number of
configured dirauths.
Closes #40910 .
2024-02-01 10:34:30 +01:00
587c78387f
Merge branch 'maint-0.4.8' into release-0.4.8
2024-01-30 10:56:42 -05:00
fbca1df9dd
dirauth: Reject 0.4.7.x series at the authority level
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2024-01-30 10:56:16 -05:00
06ab4d1ac1
Merge branch 'maint-0.4.8' into release-0.4.8
2024-01-30 10:49:30 -05:00
56819b0a50
bwauth: Allow "node_id" KeyValue without "$"
...
Allow "node_id" KeyValue without the dollar sign at the start of the
hexdigit in the BandwidthFiles, in order to easier database queries
combining Tor documents in which the relays fingerprint doesn't
include it.
Bugfix on all supported versions of Tor.
Closes #40891
2024-01-30 10:47:13 -05:00
f6caffdb75
Merge branch 'maint-0.4.8' into release-0.4.8
2024-01-09 09:09:44 -05:00
ee5be2bebc
add release note and changelog entry for #40819
2024-01-09 09:09:32 -05:00
32ad47d481
Merge branch 'maint-0.4.8' into release-0.4.8
2023-12-08 14:14:13 -05:00
eff176544d
version: Bump version to 0.4.8.10-dev
2023-12-08 14:13:56 -05:00
680415826c
Merge branch 'maint-0.4.8' into release-0.4.8
2023-12-08 13:49:19 -05:00
e759de90a5
version: Bump version to 0.4.8.10
2023-12-08 13:48:24 -05:00
c4f75f49f2
release: ChangeLog and ReleaseNotes for 0.4.8.10
2023-12-08 13:48:02 -05:00
0d3aa8a691
Merge branch 'maint-0.4.8' into release-0.4.8
2023-12-08 13:45:36 -05:00
4c97dc1626
fallbackdir: Update list generated on December 08, 2023
2023-12-08 13:45:00 -05:00
ad22b60ff1
Update geoip files to match ipfire location db, 2023/12/08.
2023-12-08 13:44:45 -05:00
a3f4486d7f
Merge branch 'maint-0.4.8' into release-0.4.8
2023-12-08 13:26:16 -05:00
6fbbcdde35
Merge remote-tracking branch 'mikeperry-private/bug40897' into maint-0.4.8
2023-12-08 13:19:40 -05:00
8255139694
Merge branch 'maint-0.4.8' into release-0.4.8
2023-12-07 21:38:32 +00:00
1b1f6e8574
Merge remote-tracking branch 'origin/merge-requests/776' into maint-0.4.8
2023-12-07 21:38:03 +00:00
97b4264f39
Bug 40897: Changes file
2023-12-07 18:54:51 +00:00
cc52f7e5b7
Bug 40897 Bug Bounty: Double the number of max conflux circs
...
We strongly suspect that bug 40897 was caused by a custom Tor client that
tried to use more than the default number of conflux circuits, for either
performance or traffic analysis defense gains, or both.
This entity hit a safety check on the exit side, which caused a UAF. Our
"belt and suspenders" snapped off, and hit us in the face... again...
Since there are good reasons to try more than 2 conflux legs, and research has
found some traffic analysis benefits with as many as 5, we're going to raise
and parameterize this limit as a form of bug bounty for finding this UAF, so
that this entity can try out a little more confluxing.
This should also make it easier for researchers to try things like gathering
traces with larger amounts of confluxing than normal, to measure real-world
traffic analysis impacts of conflux.
Shine on, you yoloing anonymous diamond. Let us know if you find out anything
interesting!
2023-12-07 18:37:30 +00:00
03778a0f34
Bug 40897: Add more checks to free paths
...
Similar double-frees would be caught earlier by these, so long as the pointers
remain nulled out.
2023-12-07 18:37:30 +00:00
d02eb4502a
Bug 40897: Move safety check to proper location and give it error handling.
2023-12-07 18:37:26 +00:00
1291d2fca7
update changes file with correct introduced version
2023-12-06 17:42:41 +01:00
c97d0b46d1
version: Bump version to 0.4.8.9-dev
2023-11-09 10:10:33 -05:00
af511c6ffa
Merge branch 'maint-0.4.8' into release-0.4.8
2023-11-09 09:44:10 -05:00
b9283067ca
version: Bump version to 0.4.8.9
2023-11-09 09:41:10 -05:00
b645e95a38
release: ChangeLog and ReleaseNotes for 0.4.8.9
2023-11-09 09:35:38 -05:00
1eccfbdcc4
Merge branch 'maint-0.4.8' into release-0.4.8
2023-11-09 09:24:22 -05:00
825aa705b1
fallbackdir: Update list generated on November 09, 2023
2023-11-09 09:23:59 -05:00
f822f24599
Update geoip files to match ipfire location db, 2023/11/09.
2023-11-09 09:23:54 -05:00
5d2293c5ce
Merge branch 'maint-0.4.8' into release-0.4.8
2023-11-09 09:17:51 -05:00
be751a46e3
Merge branch 'ticket40883_048_01' into maint-0.4.8
2023-11-09 09:14:19 -05:00
a18f3b8fb6
Merge branch 'maint-0.4.8' into release-0.4.8
2023-11-09 09:10:58 -05:00
6df27ae953
Merge branch 'tor-gitlab/mr/778' into maint-0.4.8
2023-11-09 09:10:52 -05:00
83aecca561
hs: Always check if the hs_ident is available when processing a cell
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2023-11-08 11:17:48 -05:00
David Goulet
Tor CI Release
Alexander Færøy
Sebastian Hahn
juga
trinity-1686a
Mike Perry