Posts by nickm

Tor 0.3.3.4-alpha is released!

by nickm | March 29, 2018

There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.3.3.4-alpha from the usual place on the website. If you don't build Tor from source, don't worry! Updated packages should be available over the coming weeks, with a new alpha Tor Browser release some time in April.

New Tor alpha release: 0.3.3.3-alpha

by nickm | March 3, 2018

In addition to today's stable releases, there's a new alpha release available for download.  If you build Tor from source, you can download the source code for 0.3.3.3-alpha from the usual place on the website.  Packages for relays should be available over the coming days.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.3.3.2-alpha is released: bugfixes and DoS prevention

by nickm | February 10, 2018

Tor 0.3.3.2-alpha is the second alpha in the 0.3.3.x series. It introduces a mechanism to handle the high loads that many relay operators have been reporting recently. It also fixes several bugs in older releases. If this new code proves reliable, we plan to backport it to older supported release series.

Tor 0.3.3.1-alpha is released: back to unstable development!

by nickm | January 25, 2018

Hi!  There's a new alpha release available for download.  If you build Tor from source, you can download the source code for 0.3.3.1-alpha from the usual place on the website.  Packages should be available over the coming weeks, with a new alpha Tor Browser release some time in February.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.3.3.1-alpha is the first release in the 0.3.3.x series. It adds several new features to Tor, including several improvements to bootstrapping, and support for an experimental "vanguards" feature to resist guard discovery attacks. This series also includes better support for applications that need to embed Tor or manage v3 onion services.

Tor 0.3.2.9 is released: We have a new stable series!

by nickm | January 9, 2018

After months of hard work, there's a new stable Tor release series available!  If you build Tor from source, you can now download the source code for Tor 0.3.2.9 from the usual place on the website. Packages should become available over the coming days, including (we hope) a Tor Browser release before the end of the month.

Tor 0.3.2.9 is the first stable release in the 0.3.2 series.

Tor 0.3.2.8-rc is released, with important updates for relays

by nickm | December 21, 2017

Tor 0.3.2.8-rc fixes a pair of bugs in the KIST and KISTLite schedulers that had led servers under heavy load to overload their outgoing connections. All relay operators running earlier 0.3.2.x versions should upgrade. This version also includes a mitigation for over-full DESTROY queues leading to out-of-memory conditions: if it works, we will soon backport it to earlier release series.

This is the second release candidate in the 0.3.2 series. If we find no new bugs or regression here, then the first stable 0.3.2 release will be nearly identical to this.

You can download the source from the usual place on the website. Binary packages should be available soon. There probably won't be a Tor Browser release for this one; this issues fixed here are mainly (but not exclusively) relevant to relays.
 

Changes in version 0.3.2.8-rc - 2017-12-21

  • Major bugfixes (KIST, scheduler):
    • The KIST scheduler did not correctly account for data already enqueued in each connection's send socket buffer, particularly in cases when the TCP/IP congestion window was reduced between scheduler calls. This situation lead to excessive per-connection buffering in the kernel, and a potential memory DoS. Fixes bug 24665; bugfix on 0.3.2.1-alpha.
  • Minor features (geoip):
    • Update geoip and geoip6 to the December 6 2017 Maxmind GeoLite2 Country database.

 

Tor 0.3.2.7-rc is released!

by nickm | December 14, 2017

Tor 0.3.2.7-rc fixes various bugs in earlier versions of Tor, including some that could affect reliability or correctness.

This is the first release candidate in the 0.3.2 series. If we find no new bugs or regression here, then the first stable 0.3.2. release will be nearly identical to this.

You can download the source from the usual place on the website. Binary packages should be available soon, with a Tor Browser alpha release likely some time next week.

Changes in version 0.3.2.7-rc - 2017-12-14

  • Major bugfixes (circuit prediction):
    • Fix circuit prediction logic so that a client doesn't treat a port as being "handled" by a circuit if that circuit already has isolation settings on it. This change should make Tor clients more responsive by improving their chances of having a pre-created circuit ready for use when a request arrives. Fixes bug 18859; bugfix on 0.2.3.3-alpha.
  • Minor features (logging):
    • Provide better warnings when the getrandom() syscall fails. Closes ticket 24500.

 

Tor 0.3.2.6-alpha is released, with security updates

by nickm | December 1, 2017

This version of Tor is the latest in the 0.3.2 alpha series. It includes fixes for several important security issues. All Tor users should upgrade to this release, or to one of the other releases coming out today. (The next announcement will be about the stable releases.)