Posts by nickm

New Release: Tor 0.3.5.2-alpha

by nickm | September 21, 2018

Tor 0.3.5.2-alpha fixes several bugs in 0.3.5.1-alpha, including one that made Tor think it had run out of sockets. Anybody running a relay or an onion service on 0.3.5.1-alpha should upgrade.

New release: Tor 0.3.5.1-alpha

by nickm | September 18, 2018

There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.3.5.1-alpha from the usual place on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release some time this week.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.3.5.1-alpha is the first release of the 0.3.5.x series. It adds client authorization for modern (v3) onion services, improves bootstrap reporting, begins reorganizing Tor's codebase, adds optional support for NSS in place of OpenSSL, and much more.

Changes in version 0.3.5.1-alpha - 2018-09-18

  • Major features (onion services, UI change):
    • For a newly created onion service, the default version is now 3. Tor still supports existing version 2 services, but the operator now needs to set "HiddenServiceVersion 2" in order to create a new version 2 service. For existing services, Tor now learns the version by reading the key file. Closes ticket 27215.
  • Major features (relay, UI change):
    • Relays no longer run as exits by default. If the "ExitRelay" option is auto (or unset), and no exit policy is specified with ExitPolicy or ReducedExitPolicy, we now treat ExitRelay as 0. Previously in this case, we allowed exit traffic and logged a warning message. Closes ticket 21530. Patch by Neel Chauhan.
    • Tor now validates that the ContactInfo config option is valid UTF- 8 when parsing torrc. Closes ticket 27428.

 

New Release: Tor 0.3.4.7-rc

by nickm | August 24, 2018

Tor 0.3.4.7-rc fixes several small compilation, portability, and correctness issues in previous versions of Tor. This version is a release candidate: if no serious bugs are found, we expect that the stable 0.3.4 release will be (almost) the same as this release.

New Release: Tor 0.3.4.6-rc

by nickm | August 8, 2018

There's a new alpha release available for download. If you build Tor from source, you can download the source code for Tor 0.3.4.6-rc from the download page on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release by some time next month.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.3.4.6-rc fixes several small compilation, portability, and correctness issues in previous versions of Tor. This version is a release candidate: if no serious bugs are found, we expect that the stable 0.3.4 release will be (almost) the same as this release.

Changes in version 0.3.4.6-rc - 2018-08-06

  • Major bugfixes (event scheduler):
    • When we enable a periodic event, schedule it in the event loop rather than running it immediately. Previously, we would re-run periodic events immediately in the middle of (for example) changing our options, with unpredictable effects. Fixes bug 27003; bugfix on 0.3.4.1-alpha.
  • Minor features (compilation):
    • When building Tor, prefer to use Python 3 over Python 2, and more recent (contemplated) versions over older ones. Closes ticket 26372.

 

Tor 0.3.3.8 is released!

by nickm | July 9, 2018

Hello, everyone!

We have a new stable release today. If you build Tor from source, you can download the source code for 0.3.3.8 on the website.  Packages should be available within the next several weeks, with a new stable Tor Browser by some time in September. (Don't worry, this isn't an urgent release for clients.)

Tor 0.3.3.8 backports several changes from the 0.3.4.x series, including fixes for a memory leak affecting directory authorities.

Changes in version 0.3.3.8 - 2018-07-09

  • Major bugfixes (directory authority, backport from 0.3.4.3-alpha):
    • Stop leaking memory on directory authorities when planning to vote. This bug was crashing authorities by exhausting their memory. Fixes bug 26435; bugfix on 0.3.3.6.
  • Major bugfixes (rust, testing, backport from 0.3.4.3-alpha):
    • Make sure that failing tests in Rust will actually cause the build to fail: previously, they were ignored. Fixes bug 26258; bugfix on 0.3.3.4-alpha.

 

Tor 0.3.4.4-rc is released!

by nickm | July 9, 2018

Hi!  There's a new release candidate available for download.  If you build Tor from source, you can download the source code for 0.3.4.4-rc from the usual place on the website.  Packages should be available over the coming weeks, with a new alpha Tor Browser release likely some time in MulyJuly.

Remember, this is a release candidate: you should only run this if you'd like to find and report more bugs than usual.

 

Tor 0.3.4.4-rc fixes several small compilation, portability, and correctness issues in previous versions of Tor. This version is a release candidate: if no serious bugs are found, we expect that the stable 0.3.4 release will be (almost) the same as this release.

Changes in version 0.3.4.4-rc - 2018-07-09

  • Minor features (compilation):
    • When building Tor, prefer to use Python 3 over Python 2, and more recent (contemplated) versions over older ones. Closes ticket 26372.
  • Minor features (geoip):
    • Update geoip and geoip6 to the July 3 2018 Maxmind GeoLite2 Country database. Closes ticket 26674.

 

New Release: Tor 0.3.4.3-alpha

by nickm | June 26, 2018

There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.3.4.3-alpha from the usual place on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release over the coming weeks.

Tor 0.3.3.7 is released!

by nickm | June 12, 2018

Hello, everyone!

We have a new stable release today. If you build Tor from source, you can
download the source code for 0.3.3.7 on the website.  Packages
should be available within the next several weeks, with a new Tor Browser over the next several weeks.

 

Tor 0.3.3.7 backports several changes from the 0.3.4.x series, including fixes for bugs affecting compatibility and stability.

Changes in version 0.3.3.7 - 2018-06-12

  • Directory authority changes:
    • Add an IPv6 address for the "dannenberg" directory authority. Closes ticket 26343.
  • Minor features (geoip):
    • Update geoip and geoip6 to the June 7 2018 Maxmind GeoLite2 Country database. Closes ticket 26351.

 

Tor 0.3.4.2-alpha is released!

by nickm | June 12, 2018

Hi!  There's a new alpha release available for download.  If you build Tor from source, you can download the source code for 0.3.4.2-alpha from the usual place on the website.  Packages should be available over the coming weeks, with a new alpha Tor Browser release over the coming weeks.

Tor 0.3.4.2-alpha fixes several minor bugs in the previous alpha release, and forward-ports an authority-only security fix from 0.3.3.6.

Changes in version 0.3.4.2-alpha - 2018-06-12

  • Directory authority changes:
    • Add an IPv6 address for the "dannenberg" directory authority. Closes ticket 26343.
  • Major bugfixes (security, directory authority, denial-of-service, also in 0.3.3.6):
    • Fix a bug that could have allowed an attacker to force a directory authority to use up all its RAM by passing it a maliciously crafted protocol versions string. Fixes bug 25517; bugfix on 0.2.9.4-alpha. This issue is also tracked as TROVE-2018-005.