浏览代码

fold new entries into changelog for 0.2.7.3

Nick Mathewson 10 年之前
父节点
当前提交
d27534eeb5
共有 5 个文件被更改,包括 33 次插入33 次删除
  1. 33 0
      ChangeLog
  2. 0 20
      changes/bug16069-exit-policy-rule6
  3. 0 6
      changes/bug17027-reject-private-all-interfaces
  4. 0 3
      changes/bug17047
  5. 0 4
      changes/ed25519_hup

+ 33 - 0
ChangeLog

@@ -13,6 +13,8 @@ Changes in version 0.2.7.3-????? - 2015-09-1?
       key management. Log messages are better, and the code can recover
       key management. Log messages are better, and the code can recover
       from far more failure conditions. Thanks to "s7r" for reporting
       from far more failure conditions. Thanks to "s7r" for reporting
       and diagnosing so many of these!
       and diagnosing so many of these!
+    - On receiving a HUP signal, check to see whether the Ed25519
+      signing key has changed, and reload it if so. Closes ticket 16790.
 
 
   o Major bugfixes (relay, Ed25519):
   o Major bugfixes (relay, Ed25519):
     - Avoid crashing on 'tor --keygen'. Fixes bug 16679; bugfix on
     - Avoid crashing on 'tor --keygen'. Fixes bug 16679; bugfix on
@@ -110,6 +112,13 @@ Changes in version 0.2.7.3-????? - 2015-09-1?
       test-network-bridges-hs. Closes tickets 16945 (tor), 16946
       test-network-bridges-hs. Closes tickets 16945 (tor), 16946
       (chutney) . Patches by "teor".
       (chutney) . Patches by "teor".
 
 
+  o Minor bug fixes (security, exit policies):
+    - ExitPolicyRejectPrivate rejects more private addresses by default:
+      * the relay's published IPv6 address (if any), and * any publicly
+      routable IPv4 or IPv6 addresses on any local interfaces. Resolves
+      ticket 17027. Patch by "teor". Patch on 42b8fb5a1523 (11 Nov
+      2007), released in 0.2.0.11-alpha.
+
   o Minor bugfixes:
   o Minor bugfixes:
     - Check correctly for windows socket errors in the workqueue
     - Check correctly for windows socket errors in the workqueue
       backend. Fixes bug 16741; bugfix on 0.2.6.3-alpha.
       backend. Fixes bug 16741; bugfix on 0.2.6.3-alpha.
@@ -134,6 +143,26 @@ Changes in version 0.2.7.3-????? - 2015-09-1?
       to in the ChangeLog and an error message. Fixes bug 16929; bugfix
       to in the ChangeLog and an error message. Fixes bug 16929; bugfix
       on 0.2.6.1-alpha.
       on 0.2.6.1-alpha.
 
 
+  o Minor bug fixes (torrc exit policies):
+    - accept6/reject6 * lines only produce IPv6 wildcard addresses,
+      previously they would produce both IPv4 and IPv6
+      wildcard addresses.
+    - When parsing torrc ExitPolicies, we now warn if: * an IPv4 address
+      is used on an accept6 or reject6 line. The line is ignored, but
+      the rest of the policy items in the list are used. (accept/reject
+      continue to allow both IPv4 and IPv6 addresses in torrcs.) * a
+      "private" address alias is used on an accept6 or reject6 line. The
+      line filters both IPv4 and IPv6 private addresses, disregarding
+      the 6 in accept6/reject6. * any ExitPolicy lines occur after
+      accept/reject *:* or variants. These are redundant, and were
+      always ignored.
+    - When parsing torrc ExitPolicies, we now issue an info-level
+      message: * when expanding an accept/reject * line to include both
+      IPv4 and IPv6 wildcard addresses.
+    - In each instance, usage advice is provided to avoid the message.
+      Resolves ticket 16069. Patch by "teor". Patch on 2eb7eafc9d78 and
+      a96c0affcb4c (25 Oct 2012), released in 0.2.4.7-alpha.
+
   o Minor bugfix (open file limit):
   o Minor bugfix (open file limit):
     - Fix set_max_file_descriptors() to set by default the max open file
     - Fix set_max_file_descriptors() to set by default the max open file
       limit to the current limit in case setrlimit() fails so we at
       limit to the current limit in case setrlimit() fails so we at
@@ -171,6 +200,10 @@ Changes in version 0.2.7.3-????? - 2015-09-1?
     - Allow routers with ed25519 keys to run correctly under the
     - Allow routers with ed25519 keys to run correctly under the
       seccomp2 sandbox. Fixes bug 16965; bugfix on 0.2.7.2-alpha.
       seccomp2 sandbox. Fixes bug 16965; bugfix on 0.2.7.2-alpha.
 
 
+  o Minor bugfixes (portability):
+    - Restore correct operation of TLS client-cipher detection on
+      OpenSSL 1.1. Fixes bug 14047; bugfix on 0.2.7.2-alpha.
+
   o Minor bugfixes (relay):
   o Minor bugfixes (relay):
     - Unblock threads before releasing the mutex to ensure predictable
     - Unblock threads before releasing the mutex to ensure predictable
       scheduling behavior. Fixes bug 16644; bugfix on 0.2.6.3-alpha.
       scheduling behavior. Fixes bug 16644; bugfix on 0.2.6.3-alpha.

+ 0 - 20
changes/bug16069-exit-policy-rule6

@@ -1,20 +0,0 @@
-  o Minor bug fixes (torrc exit policies):
-    - accept6/reject6 * lines only produce IPv6 wildcard addresses,
-      previously they would produce both IPv4 and IPv6 wildcard addresses.
-    - When parsing torrc ExitPolicies, we now warn if:
-      * an IPv4 address is used on an accept6 or reject6 line. The line is
-        ignored, but the rest of the policy items in the list are used.
-        (accept/reject continue to allow both IPv4 and IPv6 addresses in
-        torrcs.)
-      * a "private" address alias is used on an accept6 or reject6 line.
-        The line filters both IPv4 and IPv6 private addresses, disregarding
-        the 6 in accept6/reject6.
-      * any ExitPolicy lines occur after accept/reject *:* or variants.
-        These are redundant, and were always ignored.
-    - When parsing torrc ExitPolicies, we now issue an info-level message:
-      * when expanding an accept/reject * line to include both IPv4 and IPv6
-        wildcard addresses.
-    - In each instance, usage advice is provided to avoid the message.
-      Resolves ticket 16069. Patch by "teor".
-      Patch on 2eb7eafc9d78 and a96c0affcb4c (25 Oct 2012),
-      released in 0.2.4.7-alpha.

+ 0 - 6
changes/bug17027-reject-private-all-interfaces

@@ -1,6 +0,0 @@
-  o Minor bug fixes (security, exit policies):
-    - ExitPolicyRejectPrivate rejects more private addresses by default:
-      * the relay's published IPv6 address (if any), and
-      * any publicly routable IPv4 or IPv6 addresses on any local interfaces.
-      Resolves ticket 17027. Patch by "teor".
-      Patch on 42b8fb5a1523 (11 Nov 2007), released in 0.2.0.11-alpha.

+ 0 - 3
changes/bug17047

@@ -1,3 +0,0 @@
-  o Minor bugfixes (portability):
-    - Restore correct operation of TLS client-cipher detection on
-      OpenSSL 1.1.  Fixes bug 14047; bugfix on 0.2.7.2-alpha.

+ 0 - 4
changes/ed25519_hup

@@ -1,4 +0,0 @@
-  o Minor features (relay, Ed25519):
-    - On receiving a HUP signal, check to see whether the Ed25519
-      signing key has changed, and reload it if so. Closes ticket
-      16790.