changelog 34 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025
  1. tor (0.2.0.18-alpha-2) experimental; urgency=low
  2. * Work around fig2dev failing to build the images on mipsel like we do on
  3. sparc and s390 (re #457568)
  4. * Fix postinst find command that chowns stuff to the right user. Find
  5. does weird things in the presence of !.
  6. -- Peter Palfrader <weasel@debian.org> Sun, 3 Feb 2008 18:17:16 +0100
  7. tor (0.2.0.18-alpha-1) experimental; urgency=low
  8. * postinst: Remove the check that requires the debian-tor user
  9. to have a uid between 100 and 999. There is no good reason
  10. to require this. If the local admin moves the system users/uid-space
  11. to some other range then they probably have a good reason for that.
  12. * postinst: change wording if debian-tor's homedir is wrong, do not
  13. print anything if it is ok.
  14. * postinst: We were only fixing the permissions of /var/{lib,run,log}/tor
  15. when we were not upgrading. Unfortunately the check doesn't work all
  16. that well usually in cases where the package was removed (not purged)
  17. and then later re-installed again. Now we ensure proper ownership
  18. and modes for all the directories and files below /var/{lib,run,log}/tor
  19. (the dirs themselves included) every time we run postinst.
  20. * postinst: if we reboot between unpacking and configuring on some smart
  21. systems this will mean that we just lost /var/run/tor - creating it
  22. in the maintainer script if it doesn't exist.
  23. * Create logfiles in logrotate so that they come into the world with the
  24. correct mode (o-r).
  25. -- Peter Palfrader <weasel@debian.org> Thu, 24 Jan 2008 15:15:32 +0100
  26. tor (0.2.0.17-alpha-1) experimental; urgency=low
  27. * New upstream version.
  28. -- Peter Palfrader <weasel@debian.org> Thu, 17 Jan 2008 21:42:25 +0100
  29. tor (0.2.0.15-alpha-1) experimental; urgency=low
  30. * New upstream version.
  31. -- Peter Palfrader <weasel@debian.org> Tue, 25 Dec 2007 08:53:25 +0100
  32. tor (0.2.0.14-alpha-1) experimental; urgency=low
  33. * New upstream version.
  34. * Remove 13_r12907-fix-unit-tests.dpatch (Fix unit tests from HEAD) again -
  35. it's included upstream.
  36. * Work around fig2dev failing to build the images on sparc like we do on
  37. s390.
  38. -- Peter Palfrader <weasel@debian.org> Sun, 23 Dec 2007 13:45:41 +0100
  39. tor (0.2.0.13-alpha-1) experimental; urgency=low
  40. * New upstream version.
  41. * Fix unit tests from HEAD (13_r12907-fix-unit-tests.dpatch).
  42. -- Peter Palfrader <weasel@debian.org> Fri, 21 Dec 2007 11:52:43 +0100
  43. tor (0.2.0.12-alpha-1) experimental; urgency=low
  44. * New upstream version.
  45. -- Peter Palfrader <weasel@debian.org> Sun, 18 Nov 2007 11:49:06 +0100
  46. tor (0.2.0.11-alpha-1) experimental; urgency=low
  47. * New upstream version.
  48. * remove 12_r12235_do_not_crash_when_myfamily_is_set again, it's
  49. now part of upstream.
  50. -- Peter Palfrader <weasel@debian.org> Thu, 15 Nov 2007 11:07:06 +0100
  51. tor (0.2.0.9-alpha-2) experimental; urgency=low
  52. * Do not separate required lsb facilities with commas in the
  53. init script (closes: #448001).
  54. * Add 12_r12235_do_not_crash_when_myfamily_is_set.dpatch,
  55. from trunk/head.
  56. -- Peter Palfrader <weasel@debian.org> Sun, 28 Oct 2007 00:03:21 +0200
  57. tor (0.2.0.9-alpha-1) experimental; urgency=low
  58. * New upstream version.
  59. * Only create pid dir if we are about to start Tor (Luca Capello,
  60. closes: #447508).
  61. -- Peter Palfrader <weasel@debian.org> Fri, 26 Oct 2007 14:29:56 +0200
  62. tor (0.2.0.8-alpha-1) experimental; urgency=low
  63. * New upstream version.
  64. -- Peter Palfrader <weasel@debian.org> Sat, 13 Oct 2007 16:27:04 +0200
  65. tor (0.2.0.7-alpha-1) experimental; urgency=low
  66. * New upstream version.
  67. -- Peter Palfrader <weasel@debian.org> Mon, 24 Sep 2007 23:50:14 +0200
  68. tor (0.2.0.6-alpha-1) experimental; urgency=low
  69. * New upstream version.
  70. -- Peter Palfrader <weasel@debian.org> Mon, 27 Aug 2007 15:41:31 +0200
  71. tor (0.2.0.5-alpha-1) experimental; urgency=low
  72. * New upstream version.
  73. -- Peter Palfrader <weasel@debian.org> Sun, 19 Aug 2007 15:10:49 +0200
  74. tor (0.2.0.4-alpha-1) experimental; urgency=high
  75. * New upstream version.
  76. -- Peter Palfrader <weasel@debian.org> Thu, 2 Aug 2007 07:09:36 +0200
  77. tor (0.2.0.3-alpha-1) experimental; urgency=low
  78. * New upstream version.
  79. -- Peter Palfrader <weasel@debian.org> Tue, 31 Jul 2007 07:03:00 +0200
  80. tor (0.2.0.2-alpha-1) experimental; urgency=low
  81. * New upstream version.
  82. -- Peter Palfrader <weasel@debian.org> Sun, 3 Jun 2007 02:31:29 +0200
  83. tor (0.2.0.1-alpha-1) experimental; urgency=low
  84. * New upstream version.
  85. * Forward port 06_add_compile_time_defaults.
  86. * teTeX is no more, long live TeX Live:
  87. - remove build depends on tetex-bin, tetex-extra,
  88. - add build depends on texlive-base-bin for dvips and bibtex,
  89. texlive-latex-base for latex, and texlive-fonts-recommended for fonts
  90. like ptmr7t.
  91. -- Peter Palfrader <weasel@debian.org> Sat, 2 Jun 2007 14:31:15 +0200
  92. tor (0.1.2.19-1) unstable; urgency=low
  93. * New upstream version.
  94. -- Peter Palfrader <weasel@debian.org> Thu, 17 Jan 2008 20:57:42 +0100
  95. tor (0.1.2.18-1) unstable; urgency=low
  96. * New upstream version.
  97. -- Peter Palfrader <weasel@debian.org> Mon, 29 Oct 2007 20:36:38 +0100
  98. tor (0.1.2.17-1) unstable; urgency=low
  99. * New upstream version.
  100. -- Peter Palfrader <weasel@debian.org> Fri, 31 Aug 2007 03:14:33 +0200
  101. tor (0.1.2.16-1) unstable; urgency=high
  102. * New upstream version.
  103. -- Peter Palfrader <weasel@debian.org> Thu, 2 Aug 2007 06:43:09 +0200
  104. tor (0.1.2.15-1) unstable; urgency=low
  105. * New upstream version.
  106. * Change build-depends from tetex to texlive suite.
  107. -- Peter Palfrader <weasel@debian.org> Thu, 19 Jul 2007 22:33:43 +0200
  108. tor (0.1.2.14-1) unstable; urgency=low
  109. * New upstream version.
  110. -- Peter Palfrader <weasel@debian.org> Fri, 25 May 2007 21:49:20 +0200
  111. tor (0.1.2.13-3) unstable; urgency=low
  112. * Always give a shell (/bin/sh) when we use su(1) in our init script
  113. (closes: #421465).
  114. -- Peter Palfrader <weasel@debian.org> Sun, 6 May 2007 14:44:11 +0200
  115. tor (0.1.2.13-2) unstable; urgency=low
  116. * In options_init_from_torrc()'s error path only config_free() options
  117. if they already have been initialized (closes: #421235).
  118. -- Peter Palfrader <weasel@debian.org> Fri, 27 Apr 2007 13:06:37 +0200
  119. tor (0.1.2.13-1) unstable; urgency=low
  120. * New upstream version.
  121. -- Peter Palfrader <weasel@debian.org> Tue, 24 Apr 2007 21:21:10 +0200
  122. tor (0.1.2.12-rc-1) experimental; urgency=low
  123. * New upstream version.
  124. -- Peter Palfrader <weasel@debian.org> Sat, 17 Mar 2007 11:35:31 +0100
  125. tor (0.1.2.10-rc-1) experimental; urgency=low
  126. * New upstream version.
  127. * Change recommends on privoxy to privoxy | polipo (>= 1) (closes: #413728).
  128. -- Peter Palfrader <weasel@debian.org> Fri, 9 Mar 2007 10:57:40 +0100
  129. tor (0.1.2.8-beta-1) experimental; urgency=low
  130. * New upstream version.
  131. -- Peter Palfrader <weasel@debian.org> Mon, 26 Feb 2007 11:50:49 +0100
  132. tor (0.1.2.7-alpha-1) experimental; urgency=low
  133. * New upstream version.
  134. * Install all the spec files into usr/share/doc/tor/spec now.
  135. They moved to doc/spec/* from just doc/* in the source too.
  136. -- Peter Palfrader <weasel@debian.org> Tue, 13 Feb 2007 18:51:14 +0100
  137. tor (0.1.2.6-alpha-1) experimental; urgency=low
  138. * New upstream version.
  139. -- Peter Palfrader <weasel@debian.org> Tue, 9 Jan 2007 17:39:15 +0100
  140. tor (0.1.2.5-alpha-1) experimental; urgency=low
  141. * New upstream version.
  142. * Disable 02_add_debian_files_in_manpage.dpatch for now.
  143. -- Peter Palfrader <weasel@debian.org> Sun, 7 Jan 2007 13:57:37 +0100
  144. tor (0.1.2.4-alpha-1) experimental; urgency=low
  145. * New upstream version.
  146. -- Peter Palfrader <weasel@debian.org> Mon, 4 Dec 2006 00:13:37 +0100
  147. tor (0.1.2.3-alpha-1) experimental; urgency=low
  148. * New upstream version.
  149. -- Peter Palfrader <weasel@debian.org> Mon, 30 Oct 2006 11:06:52 +0100
  150. tor (0.1.2.2-alpha-1) experimental; urgency=low
  151. [ Peter Palfrader ]
  152. * New upstream version.
  153. [ Roger Dingledine ]
  154. * Minor update of debian/copyright.
  155. -- Peter Palfrader <weasel@debian.org> Tue, 10 Oct 2006 03:26:00 +0200
  156. tor (0.1.2.1-alpha-1) experimental; urgency=low
  157. * Forward port 07_log_to_file_by_default.dpatch.
  158. * Previously our defaults for DataDirectory, PidFile, RunAsDaemon, and
  159. Log differed from upstreams. Now Tor behaves just like before (with
  160. our own DataDirectory and all) only when run as the debian-tor user.
  161. If invoked as any other user, Tor will behave just like the pristine
  162. upstream version.
  163. * Tell users about the init script when they try to run Tor as root.
  164. Should we also do this when they try to run their Tor as any other
  165. (non root, non debian-tor) user? - add 11_tor_as_root_more_helpful
  166. * Use tor --verify-config before start and reload. Abort init script
  167. with exit 1 if config does not verify.
  168. * Change Standards-Version to 3.7.2. No changes required.
  169. -- Peter Palfrader <weasel@debian.org> Tue, 29 Aug 2006 22:38:29 +0200
  170. tor (0.1.1.26-1) unstable; urgency=high
  171. * New upstream version (Stop sending the HttpProxyAuthenticator string to
  172. directory servers when directory connections are tunnelled through Tor).
  173. -- Peter Palfrader <weasel@debian.org> Fri, 15 Dec 2006 20:24:07 +0100
  174. tor (0.1.1.25-1) unstable; urgency=low
  175. * New upstream version.
  176. -- Peter Palfrader <weasel@debian.org> Sat, 4 Nov 2006 17:16:08 +0100
  177. tor (0.1.1.24-1) unstable; urgency=low
  178. * New upstream version.
  179. * Update debian/copyright:
  180. - tree.h has vanished somewhere along the current branch
  181. - ht.h is new and credits Christopher Clark
  182. - We didn't mention Matej Pfajfar's copyright before.
  183. * Forward port 07_log_to_file_by_default.
  184. -- Peter Palfrader <weasel@debian.org> Fri, 6 Oct 2006 23:32:45 +0200
  185. tor (0.1.1.23-1) unstable; urgency=medium
  186. * New upstream version.
  187. -- Peter Palfrader <weasel@debian.org> Thu, 3 Aug 2006 03:13:24 +0200
  188. tor (0.1.1.22-1) unstable; urgency=low
  189. * New upstream version.
  190. -- Peter Palfrader <weasel@debian.org> Thu, 6 Jul 2006 02:55:37 +0200
  191. tor (0.1.1.21-1) unstable; urgency=low
  192. * New upstream version.
  193. -- Peter Palfrader <weasel@debian.org> Sun, 11 Jun 2006 18:27:13 +0200
  194. tor (0.1.1.20-1) unstable; urgency=low
  195. * New upstream stable release: The 0.1.1.x tree is now the new stable
  196. tree. Upload to unstable rather than experimental.
  197. -- Peter Palfrader <weasel@debian.org> Tue, 23 May 2006 20:16:25 +0200
  198. tor (0.1.1.19-rc-1) experimental; urgency=low
  199. * New upstream version.
  200. * Remove support for my nodoc DEB_BUILD_OPTIONS variable. It clutters
  201. stuff and I haven't used it in ages.
  202. * Update debian/tor.docs file.
  203. -- Peter Palfrader <weasel@debian.org> Fri, 5 May 2006 16:27:48 +0200
  204. tor (0.1.1.18-rc-1) experimental; urgency=low
  205. * New upstream version.
  206. * update debian/tor.doc:
  207. - no longer ship INSTALL and README files, they are useless now.
  208. - doc/stylesheet.css, doc/tor-doc-server.html, doc/tor-doc-unix.html,
  209. doc/tor-hidden-service.html, doc/tor-switchproxy.html got replaced
  210. by doc/website/stylesheet.css and doc/website/tor-* which is more
  211. or less the same, only taken from the website. Some links are
  212. probably broken still, but this should get fixed eventually.
  213. -- Peter Palfrader <weasel@debian.org> Mon, 10 Apr 2006 12:00:50 +0200
  214. tor (0.1.1.17-rc-1) experimental; urgency=low
  215. * New upstream version.
  216. * Forward port patches/07_log_to_file_by_default.
  217. -- Peter Palfrader <weasel@debian.org> Tue, 28 Mar 2006 09:48:04 +0200
  218. tor (0.1.1.16-rc-1) experimental; urgency=low
  219. * New upstream version.
  220. -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2006 02:03:29 +0100
  221. tor (0.1.1.15-rc-1) experimental; urgency=low
  222. * New upstream version.
  223. * Apparently passing --host to configure when not cross-compiling
  224. is evil now and greatly confuses configure. So don't do it unless it
  225. actually differs from --build host.
  226. -- Peter Palfrader <weasel@debian.org> Sat, 11 Mar 2006 20:04:36 +0100
  227. tor (0.1.1.14-alpha-1) experimental; urgency=low
  228. * New upstream version.
  229. * Include 0.1.0.17 changelog in experimental tree.
  230. * doc/FAQ is no longer shipped, so remove it from debian/tor.docs.
  231. -- Peter Palfrader <weasel@debian.org> Tue, 21 Feb 2006 05:16:21 +0100
  232. tor (0.1.1.13-alpha-1) experimental; urgency=low
  233. * New upstream version.
  234. * Forward port patches/02_add_debian_files_in_manpage.
  235. * Forward port patches/03_tor_manpage_in_section_8.
  236. * Create /var/run/tor on init script start if it does
  237. not exist already.
  238. * Set default ulimit -n to 8k instead of 4k in /etc/default/tor.
  239. * Print that we're raising the ulimit to stdout in the init script.
  240. * Add CVE numbers to past issues in the changelog where applicable.
  241. -- Peter Palfrader <weasel@debian.org> Fri, 10 Feb 2006 14:38:11 +0100
  242. tor (0.1.1.12-alpha-1) experimental; urgency=low
  243. * New upstream version, that was a quick one. :)
  244. * Forward port patches/02_add_debian_files_in_manpage.
  245. -- Peter Palfrader <weasel@debian.org> Thu, 12 Jan 2006 02:53:27 +0100
  246. tor (0.1.1.11-alpha-1) experimental; urgency=low
  247. * New upstream version.
  248. - Implement "entry guards": automatically choose a handful of entry
  249. nodes and stick with them for all circuits. This will increase
  250. security dramatically against certain end-point attacks
  251. (closes: #349283, CVE-2006-0414).
  252. * Forward port patches/07_log_to_file_by_default.
  253. * Forward port 0.1.0.16 changelog and change to copyright file.
  254. -- Peter Palfrader <weasel@debian.org> Wed, 11 Jan 2006 12:08:25 +0100
  255. tor (0.1.1.10-alpha-1) experimental; urgency=low
  256. * New upstream version.
  257. * doc/tor-doc.css and doc/tor-doc.html are no longer in the upstream
  258. tarball, remove them from debian/tor.docs.
  259. * add the following new files to tor.docs: doc/socks-extensions.txt,
  260. doc/stylesheet.css, doc/tor-doc-server.html, doc/tor-doc-unix.html
  261. -- Peter Palfrader <weasel@debian.org> Sun, 11 Dec 2005 14:02:41 +0100
  262. tor (0.1.1.9-alpha-1) experimental; urgency=low
  263. * New upstream version.
  264. * Remove 08_add_newlines_between_serverdescriptors.dpatch.
  265. * Update 06_add_compile_time_defaults.dpatch
  266. * Use bin/bash for the init script instead of bin/sh. We are using
  267. ulimit -n which is not POSIX (closes: #338797).
  268. * Remove the EVENT_NOEPOLL block from etc/default/tor.
  269. * Add an ARGS block to etc/default/tor as suggested in #338425.
  270. -- Peter Palfrader <weasel@debian.org> Tue, 15 Nov 2005 23:29:54 +0100
  271. tor (0.1.1.8-alpha-1) experimental; urgency=low
  272. * New upstream version.
  273. * Add patch from CVS to
  274. "Insert a newline between all router descriptors when generating (old
  275. style) signed directories, in case somebody was counting on that".
  276. r1.247 of dirserv.c, <20051008060243.85F41140808C@moria.seul.org>
  277. -- Peter Palfrader <weasel@debian.org> Sat, 8 Oct 2005 20:24:39 +0200
  278. tor (0.1.1.7-alpha-1) experimental; urgency=low
  279. * New upstream version.
  280. * More merging from 0.1.0.14+XXXX:
  281. - The tor-dbg package does not really need its own copy of copyright
  282. and changelog in usr/share/doc/tor-dbg.
  283. * Forward port 03_tor_manpage_in_section_8.dpatch
  284. -- Peter Palfrader <weasel@debian.org> Wed, 14 Sep 2005 17:52:35 +0200
  285. tor (0.1.1.6-alpha-2) experimental; urgency=low
  286. * Merge 0.1.0.14+XXXX changes.
  287. -- Peter Palfrader <weasel@debian.org> Wed, 14 Sep 2005 15:05:16 +0200
  288. tor (0.1.1.6-alpha-1) experimental; urgency=low
  289. * Experimental upstream version.
  290. -- Peter Palfrader <weasel@debian.org> Sat, 10 Sep 2005 10:17:43 +0200
  291. tor (0.1.1.5-alpha-cvs-1) UNRELEASED; urgency=low
  292. * Even more experimental cvs snapshot.
  293. * Testsuite is mandatory again.
  294. * Forward port 03_tor_manpage_in_section_8.dpatch
  295. * Forward port 06_add_compile_time_defaults.dpatch
  296. -- Peter Palfrader <weasel@debian.org> Fri, 9 Sep 2005 23:22:38 +0200
  297. tor (0.1.1.5-alpha-1) UNRELEASED; urgency=low
  298. * Experimental upstream version.
  299. * Allow test suite to fail, it's broken in this version.
  300. * Update list of files from doc/ that should be installed.
  301. * Forward port debian/ patches.
  302. -- Peter Palfrader <weasel@debian.org> Fri, 12 Aug 2005 17:02:23 +0200
  303. tor (0.1.0.17-1) unstable; urgency=low
  304. * New upstream version.
  305. -- Peter Palfrader <weasel@debian.org> Sat, 18 Feb 2006 02:49:45 +0100
  306. tor (0.1.0.16-1) unstable; urgency=low
  307. * New upstream version.
  308. * Update copyright file for 2006.
  309. -- Peter Palfrader <weasel@debian.org> Tue, 3 Jan 2006 13:59:34 +0100
  310. tor (0.1.0.15-1) unstable; urgency=low
  311. * New upstream release.
  312. * Forward port 03_tor_manpage_in_section_8.
  313. -- Peter Palfrader <weasel@debian.org> Sat, 24 Sep 2005 15:15:34 +0200
  314. tor (0.1.0.14-2) unstable; urgency=low
  315. * Ship debugging information in a separate package now, instead
  316. of simply not stripping tor. This is still useful while tor is
  317. young. Ideally it would go away some time.
  318. * Add LSB comments to init script as suggested by Petter Reinholdtsen
  319. on the debian-devel list:
  320. - http://lists.debian.org/debian-devel/2005/08/msg01172.html
  321. - http://wiki.debian.net/?LSBInitScripts
  322. * Work around broken chroots that do not resolve localhost or resolve
  323. it to the wrong IP. We now catch such cases in debian/rules, shout
  324. at the buildd maintainer, and ignore the result of our test suite.
  325. -- Peter Palfrader <weasel@debian.org> Wed, 21 Sep 2005 10:23:25 +0200
  326. tor (0.1.0.14-1) unstable; urgency=high
  327. * New upstream version - changes, among others:
  328. - Fixes the other half of the bug with crypto handshakes (CVE-2005-2643).
  329. * Since gs-gpl on s390 is broken (#321435) and unable to
  330. build PDFs of our images for the design paper this version
  331. ships them in the source and uses them on s390, should building
  332. them from source really fail.
  333. * Increase standards-version from 3.6.1 to 3.6.2. No changes
  334. necessary.
  335. -- Peter Palfrader <weasel@debian.org> Mon, 8 Aug 2005 23:55:05 +0200
  336. tor (0.1.0.13-1) unstable; urgency=high
  337. * New upstream version:
  338. - Explicitly set no-unaligned-access for sparc in configure.in.
  339. it turns out the new gcc's let you compile broken code, but
  340. that doesn't make it not-broken (closes: #320140).
  341. - Fix a critical bug in the security of our crypto handshakes.
  342. (Therefore set urgency to high).
  343. and more (see upstream changelog).
  344. * Slightly improve init script to give you proper error messages when
  345. you do not run it as root.
  346. -- Peter Palfrader <weasel@debian.org> Fri, 5 Aug 2005 01:27:49 +0200
  347. tor (0.1.0.12-1) unstable; urgency=medium
  348. * New upstream version:
  349. - New IP for tor26 directory server,
  350. - fix a possible double-free in tor_gzip_uncompress,
  351. - and more (see upstream changelog).
  352. -- Peter Palfrader <weasel@debian.org> Tue, 19 Jul 2005 17:36:24 +0200
  353. tor (0.1.0.11-1) unstable; urgency=high
  354. * New upstream version (closes: #316753):
  355. - Fixes a serious bug: servers now honor their exit policies -
  356. In 0.1.0.x only clients enforced them so far. 0.0.9.x is
  357. not affected.
  358. * Build depend on libevent-dev >= 1.1.
  359. * Urgency high because 0.0.9.10-1 did not make it into testing after
  360. like 3 weeks because of an impending ftp-master move. So I might
  361. just as well upload this one.
  362. -- Peter Palfrader <weasel@debian.org> Mon, 4 Jul 2005 17:53:48 +0200
  363. tor (0.1.0.10-0.pre.1) UNRELEASED; urgency=low
  364. * New upstream version.
  365. * Add a watch file.
  366. * Forward port 03_tor_manpage_in_section_8.
  367. * Forward port 06_add_compile_time_defaults.
  368. * Add libevent-dev to build-depends.
  369. * Update URL to tor in debian/control and debian/copyright.
  370. * Add a snippet to disable epoll in etc/default/tor, commented out.
  371. * Add a snippet to set nice level in etc/default/tor.
  372. * Wait for 60 seconds in init stop. 35 is too little.
  373. * Don't depend on python anymore - tor-resolve is C now.
  374. * If "with-dmalloc" is in DEB_BUILD_OPTIONS we build against libdmalloc4.
  375. Of course the -dev package needs to be installed.
  376. * Update README.Debian to say that upstream now does have a default
  377. for DataDirectory.
  378. * Don't fail in the init script when we cannot raise the ulimit.
  379. Instead just warn a bit (closes: #312882).
  380. -- Peter Palfrader <weasel@debian.org> Wed, 15 Jun 2005 16:38:06 +0200
  381. tor (0.0.9.10-1) unstable; urgency=high
  382. * While we're waiting for a newer libevent to enter sid, make another
  383. upload of the 0.0.9.x tree:
  384. - Refuse relay cells that claim to have a length larger than the
  385. maximum allowed. This prevents a potential attack that could read
  386. arbitrary memory (e.g. keys) from an exit server's process
  387. (CVE-2005-2050).
  388. -- Peter Palfrader <weasel@debian.org> Thu, 16 Jun 2005 22:56:11 +0200
  389. tor (0.0.9.9-1) unstable; urgency=low
  390. * New upstream version.
  391. -- Peter Palfrader <weasel@debian.org> Sat, 23 Apr 2005 23:58:47 +0200
  392. tor (0.0.9.8-1) unstable; urgency=low
  393. * New upstream version.
  394. -- Peter Palfrader <weasel@debian.org> Fri, 8 Apr 2005 09:11:34 +0200
  395. tor (0.0.9.7-1) unstable; urgency=low
  396. * New upstream version.
  397. -- Peter Palfrader <weasel@debian.org> Fri, 1 Apr 2005 09:52:12 +0200
  398. tor (0.0.9.6-1) unstable; urgency=low
  399. * New upstream version.
  400. * Upstream used newer auto* tools, so hopefully the new config.sub
  401. and config.guess files (2003-08-18) are good enough to build
  402. tor on ppc64 (closes: #300376: FTBFS on ppc64).
  403. -- Peter Palfrader <weasel@debian.org> Fri, 25 Mar 2005 01:34:28 +0100
  404. tor (0.0.9.5-1) unstable; urgency=low
  405. * New upstream version.
  406. -- Peter Palfrader <weasel@debian.org> Thu, 24 Feb 2005 09:45:52 +0100
  407. tor (0.0.9.4-1) unstable; urgency=low
  408. * New upstream version.
  409. * Set ulimit for file descriptors to 4096 in our init
  410. script.
  411. * Use SIGINT to shutdown tor. That way - if you are a server -
  412. tor will stop accepting new connections immediately, and
  413. give existing connections a grace period of 30 seconds in
  414. which they might complete their task. If you just run a
  415. client it should make no difference.
  416. -- Peter Palfrader <weasel@debian.org> Fri, 4 Feb 2005 00:20:25 +0100
  417. tor (0.0.9.3-1) unstable; urgency=low
  418. * New upstream version.
  419. * Forward port 07_log_to_file_by_default.
  420. -- Peter Palfrader <weasel@debian.org> Sun, 23 Jan 2005 16:01:58 +0100
  421. tor (0.0.9.2-1) unstable; urgency=low
  422. * New upstream version.
  423. * Update debian/copyright (it's 2005).
  424. * Add sharedscripts tor logrotate.d/tor.
  425. -- Peter Palfrader <weasel@debian.org> Tue, 4 Jan 2005 11:14:03 +0100
  426. tor (0.0.9.1-1) unstable; urgency=low
  427. * New upstream version.
  428. -- Peter Palfrader <weasel@debian.org> Thu, 16 Dec 2004 00:16:47 +0100
  429. tor (0.0.8+0.0.9rc7-1) unstable; urgency=medium
  430. * New upstream release (candidate).
  431. For real this time. Looks like our rc6 orig.tar.gz
  432. was in fact the rc5 one.
  433. * forward port patches/07_log_to_file_by_default
  434. -- Peter Palfrader <weasel@debian.org> Wed, 8 Dec 2004 15:22:44 +0100
  435. tor (0.0.8+0.0.9rc6-1) unstable; urgency=medium
  436. * New upstream release (candidate).
  437. - cleans up more integer underflows that don't look exploitable.
  438. But one never knows (-> medium).
  439. * Remove those 'date' calls in debian/rules again that were
  440. added in rc5-1.
  441. -- Peter Palfrader <weasel@debian.org> Mon, 6 Dec 2004 11:11:23 +0100
  442. tor (0.0.8+0.0.9rc5-1) unstable; urgency=medium
  443. * New upstream release (candidate).
  444. - medium because it fixes an integer overflow that might
  445. be exploitable, but doesn't seem to be currently.
  446. * Add a few 'date' calls in debian/rules, so I can see how long
  447. building the docs take on autobuilders.
  448. -- Peter Palfrader <weasel@debian.org> Wed, 1 Dec 2004 10:02:08 +0100
  449. tor (0.0.8+0.0.9rc3-1) unstable; urgency=low
  450. * New upstream release (candidate).
  451. -- Peter Palfrader <weasel@debian.org> Thu, 25 Nov 2004 10:33:42 +0100
  452. tor (0.0.8+0.0.9rc2-1) unstable; urgency=low
  453. * New upstream release (candidate).
  454. * Nick's patch is now part of upstream, remove it from
  455. the debian diff.
  456. -- Peter Palfrader <weasel@debian.org> Wed, 24 Nov 2004 09:03:13 +0100
  457. tor (0.0.8+0.0.9rc1-1) unstable; urgency=low
  458. * New upstream release (candidate).
  459. * Apply nick's patch against config.c (1.267) to handle
  460. absense of units in BandwidthRate.
  461. -- Peter Palfrader <weasel@debian.org> Tue, 23 Nov 2004 11:57:49 +0100
  462. tor (0.0.8+0.0.9pre6-1) unstable; urgency=low
  463. * New upstream (pre)release.
  464. * Install control-spec.txt into usr/share/doc/tor/.
  465. -- Peter Palfrader <weasel@debian.org> Tue, 16 Nov 2004 04:49:32 +0100
  466. tor (0.0.8+0.0.9pre5-2) unstable; urgency=low
  467. * Symlink tor(8) manpage to torrc(5).
  468. * Make logs readable by the system administrators (group adm).
  469. * Point to /var/log/tor (the directory) instead of a single
  470. file (/var/log/tor/log) in the debian patch of the manpage.
  471. * Do not patch the default torrc to include settings we really want.
  472. Instead modify the compiled in default options. Those settings are
  473. - RunAsDaemon is enabled by default.
  474. - PidFile is set to /var/run/tor/tor.pid. No default upstream.
  475. - default logging goes to /var/log/tor/log instead of stdout.
  476. - DataDirectory is set to /var/lib/tor by default. No default upstream.
  477. This is also documented in the new debian/README.Debian.
  478. * Remove /usr/bin/tor-control.py from the binary package, it is
  479. not really useful yet, and wasn't meant to be installed by
  480. default.
  481. * Change init startup script to properly deal with tor
  482. printing stuff on startup.
  483. -- Peter Palfrader <weasel@debian.org> Fri, 12 Nov 2004 18:30:50 +0100
  484. tor (0.0.8+0.0.9pre5-1) unstable; urgency=low
  485. * New upstream (pre)release.
  486. * 04_fix_test can be backed out again.
  487. * Make sure all patches apply cleanly.
  488. * No longer use --pidfile, --logfile, and --runasdaemon
  489. command line options. Set them in the configfile instead.
  490. * Change the description slightly, to say "don't rely on the current Tor
  491. network if you really need strong anonymity", instead of "Tor will not
  492. provide anonymity currently".
  493. -- Peter Palfrader <weasel@debian.org> Wed, 10 Nov 2004 04:43:10 +0100
  494. tor (0.0.8+0.0.9pre4-1) unstable; urgency=low
  495. * New upstream (pre)release.
  496. * Apply patch from cvs to fix a segfault in src/or/test
  497. (test.c, 1.131).
  498. -- Peter Palfrader <weasel@debian.org> Sun, 17 Oct 2004 19:04:31 +0200
  499. tor (0.0.8+0.0.9pre3-1) unstable; urgency=high
  500. * New upstream (pre)release.
  501. * Fixes at least one segfault that can be triggered remotely,
  502. a format string vulnerability which probably is not exploitable,
  503. and several assert bugs.
  504. -- Peter Palfrader <weasel@debian.org> Thu, 14 Oct 2004 13:36:45 +0200
  505. tor (0.0.8+0.0.9pre2-1) unstable; urgency=low
  506. * New upstream (pre)release.
  507. -- Peter Palfrader <weasel@debian.org> Sun, 3 Oct 2004 01:29:13 +0200
  508. tor (0.0.8+0.0.9pre1-1) unstable; urgency=low
  509. * New upstream (pre)release.
  510. * Built depend on zlib1g-dev.
  511. -- Peter Palfrader <weasel@debian.org> Fri, 1 Oct 2004 21:28:49 +0200
  512. tor (0.0.8-1) unstable; urgency=low
  513. * New upstream release.
  514. -- Peter Palfrader <weasel@debian.org> Fri, 27 Aug 2004 14:08:10 +0200
  515. tor (0.0.7.2+0.0.8rc1-1) unstable; urgency=low
  516. * New upstream release candidate.
  517. * Install design paper in usr/share/doc/tor, not usr/share/doc. Ooops.
  518. -- Peter Palfrader <weasel@debian.org> Wed, 18 Aug 2004 09:59:13 +0200
  519. tor (0.0.7.2+0.0.8pre3-1) unstable; urgency=low
  520. * New upstream (pre)release.
  521. * Ship AUTHORS, doc/CLIENTS, doc/FAQ, doc/HACKING, doc/TODO,
  522. doc/tor-doc.{css,html}, doc/{rend,tor}-spec.txt with the binary package.
  523. * Build tor-design.{pdf,ps}, wich adds new build-dependencies:
  524. tetex-{bin,extra}, transfig, and gs.
  525. * Support DEB_BUILD_OPTIONS option 'nodoc' to skip building tor-design.
  526. With nodoc the build will not need tetex-{bin,extra}, transfig, and gs.
  527. * Support DEB_BUILD_OPTIONS option 'nocheck' to skip unittests
  528. ('notest' is an alias')
  529. * Enable coredumps by default, this is still development code.
  530. * Modify 02_add_debian_files_in_manpage to still apply.
  531. -- Peter Palfrader <weasel@debian.org> Sun, 8 Aug 2004 15:03:32 +0200
  532. tor (0.0.7.2+0.0.8pre2-1) unstable; urgency=low
  533. * New upstream (pre)release.
  534. * Depend on python as we now have a python script: tor_resolve
  535. -- Peter Palfrader <weasel@debian.org> Wed, 4 Aug 2004 20:09:26 +0200
  536. tor (0.0.7.2-1) unstable; urgency=medium
  537. * New upstream release.
  538. Fixes another instance of that remote crash bug.
  539. * Mention another reason why stop/reload may fail in the init script.
  540. -- Peter Palfrader <weasel@debian.org> Thu, 8 Jul 2004 03:21:32 +0200
  541. tor (0.0.7.1-1) unstable; urgency=medium
  542. * New upstream release.
  543. Fixes a bug that allows a remote crash on exit nodes.
  544. * Logrotate var/log/tor/*log instead of just var/log/tor/log, in
  545. case the admin wants several logs.
  546. -- Peter Palfrader <weasel@debian.org> Mon, 5 Jul 2004 19:18:12 +0200
  547. tor (0.0.7-1) unstable; urgency=low
  548. * New upstream version
  549. closes: #249893: FTBFS on ia64
  550. -- Peter Palfrader <weasel@debian.org> Mon, 7 Jun 2004 21:46:08 +0200
  551. tor (0.0.6.2-1) unstable; urgency=medium
  552. * New upstream release (breaks backwards compatibility yet again).
  553. * Recommend socat.
  554. * Since tor is in /usr/sbin, the manpage should be in section 8, not
  555. in section 1. Move it there, including updating the section in
  556. the manpage itself and the reference in torify(1).
  557. * Update debian/copyright file.
  558. -- Peter Palfrader <weasel@debian.org> Sun, 16 May 2004 10:47:20 +0200
  559. tor (0.0.6.1-1) unstable; urgency=medium
  560. * New upstream release (breaks backwards compatibility).
  561. -- Peter Palfrader <weasel@debian.org> Fri, 7 May 2004 00:24:49 +0200
  562. tor (0.0.6-1) unstable; urgency=low
  563. * New upstream release (breaks backwards compatibility).
  564. -- Peter Palfrader <weasel@debian.org> Sun, 2 May 2004 23:58:36 +0200
  565. tor (0.0.5+0.0.6rc4-1) unstable; urgency=low
  566. * New upstream release candidate.
  567. -- Peter Palfrader <weasel@debian.org> Sun, 2 May 2004 14:36:59 +0200
  568. tor (0.0.5+0.0.6rc3-1) unstable; urgency=low
  569. * New upstream release candidate.
  570. -- Peter Palfrader <weasel@debian.org> Thu, 29 Apr 2004 11:52:07 +0200
  571. tor (0.0.5+0.0.6rc2-1) unstable; urgency=low
  572. * New upstream release candidate.
  573. * Mention upstream website and mailinglist archives in long
  574. description.
  575. -- Peter Palfrader <weasel@debian.org> Mon, 26 Apr 2004 12:23:20 +0200
  576. tor (0.0.5-1) unstable; urgency=low
  577. * New upstream release.
  578. * Upstream installs a torrc.sample file now, rather than torrc.
  579. Keep using torrc as dpkg handles conffile upgrades.
  580. -- Peter Palfrader <weasel@debian.org> Tue, 30 Mar 2004 20:54:00 +0200
  581. tor (0.0.4-1) unstable; urgency=low
  582. * New upstream release (how the version numbers fly by :).
  583. -- Peter Palfrader <weasel@debian.org> Fri, 26 Mar 2004 23:46:09 +0100
  584. tor (0.0.3-1) unstable; urgency=low
  585. * New upstream release.
  586. * Also mention that tree.h is by Niels Provos in debian/copyright.
  587. -- Peter Palfrader <weasel@debian.org> Fri, 26 Mar 2004 20:36:08 +0100
  588. tor (0.0.2-1) unstable; urgency=low
  589. * New upstream release.
  590. * Uses strlcpy and strlcat by Todd C. Miller, mention him in
  591. debian/copyright.
  592. -- Peter Palfrader <weasel@debian.org> Fri, 19 Mar 2004 12:37:17 +0100
  593. tor (0.0.1+0.0.2pre27-1) unstable; urgency=low
  594. * New upstream release.
  595. -- Peter Palfrader <weasel@debian.org> Mon, 15 Mar 2004 05:19:16 +0100
  596. tor (0.0.1+0.0.2pre26-1) unstable; urgency=low
  597. * New upstream release.
  598. * Mention log and pidfile location in tor.1.
  599. -- Peter Palfrader <weasel@debian.org> Mon, 15 Mar 2004 02:21:29 +0100
  600. tor (0.0.1+0.0.2pre25-1) unstable; urgency=low
  601. * New upstream release.
  602. -- Peter Palfrader <weasel@debian.org> Thu, 4 Mar 2004 23:05:38 +0100
  603. tor (0.0.1+0.0.2pre24-1) unstable; urgency=low
  604. * New upstream release.
  605. * Do not strip binaries for now.
  606. * Add "# ulimit -c unlimited" to tor.default
  607. * Always enable DataDirectory.
  608. * Actually use dpatch now (to modify upstream torrc.in)
  609. * Wait for tor to die in init stop. Let the user know if it doesn't.
  610. -- Peter Palfrader <weasel@debian.org> Wed, 3 Mar 2004 14:10:25 +0100
  611. tor (0.0.1+0.0.2pre23-1) unstable; urgency=low
  612. * New upstream release.
  613. * The one test that always failed has been fixed: removed comment from
  614. rules file.
  615. -- Peter Palfrader <weasel@debian.org> Sun, 29 Feb 2004 12:36:33 +0100
  616. tor (0.0.1+0.0.2pre22-1) unstable; urgency=low
  617. * New upstream release.
  618. * Upstream has moved tor back to usr/bin, but we will keep it in
  619. usr/sbin. That's the right place and it doesn't break my tab
  620. completion there.
  621. -- Peter Palfrader <weasel@debian.org> Fri, 27 Feb 2004 01:59:09 +0100
  622. tor (0.0.1+0.0.2pre21-1) unstable; urgency=low
  623. * New upstream release.
  624. * 0.0.2pre20-2 removed the Recommends: on privoxy rather
  625. than tsocks (which is now required) by mistake. Fix that.
  626. * package description: Mention that the package starts the OP by default and
  627. that OR can be enabled in the config.
  628. * tor moved to sbin, updating init script.
  629. -- Peter Palfrader <weasel@debian.org> Wed, 18 Feb 2004 10:08:12 +0100
  630. tor (0.0.1+0.0.2pre20-2) unstable; urgency=low
  631. * Add torify script, documentation, and config file. Means we also
  632. depend on tsocks now rather than just recommending it. Right now
  633. we install it in debian/rules, but upcoming versions might install
  634. it in upstream's make install target.
  635. * There's an upstream ChangeLog file now. Enjoy!
  636. * Add a README.privoxy file that explains how to setup privoxy to
  637. go over tor.
  638. * As is the case too often, the INSTALL file not only covers
  639. installation, but also basic usage and configuration. Therefore
  640. include it in the docs dir.
  641. * Add a lintian override for the INSTALL file.
  642. -- Peter Palfrader <weasel@debian.org> Tue, 17 Feb 2004 02:32:00 +0100
  643. tor (0.0.1+0.0.2pre20-1) unstable; urgency=low
  644. * New upstream version.
  645. - various design paper updates
  646. - resolve cygwin warnings
  647. - split the token bucket into "rate" and "burst" params
  648. - try to resolve discrepency between bytes transmitted over TLS and actual
  649. bandwidth use
  650. - setuid to user _before_ complaining about running as root
  651. - fix several memleaks and double frees
  652. - minor logging fixes
  653. - add more debugging for logs.
  654. - various documentation fixes and improvements
  655. - for perforcmance testing, paths are always 3 hops, not "3 or more"
  656. (this will go away at a later date again)
  657. * Add dependency on adduser which was previously missing.
  658. * Change short description to a nicer one.
  659. -- Peter Palfrader <weasel@debian.org> Sat, 31 Jan 2004 10:10:45 +0100
  660. tor (0.0.1+0.0.2pre19-1) unstable; urgency=low
  661. * Initial Release (closes: #216611).
  662. -- Peter Palfrader <weasel@debian.org> Sat, 10 Jan 2004 11:20:06 +0100