changelog 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520
  1. tor (0.1.1.5-alpha-cvs-1) UNRELEASED; urgency=low
  2. * Even more experimental cvs snapshot.
  3. * Testsuite is mandatory again.
  4. * Forward port 03_tor_manpage_in_section_8.dpatch
  5. -- Peter Palfrader <weasel@debian.org> Fri, 9 Sep 2005 23:16:53 +0200
  6. tor (0.1.1.5-alpha-1) UNRELEASED; urgency=low
  7. * Experimental upstream version.
  8. * Allow test suite to fail, it's broken in this version.
  9. * Update list of files from doc/ that should be installed.
  10. * Forward port debian/ patches.
  11. -- Peter Palfrader <weasel@debian.org> Fri, 12 Aug 2005 17:02:23 +0200
  12. tor (0.1.0.14-1) unstable; urgency=high
  13. * New upstream version - changes, among others:
  14. - Fixes the other half of the bug with crypto handshakes.
  15. * Since gs-gpl on s390 is broken (#321435) and unable to
  16. build PDFs of our images for the design paper this version
  17. ships them in the source and uses them on s390, should building
  18. them from source really fail.
  19. * Increase standards-version from 3.6.1 to 3.6.2. No changes
  20. necessary.
  21. -- Peter Palfrader <weasel@debian.org> Mon, 8 Aug 2005 23:55:05 +0200
  22. tor (0.1.0.13-1) unstable; urgency=high
  23. * New upstream version:
  24. - Explicitly set no-unaligned-access for sparc in configure.in.
  25. it turns out the new gcc's let you compile broken code, but
  26. that doesn't make it not-broken (closes: #320140).
  27. - Fix a critical bug in the security of our crypto handshakes.
  28. (Therefore set urgency to high).
  29. and more (see upstream changelog).
  30. * Slightly improve init script to give you proper error messages when
  31. you do not run it as root.
  32. -- Peter Palfrader <weasel@debian.org> Fri, 5 Aug 2005 01:27:49 +0200
  33. tor (0.1.0.12-1) unstable; urgency=medium
  34. * New upstream version:
  35. - New IP for tor26 directory server,
  36. - fix a possible double-free in tor_gzip_uncompress,
  37. - and more (see upstream changelog).
  38. -- Peter Palfrader <weasel@debian.org> Tue, 19 Jul 2005 17:36:24 +0200
  39. tor (0.1.0.11-1) unstable; urgency=high
  40. * New upstream version (closes: #316753):
  41. - Fixes a serious bug: servers now honor their exit policies -
  42. In 0.1.0.x only clients enforced them so far. 0.0.9.x is
  43. not affected.
  44. * Build depend on libevent-dev >= 1.1.
  45. * Urgency high because 0.0.9.10-1 did not make it into testing after
  46. like 3 weeks because of an impending ftp-master move. So I might
  47. just as well upload this one.
  48. -- Peter Palfrader <weasel@debian.org> Mon, 4 Jul 2005 17:53:48 +0200
  49. tor (0.1.0.10-0.pre.1) UNRELEASED; urgency=low
  50. * New upstream version.
  51. * Add a watch file.
  52. * Forward port 03_tor_manpage_in_section_8.
  53. * Forward port 06_add_compile_time_defaults.
  54. * Add libevent-dev to build-depends.
  55. * Update URL to tor in debian/control and debian/copyright.
  56. * Add a snippet to disable epoll in etc/default/tor, commented out.
  57. * Add a snippet to set nice level in etc/default/tor.
  58. * Wait for 60 seconds in init stop. 35 is too little.
  59. * Don't depend on python anymore - tor-resolve is C now.
  60. * If "with-dmalloc" is in DEB_BUILD_OPTIONS we build against libdmalloc4.
  61. Of course the -dev package needs to be installed.
  62. * Update README.Debian to say that upstream now does have a default
  63. for DataDirectory.
  64. * Don't fail in the init script when we cannot raise the ulimit.
  65. Instead just warn a bit (closes: #312882).
  66. -- Peter Palfrader <weasel@debian.org> Wed, 15 Jun 2005 16:38:06 +0200
  67. tor (0.0.9.10-1) unstable; urgency=high
  68. * While we're waiting for a newer libevent to enter sid, make another
  69. upload of the 0.0.9.x tree:
  70. - Refuse relay cells that claim to have a length larger than the
  71. maximum allowed. This prevents a potential attack that could read
  72. arbitrary memory (e.g. keys) from an exit server's process.
  73. -- Peter Palfrader <weasel@debian.org> Thu, 16 Jun 2005 22:56:11 +0200
  74. tor (0.0.9.9-1) unstable; urgency=low
  75. * New upstream version.
  76. -- Peter Palfrader <weasel@debian.org> Sat, 23 Apr 2005 23:58:47 +0200
  77. tor (0.0.9.8-1) unstable; urgency=low
  78. * New upstream version.
  79. -- Peter Palfrader <weasel@debian.org> Fri, 8 Apr 2005 09:11:34 +0200
  80. tor (0.0.9.7-1) unstable; urgency=low
  81. * New upstream version.
  82. -- Peter Palfrader <weasel@debian.org> Fri, 1 Apr 2005 09:52:12 +0200
  83. tor (0.0.9.6-1) unstable; urgency=low
  84. * New upstream version.
  85. * Upstream used newer auto* tools, so hopefully the new config.sub
  86. and config.guess files (2003-08-18) are good enough to build
  87. tor on ppc64 (closes: #300376: FTBFS on ppc64).
  88. -- Peter Palfrader <weasel@debian.org> Fri, 25 Mar 2005 01:34:28 +0100
  89. tor (0.0.9.5-1) unstable; urgency=low
  90. * New upstream version.
  91. -- Peter Palfrader <weasel@debian.org> Thu, 24 Feb 2005 09:45:52 +0100
  92. tor (0.0.9.4-1) unstable; urgency=low
  93. * New upstream version.
  94. * Set ulimit for file descriptors to 4096 in our init
  95. script.
  96. * Use SIGINT to shutdown tor. That way - if you are a server -
  97. tor will stop accepting new connections immediately, and
  98. give existing connections a grace period of 30 seconds in
  99. which they might complete their task. If you just run a
  100. client it should make no difference.
  101. -- Peter Palfrader <weasel@debian.org> Fri, 4 Feb 2005 00:20:25 +0100
  102. tor (0.0.9.3-1) unstable; urgency=low
  103. * New upstream version.
  104. * Forward port 07_log_to_file_by_default.
  105. -- Peter Palfrader <weasel@debian.org> Sun, 23 Jan 2005 16:01:58 +0100
  106. tor (0.0.9.2-1) unstable; urgency=low
  107. * New upstream version.
  108. * Update debian/copyright (it's 2005).
  109. * Add sharedscripts tor logrotate.d/tor.
  110. -- Peter Palfrader <weasel@debian.org> Tue, 4 Jan 2005 11:14:03 +0100
  111. tor (0.0.9.1-1) unstable; urgency=low
  112. * New upstream version.
  113. -- Peter Palfrader <weasel@debian.org> Thu, 16 Dec 2004 00:16:47 +0100
  114. tor (0.0.8+0.0.9rc7-1) unstable; urgency=medium
  115. * New upstream release (candidate).
  116. For real this time. Looks like our rc6 orig.tar.gz
  117. was in fact the rc5 one.
  118. * forward port patches/07_log_to_file_by_default
  119. -- Peter Palfrader <weasel@debian.org> Wed, 8 Dec 2004 15:22:44 +0100
  120. tor (0.0.8+0.0.9rc6-1) unstable; urgency=medium
  121. * New upstream release (candidate).
  122. - cleans up more integer underflows that don't look exploitable.
  123. But one never knows (-> medium).
  124. * Remove those 'date' calls in debian/rules again that were
  125. added in rc5-1.
  126. -- Peter Palfrader <weasel@debian.org> Mon, 6 Dec 2004 11:11:23 +0100
  127. tor (0.0.8+0.0.9rc5-1) unstable; urgency=medium
  128. * New upstream release (candidate).
  129. - medium because it fixes an integer overflow that might
  130. be exploitable, but doesn't seem to be currently.
  131. * Add a few 'date' calls in debian/rules, so I can see how long
  132. building the docs take on autobuilders.
  133. -- Peter Palfrader <weasel@debian.org> Wed, 1 Dec 2004 10:02:08 +0100
  134. tor (0.0.8+0.0.9rc3-1) unstable; urgency=low
  135. * New upstream release (candidate).
  136. -- Peter Palfrader <weasel@debian.org> Thu, 25 Nov 2004 10:33:42 +0100
  137. tor (0.0.8+0.0.9rc2-1) unstable; urgency=low
  138. * New upstream release (candidate).
  139. * Nick's patch is now part of upstream, remove it from
  140. the debian diff.
  141. -- Peter Palfrader <weasel@debian.org> Wed, 24 Nov 2004 09:03:13 +0100
  142. tor (0.0.8+0.0.9rc1-1) unstable; urgency=low
  143. * New upstream release (candidate).
  144. * Apply nick's patch against config.c (1.267) to handle
  145. absense of units in BandwidthRate.
  146. -- Peter Palfrader <weasel@debian.org> Tue, 23 Nov 2004 11:57:49 +0100
  147. tor (0.0.8+0.0.9pre6-1) unstable; urgency=low
  148. * New upstream (pre)release.
  149. * Install control-spec.txt into usr/share/doc/tor/.
  150. -- Peter Palfrader <weasel@debian.org> Tue, 16 Nov 2004 04:49:32 +0100
  151. tor (0.0.8+0.0.9pre5-2) unstable; urgency=low
  152. * Symlink tor(8) manpage to torrc(5).
  153. * Make logs readable by the system administrators (group adm).
  154. * Point to /var/log/tor (the directory) instead of a single
  155. file (/var/log/tor/log) in the debian patch of the manpage.
  156. * Do not patch the default torrc to include settings we really want.
  157. Instead modify the compiled in default options. Those settings are
  158. - RunAsDaemon is enabled by default.
  159. - PidFile is set to /var/run/tor/tor.pid. No default upstream.
  160. - default logging goes to /var/log/tor/log instead of stdout.
  161. - DataDirectory is set to /var/lib/tor by default. No default upstream.
  162. This is also documented in the new debian/README.Debian.
  163. * Remove /usr/bin/tor-control.py from the binary package, it is
  164. not really useful yet, and wasn't meant to be installed by
  165. default.
  166. * Change init startup script to properly deal with tor
  167. printing stuff on startup.
  168. -- Peter Palfrader <weasel@debian.org> Fri, 12 Nov 2004 18:30:50 +0100
  169. tor (0.0.8+0.0.9pre5-1) unstable; urgency=low
  170. * New upstream (pre)release.
  171. * 04_fix_test can be backed out again.
  172. * Make sure all patches apply cleanly.
  173. * No longer use --pidfile, --logfile, and --runasdaemon
  174. command line options. Set them in the configfile instead.
  175. * Change the description slightly, to say "don't rely on the current Tor
  176. network if you really need strong anonymity", instead of "Tor will not
  177. provide anonymity currently".
  178. -- Peter Palfrader <weasel@debian.org> Wed, 10 Nov 2004 04:43:10 +0100
  179. tor (0.0.8+0.0.9pre4-1) unstable; urgency=low
  180. * New upstream (pre)release.
  181. * Apply patch from cvs to fix a segfault in src/or/test
  182. (test.c, 1.131).
  183. -- Peter Palfrader <weasel@debian.org> Sun, 17 Oct 2004 19:04:31 +0200
  184. tor (0.0.8+0.0.9pre3-1) unstable; urgency=high
  185. * New upstream (pre)release.
  186. * Fixes at least one segfault that can be triggered remotely,
  187. a format string vulnerability which probably is not exploitable,
  188. and several assert bugs.
  189. -- Peter Palfrader <weasel@debian.org> Thu, 14 Oct 2004 13:36:45 +0200
  190. tor (0.0.8+0.0.9pre2-1) unstable; urgency=low
  191. * New upstream (pre)release.
  192. -- Peter Palfrader <weasel@debian.org> Sun, 3 Oct 2004 01:29:13 +0200
  193. tor (0.0.8+0.0.9pre1-1) unstable; urgency=low
  194. * New upstream (pre)release.
  195. * Built depend on zlib1g-dev.
  196. -- Peter Palfrader <weasel@debian.org> Fri, 1 Oct 2004 21:28:49 +0200
  197. tor (0.0.8-1) unstable; urgency=low
  198. * New upstream release.
  199. -- Peter Palfrader <weasel@debian.org> Fri, 27 Aug 2004 14:08:10 +0200
  200. tor (0.0.7.2+0.0.8rc1-1) unstable; urgency=low
  201. * New upstream release candidate.
  202. * Install design paper in usr/share/doc/tor, not usr/share/doc. Ooops.
  203. -- Peter Palfrader <weasel@debian.org> Wed, 18 Aug 2004 09:59:13 +0200
  204. tor (0.0.7.2+0.0.8pre3-1) unstable; urgency=low
  205. * New upstream (pre)release.
  206. * Ship AUTHORS, doc/CLIENTS, doc/FAQ, doc/HACKING, doc/TODO,
  207. doc/tor-doc.{css,html}, doc/{rend,tor}-spec.txt with the binary package.
  208. * Build tor-design.{pdf,ps}, wich adds new build-dependencies:
  209. tetex-{bin,extra}, transfig, and gs.
  210. * Support DEB_BUILD_OPTIONS option 'nodoc' to skip building tor-design.
  211. With nodoc the build will not need tetex-{bin,extra}, transfig, and gs.
  212. * Support DEB_BUILD_OPTIONS option 'nocheck' to skip unittests
  213. ('notest' is an alias')
  214. * Enable coredumps by default, this is still development code.
  215. * Modify 02_add_debian_files_in_manpage to still apply.
  216. -- Peter Palfrader <weasel@debian.org> Sun, 8 Aug 2004 15:03:32 +0200
  217. tor (0.0.7.2+0.0.8pre2-1) unstable; urgency=low
  218. * New upstream (pre)release.
  219. * Depend on python as we now have a python script: tor_resolve
  220. -- Peter Palfrader <weasel@debian.org> Wed, 4 Aug 2004 20:09:26 +0200
  221. tor (0.0.7.2-1) unstable; urgency=medium
  222. * New upstream release.
  223. Fixes another instance of that remote crash bug.
  224. * Mention another reason why stop/reload may fail in the init script.
  225. -- Peter Palfrader <weasel@debian.org> Thu, 8 Jul 2004 03:21:32 +0200
  226. tor (0.0.7.1-1) unstable; urgency=medium
  227. * New upstream release.
  228. Fixes a bug that allows a remote crash on exit nodes.
  229. * Logrotate var/log/tor/*log instead of just var/log/tor/log, in
  230. case the admin wants several logs.
  231. -- Peter Palfrader <weasel@debian.org> Mon, 5 Jul 2004 19:18:12 +0200
  232. tor (0.0.7-1) unstable; urgency=low
  233. * New upstream version
  234. closes: #249893: FTBFS on ia64
  235. -- Peter Palfrader <weasel@debian.org> Mon, 7 Jun 2004 21:46:08 +0200
  236. tor (0.0.6.2-1) unstable; urgency=medium
  237. * New upstream release (breaks backwards compatibility yet again).
  238. * Recommend socat.
  239. * Since tor is in /usr/sbin, the manpage should be in section 8, not
  240. in section 1. Move it there, including updating the section in
  241. the manpage itself and the reference in torify(1).
  242. * Update debian/copyright file.
  243. -- Peter Palfrader <weasel@debian.org> Sun, 16 May 2004 10:47:20 +0200
  244. tor (0.0.6.1-1) unstable; urgency=medium
  245. * New upstream release (breaks backwards compatibility).
  246. -- Peter Palfrader <weasel@debian.org> Fri, 7 May 2004 00:24:49 +0200
  247. tor (0.0.6-1) unstable; urgency=low
  248. * New upstream release (breaks backwards compatibility).
  249. -- Peter Palfrader <weasel@debian.org> Sun, 2 May 2004 23:58:36 +0200
  250. tor (0.0.5+0.0.6rc4-1) unstable; urgency=low
  251. * New upstream release candidate.
  252. -- Peter Palfrader <weasel@debian.org> Sun, 2 May 2004 14:36:59 +0200
  253. tor (0.0.5+0.0.6rc3-1) unstable; urgency=low
  254. * New upstream release candidate.
  255. -- Peter Palfrader <weasel@debian.org> Thu, 29 Apr 2004 11:52:07 +0200
  256. tor (0.0.5+0.0.6rc2-1) unstable; urgency=low
  257. * New upstream release candidate.
  258. * Mention upstream website and mailinglist archives in long
  259. description.
  260. -- Peter Palfrader <weasel@debian.org> Mon, 26 Apr 2004 12:23:20 +0200
  261. tor (0.0.5-1) unstable; urgency=low
  262. * New upstream release.
  263. * Upstream installs a torrc.sample file now, rather than torrc.
  264. Keep using torrc as dpkg handles conffile upgrades.
  265. -- Peter Palfrader <weasel@debian.org> Tue, 30 Mar 2004 20:54:00 +0200
  266. tor (0.0.4-1) unstable; urgency=low
  267. * New upstream release (how the version numbers fly by :).
  268. -- Peter Palfrader <weasel@debian.org> Fri, 26 Mar 2004 23:46:09 +0100
  269. tor (0.0.3-1) unstable; urgency=low
  270. * New upstream release.
  271. * Also mention that tree.h is by Niels Provos in debian/copyright.
  272. -- Peter Palfrader <weasel@debian.org> Fri, 26 Mar 2004 20:36:08 +0100
  273. tor (0.0.2-1) unstable; urgency=low
  274. * New upstream release.
  275. * Uses strlcpy and strlcat by Todd C. Miller, mention him in
  276. debian/copyright.
  277. -- Peter Palfrader <weasel@debian.org> Fri, 19 Mar 2004 12:37:17 +0100
  278. tor (0.0.1+0.0.2pre27-1) unstable; urgency=low
  279. * New upstream release.
  280. -- Peter Palfrader <weasel@debian.org> Mon, 15 Mar 2004 05:19:16 +0100
  281. tor (0.0.1+0.0.2pre26-1) unstable; urgency=low
  282. * New upstream release.
  283. * Mention log and pidfile location in tor.1.
  284. -- Peter Palfrader <weasel@debian.org> Mon, 15 Mar 2004 02:21:29 +0100
  285. tor (0.0.1+0.0.2pre25-1) unstable; urgency=low
  286. * New upstream release.
  287. -- Peter Palfrader <weasel@debian.org> Thu, 4 Mar 2004 23:05:38 +0100
  288. tor (0.0.1+0.0.2pre24-1) unstable; urgency=low
  289. * New upstream release.
  290. * Do not strip binaries for now.
  291. * Add "# ulimit -c unlimited" to tor.default
  292. * Always enable DataDirectory.
  293. * Actually use dpatch now (to modify upstream torrc.in)
  294. * Wait for tor to die in init stop. Let the user know if it doesn't.
  295. -- Peter Palfrader <weasel@debian.org> Wed, 3 Mar 2004 14:10:25 +0100
  296. tor (0.0.1+0.0.2pre23-1) unstable; urgency=low
  297. * New upstream release.
  298. * The one test that always failed has been fixed: removed comment from
  299. rules file.
  300. -- Peter Palfrader <weasel@debian.org> Sun, 29 Feb 2004 12:36:33 +0100
  301. tor (0.0.1+0.0.2pre22-1) unstable; urgency=low
  302. * New upstream release.
  303. * Upstream has moved tor back to usr/bin, but we will keep it in
  304. usr/sbin. That's the right place and it doesn't break my tab
  305. completion there.
  306. -- Peter Palfrader <weasel@debian.org> Fri, 27 Feb 2004 01:59:09 +0100
  307. tor (0.0.1+0.0.2pre21-1) unstable; urgency=low
  308. * New upstream release.
  309. * 0.0.2pre20-2 removed the Recommends: on privoxy rather
  310. than tsocks (which is now required) by mistake. Fix that.
  311. * package description: Mention that the package starts the OP by default and
  312. that OR can be enabled in the config.
  313. * tor moved to sbin, updating init script.
  314. -- Peter Palfrader <weasel@debian.org> Wed, 18 Feb 2004 10:08:12 +0100
  315. tor (0.0.1+0.0.2pre20-2) unstable; urgency=low
  316. * Add torify script, documentation, and config file. Means we also
  317. depend on tsocks now rather than just recommending it. Right now
  318. we install it in debian/rules, but upcoming versions might install
  319. it in upstream's make install target.
  320. * There's an upstream ChangeLog file now. Enjoy!
  321. * Add a README.privoxy file that explains how to setup privoxy to
  322. go over tor.
  323. * As is the case too often, the INSTALL file not only covers
  324. installation, but also basic usage and configuration. Therefore
  325. include it in the docs dir.
  326. * Add a lintian override for the INSTALL file.
  327. -- Peter Palfrader <weasel@debian.org> Tue, 17 Feb 2004 02:32:00 +0100
  328. tor (0.0.1+0.0.2pre20-1) unstable; urgency=low
  329. * New upstream version.
  330. - various design paper updates
  331. - resolve cygwin warnings
  332. - split the token bucket into "rate" and "burst" params
  333. - try to resolve discrepency between bytes transmitted over TLS and actual
  334. bandwidth use
  335. - setuid to user _before_ complaining about running as root
  336. - fix several memleaks and double frees
  337. - minor logging fixes
  338. - add more debugging for logs.
  339. - various documentation fixes and improvements
  340. - for perforcmance testing, paths are always 3 hops, not "3 or more"
  341. (this will go away at a later date again)
  342. * Add dependency on adduser which was previously missing.
  343. * Change short description to a nicer one.
  344. -- Peter Palfrader <weasel@debian.org> Sat, 31 Jan 2004 10:10:45 +0100
  345. tor (0.0.1+0.0.2pre19-1) unstable; urgency=low
  346. * Initial Release (closes: #216611).
  347. -- Peter Palfrader <weasel@debian.org> Sat, 10 Jan 2004 11:20:06 +0100