+++ /dev/null
- o Minor bugfixes (coding best practices checks):
- - Allow the "practracker" coding best practices checking script to read
- unicode files, when using Python 2. We made the script use unicode
- literals in 0.4.3.1-alpha, but didn't change the codec for opening files.
- Fixes bug 33374; bugfix on 0.4.3.1-alpha.
+++ /dev/null
- o Documentation (manpage):
- - Document __OwningControllerProcess torrc option and specify polling
- interval. Resolves issue 32971.
+++ /dev/null
- o Minor features (directory authorities):
- - Directory authorities now reject descriptors from relays running Tor
- versions from the 0.2.9 and 0.4.0 series, but still allow the 0.3.5
- series. Resolves ticket 32672. Patch by Neel Chauhan.
+++ /dev/null
- o Major bugfixes (directory authority):
- - Directory authorities will now send a 503 (not enough bandwidth) code to
- clients when under bandwidth pressure. Known relays and other authorities
- will always be answered regardless of the bandwidth situation. Fixes bug
- 33029; bugfix on 0.1.2.5-alpha.
+++ /dev/null
- o Major bugfixes (security, denial-of-service):
- - Fix a denial-of-service bug that could be used by anyone to consume a
- bunch of CPU on any Tor relay or authority, or by directories to
- consume a bunch of CPU on clients or hidden services. Because
- of the potential for CPU consumption to introduce observable
- timing patterns, we are treating this as a high-severity security
- issue. Fixes bug 33119; bugfix on 0.2.1.5-alpha. We are also tracking
- this issue as TROVE-2020-002.
+++ /dev/null
- o Documentation (manpage):
- - Alphabetize the Server and Directory server sections of the tor
- manpage. Also split Statistics options into their own section
- of the manpage. Closes ticket 33188. Work by Swati Thacker as
- part of Google Season of Docs.
+++ /dev/null
- o Minor bugfixes (continuous integration):
- - Remove the buggy and unused mirroring job. Fixes bug 33213;
- bugfix on 0.3.2.2-alpha.
+++ /dev/null
- o Minor features (diagnostic):
- - Improve assertions and add some memory-poisoning code to try to track
- down possible causes of a rare crash (32564) in the EWMA code.
- Closes ticket 33290.
+++ /dev/null
- o Minor bugfix (relay, configuration):
- - Now warn if the ContactInfo field is not set and mention that the relay
- might get rejected if so. Fixes bug 33361; bugfix on 0.1.1.10-alpha.
+++ /dev/null
- o Minor features (usability):
- - Include more information when failing to parse a configuration value.
- This should make it easier to tell what's going wrong when a
- configuration file doesn't parse. Closes ticket 33460.
+++ /dev/null
- o Major bugfixes (circuit padding, memory leaks):
- - Avoid a remotely triggered memory leak in the case that a circuit
- padding machine is somehow negotiated twice on the same circuit. Fixes
- bug 33619; bugfix on 0.4.0.1-alpha. Found by Tobias Pulls. This is
- also tracked as TROVE-2020-004.
+++ /dev/null
- o Minor feature (sendme, flow control):
- - Default on sending SENDME version 1 cells. Closes ticket 33623.
+++ /dev/null
- o Minor bugfixes (onion services v3):
- - Fix assertion failure that could result from a corrupted ADD_ONION control
- port command. Found by Saibato. Fixes bug 33137; bugfix on
- 0.3.3.1-alpha. This issue is also being tracked as TROVE-2020-003.