Start a changelog for 0.4.3.8

14 files changed, 68 insertions, 57 deletions

diff --git a/ChangeLog b/ChangeLog
index e16e6fbed1..e7bcb7d3ec 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,71 @@
+Changes in version 0.4.3.8 - 2020-02-03
+  BLURB BLURB
+
+  o Major bugfixes (onion service v3, backport from 0.4.5.3-rc):
+    - Stop requiring a live consensus for v3 clients and services, and
+      allow a "reasonably live" consensus instead. This allows v3 onion
+      services to work even if the authorities fail to generate a
+      consensus for more than 2 hours in a row. Fixes bug 40237; bugfix
+      on 0.3.5.1-alpha.
+
+  o Major bugfixes (stats, onion services, backport from 0.4.4.5):
+    - Fix a bug where we were undercounting the Tor network's total
+      onion service traffic, by ignoring any traffic originating from
+      clients. Now we count traffic from both clients and services.
+      Fixes bug 40117; bugfix on 0.2.6.2-alpha.
+
+  o Minor feature (build system, backport from 0.4.5.4-rc):
+    - New "make lsp" command to generate the compile_commands.json file
+      used by the ccls language server. The "bear" program is needed for
+      this. Closes ticket 40227.
+
+  o Minor features (compilation, backport from 0.4.5.2-rc):
+    - Disable deprecation warnings when building with OpenSSL 3.0.0 or
+      later. There are a number of APIs newly deprecated in OpenSSL
+      3.0.0 that Tor still requires. (A later version of Tor will try to
+      stop depending on these APIs.) Closes ticket 40165.
+
+  o Minor features (crypto, backport from 0.4.5.3-rc):
+    - Fix undefined behavior on our Keccak library. The bug only
+      appeared on platforms with 32-byte CPU cache lines (e.g. armv5tel)
+      and would result in wrong digests. Fixes bug 40210; bugfix on
+      0.2.8.1-alpha. Thanks to Bernhard Übelacker, Arnd Bergmann and
+      weasel for diagnosing this.
+
+  o Minor bugfixes (compatibility, backport from 0.4.5.1-rc):
+    - Strip '\r' characters when reading text files on Unix platforms.
+      This should resolve an issue where a relay operator migrates a
+      relay from Windows to Unix, but does not change the line ending of
+      Tor's various state files to match the platform, and the CRLF line
+      endings from Windows end up leaking into other files such as the
+      extra-info document. Fixes bug 33781; bugfix on 0.0.9pre5.
+
+  o Minor bugfixes (compilation, backport from 0.4.5.1-rc):
+    - Resolve a compilation warning that could occur in
+      test_connection.c. Fixes bug 40113; bugfix on 0.2.9.3-alpha.
+
+  o Minor bugfixes (compilation, backport from 0.4.5.3-rc):
+    - Fix a compilation warning about unreachable fallthrough
+      annotations when building with "--enable-all-bugs-are-fatal" on
+      some compilers. Fixes bug 40241; bugfix on 0.3.5.4-alpha.
+
+  o Minor bugfixes (SOCKS5, backport from 0.4.5.3-rc):
+    - Handle partial SOCKS5 messages correctly. Previously, our code
+      would send an incorrect error message if it got a SOCKS5 request
+      that wasn't complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha.
+
+  o Minor bugfixes (testing, backport from 0.4.5.2-alpha):
+    - Fix the `config/parse_tcp_proxy_line` test so that it works
+      correctly on systems where the DNS provider hijacks invalid
+      queries. Fixes part of bug 40179; bugfix on 0.4.3.1-alpha.
+    - Fix our Python reference-implementation for the v3 onion service
+      handshake so that it works correctly with the version of hashlib
+      provided by Python 3.9. Fixes part of bug 40179; bugfix
+      on 0.3.1.6-rc.
+    - Fix the `tortls/openssl/log_one_error` test to work with OpenSSL
+      3.0.0. Fixes bug 40170; bugfix on 0.2.8.1-alpha.
+
+
 Changes in version 0.4.3.7 - 2020-11-12
   Tor 0.4.3.7 backports several bugfixes from later releases. It
   includes a fix for TROVE-2020-005, a security issue that could be
diff --git a/changes/40241 b/changes/40241
deleted file mode 100644
index c9b2e2c011..0000000000
--- a/changes/40241
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (compilation):
-    - Fix a compilation warning about unreachable fallthrough annotations
-      when building with "--enable-all-bugs-are-fatal" on some compilers.
-      Fixes bug 40241; bugfix on 0.3.5.4-alpha.
diff --git a/changes/40241_v2 b/changes/40241_v2
deleted file mode 100644
index 85038297f7..0000000000
--- a/changes/40241_v2
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (compilation):
-    - Fix another warning about unreachable fallthrough annotations
-      when building with "--enable-all-bugs-are-fatal" on some compilers.
-      Fixes bug 40241; bugfix on 0.4.5.3-rc.
diff --git a/changes/bug33781 b/changes/bug33781
deleted file mode 100644
index 9f63ab0a2c..0000000000
--- a/changes/bug33781
+++ /dev/null
@@ -1,7 +0,0 @@
-  o Minor bugfixes (compatibility):
-    - Strip '\r' characters when reading text files on Unix platforms.
-      This should resolve an issue where a relay operator migrates a relay from
-      Windows to Unix, but does not change the line ending of Tor's various state
-      files to match the platform, the CRLF line endings from Windows ends up leaking
-      into other files such as the extra-info document. Fixes bug 33781; bugfix on
-      0.0.9pre5.
diff --git a/changes/bug40113 b/changes/bug40113
deleted file mode 100644
index adf4634097..0000000000
--- a/changes/bug40113
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor bugfixes (compilation):
-    - Resolve a compilation warning that could occur in test_connection.c.
-      Fixes bug 40113; bugfix on 0.2.9.3-alpha.
diff --git a/changes/bug40117 b/changes/bug40117
deleted file mode 100644
index 77646edf9c..0000000000
--- a/changes/bug40117
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Major bugfixes (stats, onion services):
-    - Fix a bug where we were undercounting the Tor network's total onion
-      service traffic, by only counting rendezvous traffic originating from
-      services and ignoring any traffic originating from clients. Fixes bug
-      40117; bugfix on 0.2.6.2-alpha.
diff --git a/changes/bug40179_part1 b/changes/bug40179_part1
deleted file mode 100644
index c302373534..0000000000
--- a/changes/bug40179_part1
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (testing, portability):
-    - Fix our Python reference-implementation for the v3 onion service
-      handshake so that it works correctly with the version of hashlib provided
-      by Python 3.9. Fixes part of bug 40179; bugfix on 0.3.1.6-rc.
diff --git a/changes/bug40179_part2 b/changes/bug40179_part2
deleted file mode 100644
index 15dc861321..0000000000
--- a/changes/bug40179_part2
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (testing):
-    - Fix the config/parse_tcp_proxy_line test so that it works correctly on
-      systems where the DNS provider hijacks invalid queries.
-      Fixes part of bug 40179; bugfix on 0.4.3.1-alpha.
diff --git a/changes/bug40190 b/changes/bug40190
deleted file mode 100644
index 0f3d6941dc..0000000000
--- a/changes/bug40190
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (SOCKS5):
-    - Handle partial socks5 messages correctly.  Previously, our code would
-      send an incorrect error message if it got a socks5 request that wasn't
-      complete. Fixes bug 40190; bugfix on 0.3.5.1-alpha.
diff --git a/changes/bug40210 b/changes/bug40210
deleted file mode 100644
index f492262a11..0000000000
--- a/changes/bug40210
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor features (crypto):
-    - Fix undefined behavior on our Keccak library. The bug only appears on
-      platforms with 32-byte CPU cache lines (e.g. armv5tel) and would result
-      in wrong digests. Fixes bug 40210; bugfix on 0.2.8.1-alpha. Thanks to
-      Bernhard Übelacker, Arnd Bergmann and weasel for diagnosing this.
diff --git a/changes/ticket40165 b/changes/ticket40165
deleted file mode 100644
index a8dd0a339b..0000000000
--- a/changes/ticket40165
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor features (compilation):
-    - Disable deprecation warnings when building with OpenSSL 3.0.0 or later.
-      There are a number of newly deprecated APIs in OpenSSL 3.0.0 that Tor
-      still requires.  (A later version of Tor will try to stop depending on
-      these.)  Closes ticket 40165.
diff --git a/changes/ticket40170 b/changes/ticket40170
deleted file mode 100644
index cc1c8dbad1..0000000000
--- a/changes/ticket40170
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor bugfixes (tests):
-    - Fix the "tortls/openssl/log_one_error" test to work with OpenSSL 3.0.0.
-      Fixes bug 40170; bugfix on 0.2.8.1-alpha.
diff --git a/changes/ticket40227 b/changes/ticket40227
deleted file mode 100644
index e5efad0f95..0000000000
--- a/changes/ticket40227
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor feature (build system):
-    - New "make lsp" command to auto generate the compile_commands.json file
-      used by the ccls server. The "bear" program is needed for this. Closes
-      ticket 40227.
diff --git a/changes/ticket40237 b/changes/ticket40237
deleted file mode 100644
index fc32f59cd4..0000000000
--- a/changes/ticket40237
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Major bugfixes (onion service v3):
-    - Stop requiring a live consensus for v3 clients and services to work. The
-      use of a reasonably live consensus will allow v3 to work properly in most
-      cases if the network failed to generate a consensus for more than 2 hours
-      in a row. Fixes bug 40237; bugfix on 0.3.5.1-alpha.