Delivery-Date: Mon, 20 Oct 2014 15:16:15 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 5892A1E08D3;
	Mon, 20 Oct 2014 15:16:14 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id A136730908;
	Mon, 20 Oct 2014 19:16:09 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 42745305CE
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 19:16:06 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id be8xuOtnJurY for <tor-talk@lists.torproject.org>;
 Mon, 20 Oct 2014 19:16:06 +0000 (UTC)
Received: from mail-lb0-x22f.google.com (mail-lb0-x22f.google.com
 [IPv6:2a00:1450:4010:c04::22f])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id E1C502F97B
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 19:16:05 +0000 (UTC)
Received: by mail-lb0-f175.google.com with SMTP id u10so4533599lbd.34
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 12:16:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:sender:date:message-id:subject:from:to:content-type;
 bh=8jUuOR6TvSZiXpS01ztsU/EHygB8DrvqHC2oZO3QVzA=;
 b=nfOkgpf4x+LGMJJXcy8gWN1qYsUi4dBnIHshkIgabjB8MpZKMO7YXKo17rrWHZS6zn
 PDxAVhbiObIdaekMEoogiB75F4+hUGSfR2yOIWoy8wRsCRXIVXUJFslXSbBRQSVJu0XD
 A7RvS7UazGDLy/NB8xIqB/d1kKFuZjiLhFwUvgt/v8ct9L5GnXbkusp+4e2Kwc2mfvJI
 yG9VHL2tVYonEPIHaUY1IiylIh1nLwGeDGJzz5ZdAxRRSAckn5QwWP3ZhMZcKPufAw2i
 UX00DSQ5TD1sStgnx1Tzi5BXF3/2dfsgRPG3NQdbV3VbmA1y+Kfi9WQrzWqeYnA/rSbU
 MbPw==
MIME-Version: 1.0
X-Received: by 10.152.10.143 with SMTP id i15mr29814981lab.5.1413832562566;
 Mon, 20 Oct 2014 12:16:02 -0700 (PDT)
Received: by 10.112.14.10 with HTTP; Mon, 20 Oct 2014 12:16:02 -0700 (PDT)
Date: Mon, 20 Oct 2014 15:16:02 -0400
X-Google-Sender-Auth: LbODLaYwxkR4aWEgRXV3VGHjieI
Message-ID: <CAKDKvuymhofZQmKAP-iYnbzLjKzFSHJkwFk4gPCOmjgo+=OFEw@mail.gmail.com>
From: Nick Mathewson <nickm@torproject.org>
To: "tor-talk@lists.torproject.org" <tor-talk@lists.torproject.org>
Subject: [tor-talk] ANN: Tor-0.2.5.9-rc is released; packages to follow
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Hi, all!

We've almost got the Tor 0.2.5 release series done.  This morning I
released Tor 0.2.5.9-rc, which I hope will be the final release
candidate.

Packages are not built yet, but will follow soon.

You can download the source from the usual places, including
https://dist.torproject.org .

The changelog is as follows:

Changes in version 0.2.5.9-rc - 2014-10-20
  Tor 0.2.5.9-rc is the third release candidate for the Tor 0.2.5.x
  series. It disables SSL3 in response to the recent "POODLE" attack
  (even though POODLE does not affect Tor). It also works around a crash
  bug caused by some operating systems' response to the "POODLE" attack
  (which does affect Tor). It also contains a few miscellaneous fixes.

  o Major security fixes:
    - Disable support for SSLv3. All versions of OpenSSL in use with Tor
      today support TLS 1.0 or later, so we can safely turn off support
      for this old (and insecure) protocol. Fixes bug 13426.

  o Major bugfixes (openssl bug workaround):
    - Avoid crashing when using OpenSSL version 0.9.8zc, 1.0.0o, or
      1.0.1j, built with the 'no-ssl3' configuration option. Fixes bug
      13471. This is a workaround for an OpenSSL bug.

  o Minor bugfixes:
    - Disable the sandbox name resolver cache when running tor-resolve:
      tor-resolve doesn't use the sandbox code, and turning it on was
      breaking attempts to do tor-resolve on a non-default server on
      Linux. Fixes bug 13295; bugfix on 0.2.5.3-alpha.

  o Compilation fixes:
    - Build and run correctly on systems like OpenBSD-current that have
      patched OpenSSL to remove get_cipher_by_char and/or its
      implementations. Fixes issue 13325.

  o Downgraded warnings:
    - Downgrade the severity of the 'unexpected sendme cell from client'
      from 'warn' to 'protocol warning'. Closes ticket 8093.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

