cleanup and blurb for 0.2.3.13-alpha

1 files changed, 25 insertions, 19 deletions

diff --git a/ChangeLog b/ChangeLog
index f4e49dbf5..3f2ccf1fe 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,15 +1,21 @@
-Changes in version 0.2.3.13-alpha - 2012-03-1?
+Changes in version 0.2.3.13-alpha - 2012-03-26
+  Tor 0.2.3.13-alpha fixes a variety of stability and correctness bugs
+  in managed pluggable transports, as well as providing other cleanups
+  that get us closer to a release candidate.
+
   o Directory authority changes:
     - Change IP address for maatuska (v3 directory authority).
 
   o Security fixes:
-    - Never use a bridge as an exit, even if it claims to be one. Found by
-      wanoskarnet. Fixes bug 5342. Bugfix on ????.
+    - Never use a bridge or a controller-supplied node as an exit, even
+      if its exit policy allows it. Found by wanoskarnet. Fixes bug
+      5342. Bugfix on 0.1.1.15-rc (for controller-purpose descriptors)
+      and 0.2.0.3-alpha (for bridge-purpose descriptors).
     - Only build circuits if we have a sufficient threshold of the total
-      descriptors marked in the consensus with the "Exit" flag. This
-      mitigates an attack proposed by wanoskarnet, in which all of
-      a client's bridges collude to restrict the exit nodes that the
-      client knows about. Fixes bug 5343.
+      descriptors that are marked in the consensus with the "Exit"
+      flag. This mitigates an attack proposed by wanoskarnet, in which
+      all of a client's bridges collude to restrict the exit nodes that
+      the client knows about. Fixes bug 5343.
 
   o Major bugfixes (on Tor 0.2.3.x):
     - Avoid an assert when managed proxies like obfsproxy are configured,
@@ -37,7 +43,7 @@ Changes in version 0.2.3.13-alpha - 2012-03-1?
       0.1.0.1-rc which introduced cannibalization.
     - Detect and reject certain misformed escape sequences in
       configuration values. Previously, these values would cause us
-      to crash if received in a torrc file or over an (authenticated)
+      to crash if received in a torrc file or over an authenticated
       control port. Bug found by Esteban Manchado Velázquez, and
       independently by Robert Connolly from Matta Consulting who further
       noted that it allows a post-authentication heap overflow. Patch
@@ -45,13 +51,13 @@ Changes in version 0.2.3.13-alpha - 2012-03-1?
       on 0.2.0.16-alpha.
     - Fix a compile warning when using the --enable-openbsd-malloc
       configure option. Fixes bug 5340; bugfix on 0.2.0.20-rc.
-    - Directory caches no longer refuse to clean out descriptors when
-      because of missing v2 networkstatus documents, unless they're
-      actually trying to retrieve v2 networkstatus documents. Fixes bug
-      4838; bugfix on 0.2.2.26-beta. Patch by Daniel Bryg.
+    - Directory caches no longer refuse to clean out descriptors because
+      of missing v2 networkstatus documents, unless they're configured
+      to retrieve v2 networkstatus documents. Fixes bug 4838; bugfix on
+      0.2.2.26-beta. Patch by Daniel Bryg.
     - Update to the latest version of the tinytest unit testing framework.
       This includes a couple of bugfixes that can be relevant for
-      running forked unit tests on Windows, and a removal of all reserved
+      running forked unit tests on Windows, and removes all reserved
       identifiers.
 
   o Minor bugfixes (on 0.2.3.x):
@@ -64,13 +70,13 @@ Changes in version 0.2.3.13-alpha - 2012-03-1?
       option, so that the IP stack doesn't decide to use it for IPv4
       too. Fixes bug 4760; bugfix on 0.2.3.9-alpha.
     - Ensure that variables set in Tor's environment cannot override
-      environment variables which Tor tries to pass to a managed
+      environment variables that Tor passes to a managed
       pluggable-transport proxy. Previously, Tor would pass every
-      variable in its environment to managed proxies along with the
-      new ones, in such a way that on many operating systems, the
-      inherited environment variables would override those which Tor
-      tried to explicitly set. Bugfix on 0.2.3.12-alpha for most
-      Unixoid systems; bugfix on 0.2.3.9-alpha for Windows.
+      variable in its environment to managed proxies along with the new
+      ones, in such a way that on many operating systems, the inherited
+      environment variables would override those which Tor tried to
+      explicitly set. Bugfix on 0.2.3.12-alpha for most Unixoid systems;
+      bugfix on 0.2.3.9-alpha for Windows.
 
   o Minor features:
     - A wide variety of new unit tests by Esteban Manchado Velázquez.