changes/bug15205

-  o Major bugfixes (crash, OSX, security):
-    - Fix a remote denial-of-service opportunity caused by a bug
-      in OSX's _strlcat_chk() function. Fixes bug 15205; bug first
-      appeared in OSX 10.9. 
-      

changes/bug8093

-  o Downgraded warnings:
-    - Downgrade the severity of the 'unexpected sendme cell from client' from
-      'warn' to 'protocol warning'. Closes ticket 8093.

changes/bug8387

-  o Major bugfixes (client):
-
-    - Perform circuit cleanup operations even when circuit
-      construction operations are disabled (because the network is
-      disabled, or because there isn't enough directory information).
-      Previously, when we were not building predictive circuits, we
-      were not closing expired circuits either.
-
-      Fixes bug 8387; bugfix on 0.1.1.11-alpha. This bug became visible
-      in 0.2.4.10-alpha when we became more strict about when we have
-      "enough directory information to build circuits".

changes/curve25519-donna32-bug

-  o Major bugfixes:
-
-    - Fix a bug in the bounds-checking in the 32-bit curve25519-donna
-      implementation that caused incorrect results on 32-bit
-      implementations when certain malformed inputs were used along with
-      a small class of private ntor keys. This bug does not currently
-      appear to allow an attacker to learn private keys or impersonate a
-      Tor server, but it could provide a means to distinguish 32-bit Tor
-      implementations from 64-bit Tor implementations. Fixes bug 12694;
-      bugfix on 0.2.4.8-alpha. Bug found by Robert Ransom; fix from
-      Adam Langley.
-

changes/disable_sslv3

-  o Major security fixes:
-    - Disable support for SSLv3. All versions of OpenSSL in use with
-      Tor today support TLS 1.0 or later, so we can safely turn off
-      support for this old (and insecure) protocol. Fixes bug 13426.

changes/further-12184-diagnostic

-  o Minor features (diagnostic):
-    - Slightly enhance the diagnostic message for bug 12184.

changes/geoip-august2014

-  o Minor features:
-    - Update geoip to the August 7 2014 Maxmind GeoLite2 Country database.
-

changes/geoip-january2015

-  o Minor features:
-    - Update geoip to the January 7 2015 Maxmind GeoLite2 Country database.
-

changes/geoip-july2014

-  o Minor features:
-    - Update geoip to the July 10 2014 Maxmind GeoLite2 Country database.
-

changes/geoip-march2015

-  o Minor features:
-    - Update geoip to the March 3 2015 Maxmind GeoLite2 Country database.
-

changes/geoip-november2014

-  o Minor features:
-    - Update geoip to the November 15 2014 Maxmind GeoLite2 Country database.
-

changes/geoip6-august2014

-  o Minor features:
-    - Update geoip6 to the August 7 2014 Maxmind GeoLite2 Country database.
-

changes/geoip6-january2015

-  o Minor features:
-    - Update geoip6 to the January 7 2015 Maxmind GeoLite2 Country database.

changes/geoip6-july2014

-  o Minor features:
-    - Update geoip6 to the July 10 2014 Maxmind GeoLite2 Country database.

changes/geoip6-march2015

-  o Minor features:
-    - Update geoip6 to the March 3 2015 Maxmind GeoLite2 Country database.
-

changes/geoip6-november2014

-  o Minor features:
-    - Update geoip6 to the November 15 2014 Maxmind GeoLite2 Country database.
-

changes/test.h_msvc

-  o Minor bugfixes (compilation):
-    - Fix compilation of test.h with MSVC. Patch from Gisle Vanem;
-      bugfix on 0.2.5.5-alpha.

changes/ticket12688

-  Major features:
-    - Make the number of entry guards configurable via a new
-      NumEntryGuards consensus parameter, and the number of directory
-      guards configurable via a new NumDirectoryGuards consensus
-      parameter. Implements ticket 12688.
-

changes/ticket12690

-  o Minor features:
-    - Authorities now assign the Guard flag to the fastest 25% of the
-      network (it used to be the fastest 50%). Also raise the consensus
-      weight that guarantees the Guard flag from 250 to 2000. For the
-      current network, this results in about 1100 guards, down from 2500.
-      This step paves the way for moving the number of entry guards
-      down to 1 (proposal 236) while still providing reasonable expected
-      performance for most users. Implements ticket 12690.
-

changes/ticket13036

-  o Minor bugfixes:
-    - Fix a large number of false positive warnings from the clang
-      analyzer static analysis tool. This should make real warnings
-      easier for clang analyzer to find. Patch from "teor". Closes
-      ticket 13036.