Tor 0.2.8.7 和 0.2.9.2

nikoo

欢迎加入运维网交流群：263444886  
　　Tor 0.2.8.7 发布了，该版本有重大的修复。Tor 0.2.8.7 修复了一个与 ReachableAddresses 相关的 bug。下面是详细的更新说明：
　　Changes in version 0.2.8.7 - 2016-08-24

• 　　Directory authority changes:
  
  
  
  • 　　The "Tonga" bridge authority has been retired; the new bridge authority is "Bifroest". Closes tickets 19728 and 19690.
    
  
  
• 　　Major bugfixes (client, security):
  
  
  
  • 　　Only use the ReachableAddresses option to restrict the first hop in a path. In earlier versions of 0.2.8.x, it would apply to every hop in the path, with a possible degradation in anonymity for anyone using an uncommon ReachableAddress setting. Fixes bug 19973; bugfix on 0.2.8.2-alpha.
    
  
  
• 　　Minor features (geoip):
  
  
  
  • 　　Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 Country database.
    
  
  
• 　　Minor bugfixes (compilation):
  
  
  
  • 　　Remove an inappropriate "inline" in tortls.c that was causing warnings on older versions of GCC. Fixes bug 19903; bugfix on 0.2.8.1-alpha.
    
  
  
• 　　Minor bugfixes (fallback directories):
  
  
  
  • 　　Avoid logging a NULL string pointer when loading fallback directory information. Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha. Report and patch by "rubiate". 
    
  
  

　　官方发行说明：https://blog.torproject.org/blog/tor-0287-released-important-fixes
　　Tor 0.2.9.2-alpha 发布了，该版本添加了一些新功能已经进行一些 bug 的修复。更新如下：
　　Changes in version 0.2.9.2-alpha - 2016-08-24

• 　　Directory authority changes (also in 0.2.8.7):
  
  
  
  • 　　The "Tonga" bridge authority has been retired; the new bridge authority is "Bifroest". Closes tickets 19728 and 19690.
    
  
  
• 　　Major bugfixes (client, security, also in 0.2.8.7):
  
  
  
  • 　　Only use the ReachableAddresses option to restrict the first hop in a path. In earlier versions of 0.2.8.x, it would apply to every hop in the path, with a possible degradation in anonymity for anyone using an uncommon ReachableAddress setting. Fixes bug 19973; bugfix on 0.2.8.2-alpha.
    
  
  

• 　　Major features (user interface):
  
  
  
  • 　　Tor now supports the ability to declare options deprecated, so that we can recommend that people stop using them. Previously, this was done in an ad-hoc way. Closes ticket 19820.
    
  
  
• 　　Major bugfixes (directory downloads):
  
  
  
  • 　　Avoid resetting download status for consensuses hourly, since we already have another, smarter retry mechanism. Fixes bug 8625; bugfix on 0.2.0.9-alpha.
    
  
  
• 　　Minor features (config):
  
  
  
  • 　　Warn users when descriptor and port addresses are inconsistent. Mitigates bug13953; patch by teor.
    
  
  
• 　　Minor features (geoip):
  
  
  
  • 　　Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 Country database.
    
  
  
• 　　Minor features (user interface):
  
  
  
  • 　　There is a new --list-deprecated-options command-line option to list all of the deprecated options. Implemented as part of ticket 19820.
    
  
  
• 　　Minor bugfixes (code style):
  
  
  
  • 　　Fix an integer signedness conversion issue in the case conversion tables. Fixes bug19168; bugfix on 0.2.1.11-alpha.
    
  
  
• 　　Minor bugfixes (compilation):
  
  
  
  • 　　Build correctly on versions of libevent2 without support for evutil_secure_rng_add_bytes(). Fixes bug 19904; bugfix on 0.2.5.4-alpha.
    
  • 　　Fix a compilation warning on GCC versions before 4.6. Our ENABLE_GCC_WARNING macro used the word "warning" as an argument, when it is also required as an argument to the compiler pragma. Fixes bug 19901; bugfix on 0.2.9.1-alpha.
    
  
  
• 　　Minor bugfixes (compilation, also in 0.2.8.7):
  
  
  
  • 　　Remove an inappropriate "inline" in tortls.c that was causing warnings on older versions of GCC. Fixes bug 19903; bugfix on 0.2.8.1-alpha.
    
  
  
• 　　Minor bugfixes (fallback directories, also in 0.2.8.7):
  
  
  
  • 　　Avoid logging a NULL string pointer when loading fallback directory information. Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha. Report and patch by "rubiate".
    
  
  
• 　　Minor bugfixes (logging):
  
  
  
  • 　　Log a more accurate message when we fail to dump a microdescriptor. Fixes bug17758; bugfix on 0.2.2.8-alpha. Patch from Daniel Pinto.
    
  
  
• 　　Minor bugfixes (memory leak):
  
  
  
  • 
    　　Fix a series of slow memory leaks>
    
  
  
• 　　Deprecated features:
  
  
  
  • 
    　　A number of DNS-cache-related sub-options for client ports are now deprecated for security reasons, and may be removed in a future version of Tor. (We believe that client-side DNS cacheing is a bad>
    
  • 　　A number of options are deprecated for security reasons, and may be removed in a future version of Tor. The options are: AllowDotExit, AllowInvalidNodes, AllowSingleHopCircuits, AllowSingleHopExits, ClientDNSRejectInternalAddresses, CloseHSClientCircuitsImmediatelyOnTimeout, CloseHSServiceRendCircuitsImmediatelyOnTimeout, ExcludeSingleHopRelays, FastFirstHopPK, TLSECGroup, UseNTorHandshake, and WarnUnsafeSocks.
    
  • 　　The *ListenAddress options are now deprecated as unnecessary: the corresponding *Port options should be used instead. These options may someday be removed. The affected options are: ControlListenAddress, DNSListenAddress, DirListenAddress, NATDListenAddress, ORListenAddress, SocksListenAddress, and TransListenAddress.
    
  
  
• 　　Documentation:
  
  
  
  • 　　Correct the IPv6 syntax in our documentation for the VirtualAddrNetworkIPv6 torrc option. Closes ticket 19743.
    
  
  
• 　　Removed code:
  
  
  
  • 　　We no longer include the (dead, deprecated) bufferevent code in Tor. Closes ticket19450. Based on a patch from U+039b.
    
  
  

　　官方发行说明：https://blog.torproject.org/blog/tor-0292-alpha-released-important-fixes