Quantcast
Channel: OSCHINA 社区最新新闻
Viewing all articles
Browse latest Browse all 44787

Tor 0.2.8.7 和 0.2.9.2-alpha 发布

$
0
0

Tor 0.2.8.7 发布了,该版本有重大的修复。Tor 0.2.8.7 修复了一个与 ReachableAddresses 相关的 bug。下面是详细的更新说明:

Changes in version 0.2.8.7 - 2016-08-24

  • Directory authority changes:

    • The "Tonga" bridge authority has been retired; the new bridge authority is "Bifroest". Closes tickets 19728 and 19690.

  • Major bugfixes (client, security):

    • Only use the ReachableAddresses option to restrict the first hop in a path. In earlier versions of 0.2.8.x, it would apply to every hop in the path, with a possible degradation in anonymity for anyone using an uncommon ReachableAddress setting. Fixes bug 19973; bugfix on 0.2.8.2-alpha.

  • Minor features (geoip):

    • Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 Country database.

  • Minor bugfixes (compilation):

    • Remove an inappropriate "inline" in tortls.c that was causing warnings on older versions of GCC. Fixes bug 19903; bugfix on 0.2.8.1-alpha.

  • Minor bugfixes (fallback directories):

    • Avoid logging a NULL string pointer when loading fallback directory information. Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha. Report and patch by "rubiate". 

官方发行说明:https://blog.torproject.org/blog/tor-0287-released-important-fixes

Tor 0.2.9.2-alpha 发布了,该版本添加了一些新功能已经进行一些 bug 的修复。更新如下:

Changes in version 0.2.9.2-alpha - 2016-08-24

  • Directory authority changes (also in 0.2.8.7):

    • The "Tonga" bridge authority has been retired; the new bridge authority is "Bifroest". Closes tickets 19728 and 19690.

  • Major bugfixes (client, security, also in 0.2.8.7):

    • Only use the ReachableAddresses option to restrict the first hop in a path. In earlier versions of 0.2.8.x, it would apply to every hop in the path, with a possible degradation in anonymity for anyone using an uncommon ReachableAddress setting. Fixes bug 19973; bugfix on 0.2.8.2-alpha.

  • Major features (user interface):

    • Tor now supports the ability to declare options deprecated, so that we can recommend that people stop using them. Previously, this was done in an ad-hoc way. Closes ticket 19820.

  • Major bugfixes (directory downloads):

    • Avoid resetting download status for consensuses hourly, since we already have another, smarter retry mechanism. Fixes bug 8625; bugfix on 0.2.0.9-alpha.

  • Minor features (config):

    • Warn users when descriptor and port addresses are inconsistent. Mitigates bug13953; patch by teor.

  • Minor features (geoip):

    • Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 Country database.

  • Minor features (user interface):

    • There is a new --list-deprecated-options command-line option to list all of the deprecated options. Implemented as part of ticket 19820.

  • Minor bugfixes (code style):

    • Fix an integer signedness conversion issue in the case conversion tables. Fixes bug19168; bugfix on 0.2.1.11-alpha.

  • Minor bugfixes (compilation):

    • Build correctly on versions of libevent2 without support for evutil_secure_rng_add_bytes(). Fixes bug 19904; bugfix on 0.2.5.4-alpha.

    • Fix a compilation warning on GCC versions before 4.6. Our ENABLE_GCC_WARNING macro used the word "warning" as an argument, when it is also required as an argument to the compiler pragma. Fixes bug 19901; bugfix on 0.2.9.1-alpha.

  • Minor bugfixes (compilation, also in 0.2.8.7):

    • Remove an inappropriate "inline" in tortls.c that was causing warnings on older versions of GCC. Fixes bug 19903; bugfix on 0.2.8.1-alpha.

  • Minor bugfixes (fallback directories, also in 0.2.8.7):

    • Avoid logging a NULL string pointer when loading fallback directory information. Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha. Report and patch by "rubiate".

  • Minor bugfixes (logging):

    • Log a more accurate message when we fail to dump a microdescriptor. Fixes bug17758; bugfix on 0.2.2.8-alpha. Patch from Daniel Pinto.

  • Minor bugfixes (memory leak):

    • Fix a series of slow memory leaks related to parsing torrc files and options. Fixes bug19466; bugfix on 0.2.1.6-alpha.

  • Deprecated features:

    • A number of DNS-cache-related sub-options for client ports are now deprecated for security reasons, and may be removed in a future version of Tor. (We believe that client-side DNS cacheing is a bad idea for anonymity, and you should not turn it on.) The options are: CacheDNS, CacheIPv4DNS, CacheIPv6DNS, UseDNSCache, UseIPv4Cache, and UseIPv6Cache.

    • A number of options are deprecated for security reasons, and may be removed in a future version of Tor. The options are: AllowDotExit, AllowInvalidNodes, AllowSingleHopCircuits, AllowSingleHopExits, ClientDNSRejectInternalAddresses, CloseHSClientCircuitsImmediatelyOnTimeout, CloseHSServiceRendCircuitsImmediatelyOnTimeout, ExcludeSingleHopRelays, FastFirstHopPK, TLSECGroup, UseNTorHandshake, and WarnUnsafeSocks.

    • The *ListenAddress options are now deprecated as unnecessary: the corresponding *Port options should be used instead. These options may someday be removed. The affected options are: ControlListenAddress, DNSListenAddress, DirListenAddress, NATDListenAddress, ORListenAddress, SocksListenAddress, and TransListenAddress.

  • Documentation:

    • Correct the IPv6 syntax in our documentation for the VirtualAddrNetworkIPv6 torrc option. Closes ticket 19743.

  • Removed code:

    • We no longer include the (dead, deprecated) bufferevent code in Tor. Closes ticket19450. Based on a patch from U+039b.

官方发行说明:https://blog.torproject.org/blog/tor-0292-alpha-released-important-fixes


Viewing all articles
Browse latest Browse all 44787

Trending Articles