智能化下的产物，无人棋牌室
Tor 0.2.8.9 和 0.2.9.4-alpha 发布了。
先前的Tor版本中，Tor 0.2.8.9反向移植修复在早期版本中存在一个安全漏洞，会导致远程攻击者摧毁Tor客户端，隐藏服务、继电器或认证。建议用户升级至该版本。更新内容如下：
- Major features (security fixes, also in 0.2.9.4-alpha):
- Prevent a class of security bugs caused by treating the contents of a buffer chunk as if they were a NUL-terminated string. At least one such bug seems to be present in all currently used versions of Tor, and would allow an attacker to remotely crash most Tor instances, especially those compiled with extra compiler hardening. With this defense in place, such bugs can’t crash Tor, though we should still fix them as they occur. Closes ticket 20384 (TROVE-2016-10-001).
- Minor features (geoip):
- Update geoip and geoip6 to the October 4 2016 Maxmind GeoLite2 Country database.
下载地址：
0.2.9.4-alpha 更新内容：
- Major features (security fixes):
- Prevent a class of security bugs caused by treating the contents of a buffer chunk as if they were a NUL-terminated string. At least one such bug seems to be present in all currently used versions of Tor, and would allow an attacker to remotely crash most Tor instances, especially those compiled with extra compiler hardening. With this defense in place, such bugs can’t crash Tor, though we should still fix them as they occur. Closes ticket 20384 (TROVE-2016-10-001).
- Major features (subprotocol versions):
- Tor directory authorities now vote on a set of recommended subprotocol versions, and on a set of required subprotocol versions. Clients and relays that lack support for a _required_ subprotocol version will not start; those that lack support for a _recommended_ subprotocol version will warn the user to upgrade. Closes ticket 19958; implements part of proposal 264.
- Tor now uses “subprotocol versions” to indicate compatibility. Previously, versions of Tor looked at the declared Tor version of a relay to tell whether they could use a given feature. Now, they should be able to rely on its declared subprotocol versions. This change allows compatible implementations of the Tor protocol(s) to exist without pretending to be 100% bug-compatible with particular releases of Tor itself. Closes ticket 19958; implements part of proposal 264.
下载地址：
相关文章
