Tor 0.2.8.7 和 0.2.9.2-alpha 发布

Tor 0.2.8.7 发布了，该版本有重大的修复。Tor 0.2.8.7 修复了一个与 ReachableAddresses 相关的 bug。下面是详细的更新说明：

Changes in version 0.2.8.7 – 2016-08-24

Directory authority changes:
- The “Tonga” bridge authority has been retired; the new bridge authority is “Bifroest”. Closes tickets 19728 and 19690.
Major bugfixes (client, security):
- Only use the ReachableAddresses option to restrict the first hop in a path. In earlier versions of 0.2.8.x, it would apply to every hop in the path, with a possible degradation in anonymity for anyone using an uncommon ReachableAddress setting. Fixes bug 19973; bugfix on 0.2.8.2-alpha.
Minor features (geoip):
- Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 Country database.
Minor bugfixes (compilation):
- Remove an inappropriate “inline” in tortls.c that was causing warnings on older versions of GCC. Fixes bug 19903; bugfix on 0.2.8.1-alpha.
Minor bugfixes (fallback directories):
- Avoid logging a NULL string pointer when loading fallback directory information. Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha. Report and patch by “rubiate”.

官方发行说明：https://blog.torproject.org/blog/tor-0287-released-important-fixes

Tor 0.2.9.2-alpha 发布了，该版本添加了一些新功能已经进行一些 bug 的修复。更新如下：

Changes in version 0.2.9.2-alpha – 2016-08-24

Directory authority changes (also in 0.2.8.7):
- The “Tonga” bridge authority has been retired; the new bridge authority is “Bifroest”. Closes tickets 19728 and 19690.
Major bugfixes (client, security, also in 0.2.8.7):
- Only use the ReachableAddresses option to restrict the first hop in a path. In earlier versions of 0.2.8.x, it would apply to every hop in the path, with a possible degradation in anonymity for anyone using an uncommon ReachableAddress setting. Fixes bug 19973; bugfix on 0.2.8.2-alpha.

Major features (user interface):
- Tor now supports the ability to declare options deprecated, so that we can recommend that people stop using them. Previously, this was done in an ad-hoc way. Closes ticket 19820.
Major bugfixes (directory downloads):
- Avoid resetting download status for consensuses hourly, since we already have another, smarter retry mechanism. Fixes bug 8625; bugfix on 0.2.0.9-alpha.
Minor features (config):
- Warn users when descriptor and port addresses are inconsistent. Mitigates bug13953; patch by teor.
Minor features (geoip):
- Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 Country database.
Minor features (user interface):
- There is a new –list-deprecated-options command-line option to list all of the deprecated options. Implemented as part of ticket 19820.
Minor bugfixes (code style):
- Fix an integer signedness conversion issue in the case conversion tables. Fixes bug19168; bugfix on 0.2.1.11-alpha.
Minor bugfixes (compilation):
- Build correctly on versions of libevent2 without support for evutil_secure_rng_add_bytes(). Fixes bug 19904; bugfix on 0.2.5.4-alpha.
- Fix a compilation warning on GCC versions before 4.6. Our ENABLE_GCC_WARNING macro used the word “warning” as an argument, when it is also required as an argument to the compiler pragma. Fixes bug 19901; bugfix on 0.2.9.1-alpha.
Minor bugfixes (compilation, also in 0.2.8.7):
- Remove an inappropriate “inline” in tortls.c that was causing warnings on older versions of GCC. Fixes bug 19903; bugfix on 0.2.8.1-alpha.
Minor bugfixes (fallback directories, also in 0.2.8.7):
- Avoid logging a NULL string pointer when loading fallback directory information. Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha. Report and patch by “rubiate”.
Minor bugfixes (logging):
- Log a more accurate message when we fail to dump a microdescriptor. Fixes bug17758; bugfix on 0.2.2.8-alpha. Patch from Daniel Pinto.
Minor bugfixes (memory leak):
- Fix a series of slow memory leaks related to parsing torrc files and options. Fixes bug19466; bugfix on 0.2.1.6-alpha.
Deprecated features:
- A number of DNS-cache-related sub-options for client ports are now deprecated for security reasons, and may be removed in a future version of Tor. (We believe that client-side DNS cacheing is a bad idea for anonymity, and you should not turn it on.) The options are: CacheDNS, CacheIPv4DNS, CacheIPv6DNS, UseDNSCache, UseIPv4Cache, and UseIPv6Cache.
- A number of options are deprecated for security reasons, and may be removed in a future version of Tor. The options are: AllowDotExit, AllowInvalidNodes, AllowSingleHopCircuits, AllowSingleHopExits, ClientDNSRejectInternalAddresses, CloseHSClientCircuitsImmediatelyOnTimeout, CloseHSServiceRendCircuitsImmediatelyOnTimeout, ExcludeSingleHopRelays, FastFirstHopPK, TLSECGroup, UseNTorHandshake, and WarnUnsafeSocks.
- The *ListenAddress options are now deprecated as unnecessary: the corresponding *Port options should be used instead. These options may someday be removed. The affected options are: ControlListenAddress, DNSListenAddress, DirListenAddress, NATDListenAddress, ORListenAddress, SocksListenAddress, and TransListenAddress.
Documentation:
- Correct the IPv6 syntax in our documentation for the VirtualAddrNetworkIPv6 torrc option. Closes ticket 19743.
Removed code:
- We no longer include the (dead, deprecated) bufferevent code in Tor. Closes ticket19450. Based on a patch from U+039b.