您当前的位置：首页 > 免费翻墙软件

Tor 0.2.8.6 is released!

时间：2016-08-09 来源：torproject.org 作者：nickm 条评论

19191.

Minor bugfixes (exit policies, security):

Refresh an exit relay’s exit policy when interface addresses change. Previously, tor only refreshed the exit policy when the configured external address changed. Fixes bug 18208; bugfix on 0.2.7.3-rc. Patch by teor.

Minor bugfixes (fallback directories):

Mark fallbacks as “too busy” when they return a 503 response, rather than just marking authorities. Fixes bug 17572; bugfix on 0.2.4.7-alpha. Patch by teor.
When requesting extrainfo descriptors from a trusted directory server, check whether it is an authority or a fallback directory which supports extrainfo descriptors. Fixes bug18489; bugfix on 0.2.4.7-alpha. Reported by atagar, patch by teor.

Minor bugfixes (hidden service, client):

Handle the case where the user makes several fast consecutive requests to the same .onion address. Previously, the first six requests would each trigger a descriptor fetch, each picking a directory (there are 6 overall) and the seventh one would fail because no directories were left, thereby triggering a close on all current directory connections asking for the hidden service. The solution here is to not close the connections if we have pending directory fetches. Fixes bug 15937; bugfix on 0.2.7.1-alpha.

Minor bugfixes (hidden service, control port):

Add the onion address to the HS_DESC event for the UPLOADED action both on success or failure. It was previously hardcoded with UNKNOWN. Fixes bug 16023; bugfix on 0.2.7.2-alpha.

Minor bugfixes (hidden service, directory):

Bridges now refuse “rendezvous2” (hidden service descriptor) publish attempts. Suggested by ticket18332.

Minor bugfixes (IPv6):

Update the limits in max_dl_per_request for IPv6 address length. Fixes bug 17573; bugfix on 0.2.1.5-alpha.

Minor bugfixes (Linux seccomp2 sandbox):

Allow more syscalls when running with “Sandbox 1” enabled: sysinfo, getsockopt(SO_SNDBUF), and setsockopt(SO_SNDBUFFORCE). On some systems, these are required for Tor to start. Fixes bug 18397; bugfix on 0.2.5.1-alpha. Patch from Daniel Pinto.
Allow IPPROTO_UDP datagram sockets when running with “Sandbox 1”, so that get_interface_address6_via_udp_socket_hack() can work. Fixes bug 19660; bugfix on 0.2.5.1-alpha.
Allow the setrlimit syscall, and the prlimit and prlimit64 syscalls, which some libc implementations use under the hood. Fixes bug 15221; bugfix on 0.2.5.1-alpha.
Avoid a 10-second delay when starting as a client with “Sandbox 1” enabled and no DNS resolvers configured. This should help TAILS start up faster. Fixes bug 18548; bugfix on 0.2.5.1-alpha.
Fix a crash when using offline master ed25519 keys with the Linux seccomp2 sandbox enabled. Fixes bug17675; bugfix on 0.2.7.3-rc.
Allow statistics to be written to disk when “Sandbox 1” is enabled. Fixes bugs 19556 and 19957; bugfix on 0.2.5.1-alpha and 0.2.6.1-alpha respectively.

Minor bugfixes (logging):

In log messages that include a function name, use __FUNCTION__ instead of __PRETTY_FUNCTION__. In GCC, these are synonymous, but with clang __PRETTY_FUNCTION__ has extra information we don’t need. Fixes bug 16563; bugfix on 0.0.2pre8. Fix by Tom van der Woerdt.
Remove needless quotes from a log message about unparseable addresses. Fixes bug 17843; bugfix on 0.2.3.3-alpha.
Scrub service name in “unrecognized service ID” log messages. Fixes bug 18600; bugfix on 0.2.4.11-alpha.
When logging information about an unparsable networkstatus vote or consensus, do not say “vote” when we mean consensus. Fixes bug 18368; bugfix on 0.2.0.8-alpha.
When we can’t generate a signing key because OfflineMasterKey is set, do not imply that we should have been able to load it. Fixes bug 18133; bugfix on 0.2.7.2-alpha.
When logging a malformed hostname received through socks4, scrub it if SafeLogging says we should. Fixes bug 17419; bugfix on 0.1.1.16-rc.

Minor bugfixes (memory safety):

Avoid freeing an uninitialized pointer when opening a socket fails in get_interface_addresses_ioctl(). Fixes bug 18454; bugfix on 0.2.3.11-alpha. Reported by toralf and “cypherpunks”, patch by teor.
Fix a memory leak in “tor –list-fingerprint”. Fixes part of bug 18672; bugfix on 0.2.5.1-alpha.
Fix a memory leak in tor-gencert. Fixes part of bug 18672; bugfix on 0.2.0.1-alpha.

Minor bugfixes (pluggable transports):

Avoid reporting a spurious error when we decide that we don’t need to terminate a pluggable transport because it has already exited. Fixes bug18686; bugfix on 0.2.5.5-alpha.

Minor bugfixes (pointer arithmetic):

Fix a bug in memarea_alloc() that could have resulted in remote heap write access, if Tor had ever passed an unchecked size to memarea_alloc(). Fortunately, all the sizes we pass to memarea_alloc() are pre-checked to be less than 128 kilobytes. Fixes bug19150; bugfix on 0.2.1.1-alpha. Bug found by Guido Vranken.

Minor bugfixes (private directory):

Prevent a race condition when creating private directories. Fixes part of bug 17852; bugfix on 0.0.2pre13. Part of ticket 17852. Patch from jsturgix. Found with Flawfinder.

Minor bugfixes (relays):