Merge branch 'debian-merge-0.2.8' into debian-0.2.8

* debian-merge-0.2.8:
  New upstream version: 0.2.8.10
  put the 0.2.8.10 changelog in the releasenotes too
  fix typo
  Pick a release date.
  Bump to 0.2.8.10
  Start an 0.2.8.10 changelog
  Try to work around breakage in the OSX 10.12 SDK.
  Update geoip and geoip6 to the November 3 2016 database.
  Work around a behavior change in openssl's BUF_MEM code
  Use explicit casts to avoid warnings when building with openssl 1.1
  Always call connection_ap_attach_pending() once a second.
  Ask event_base_loop to finish when we add a pending stream
  refactor out the tor_event_base_loopexit() call
  Bump to 0.2.8.9-dev