[tor-bugs] #25517 [Core Tor/Tor]: TROVE-2018-005

[Tor Bug Tracker & Wiki]

#25517: TROVE-2018-005
-------------------------------------------------+-------------------------
 Reporter:  isis                                 |          Owner:  isis
     Type:  defect                               |         Status:
                                                 |  merge_ready
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.3.2.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  trove, 033-must, security,           |  Actual Points:
  033-triage-20180320, 033-included-20180320     |
Parent ID:                                       |         Points:
 Reviewer:  nickm                                |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by nickm):

 * milestone:  Tor: 0.3.3.x-final => Tor: 0.3.2.x-final


Old description:

> Tracking issue for TROVE-2018-005.

New description:

 Tracking issue for TROVE-2018-005.

 (The bug here is a memory-related denial-of-service attack, but only
 applies to directory authorities.  They've all been informed.)

--

Comment:

 Okay, we've finally got this ready.  I've merged trove-2018-005_033 to
 maint-0.3.3, and trove-2018-005-034 to master.  I have trove-2018-005_032
 sitting ready for a backport to maint-0.3.2, if we decide to do that.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25517#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online