[tor-commits] [tor/master] changes file for TROVE-2018-005

nickm at torproject.org nickm at torproject.org
Tue May 22 16:34:01 UTC 2018


commit e5541996b7a63313820e4ac635a6beac0f09acc8
Author: Nick Mathewson <nickm at torproject.org>
Date:   Tue May 22 12:21:00 2018 -0400

    changes file for TROVE-2018-005
---
 changes/TROVE-2018-005 | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/changes/TROVE-2018-005 b/changes/TROVE-2018-005
new file mode 100644
index 000000000..769c653f4
--- /dev/null
+++ b/changes/TROVE-2018-005
@@ -0,0 +1,6 @@
+  o Major bugfixes (security, directory authority, denial-of-service):
+    - Fix a bug that could have allowed an attacker to force a
+      directory authority to use up all its RAM by passing it a
+      maliciously crafted protocol versions string. Fixes bug 25517;
+      bugfix on 0.2.9.4-alpha.  This issue is also tracked as
+      TROVE-2018-005.





More information about the tor-commits mailing list