summaryrefslogtreecommitdiff
path: root/ChangeLog
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2017-06-08 09:32:00 -0400
committerNick Mathewson <nickm@torproject.org>2017-06-08 09:32:00 -0400
commitd2839eeac95e7c6a3ba6944e27f4c28860f4a74d (patch)
treec6975abc7ff9bfde1a02063222ef554114141af1 /ChangeLog
parent40aa1b1fdc459eebffcdc7596cd1972713ef5d56 (diff)
downloadtor-d2839eeac95e7c6a3ba6944e27f4c28860f4a74d.tar.gz
tor-d2839eeac95e7c6a3ba6944e27f4c28860f4a74d.zip
Fold TROVE-2017-00[45] into changelog
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog9
1 files changed, 9 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index fc0e8337ca..253dcc6f1f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,6 +8,15 @@ Changes in version 0.3.1.3-alpha - 2017-06-08
that sometimes made relays unreliable, as well as several other
bugfixes described below.
+ o Major bugfixes (hidden service, relay, security):
+ - Fix a remotely triggerable assertion failure when a hidden service
+ handles a malformed BEGIN cell. Fixes bug 22493, tracked as
+ TROVE-2017-004 and as CVE-2017-0375; bugfix on 0.3.0.1-alpha.
+ - Fix a remotely triggerable assertion failure caused by receiving a
+ BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug
+ 22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix
+ on 0.2.2.1-alpha.
+
o Major bugfixes (relay, link handshake):
- When performing the v3 link handshake on a TLS connection, report
that we have the x509 certificate that we actually used on that