aboutsummaryrefslogtreecommitdiff
path: root/changes/bug11464_023
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2014-10-19 14:35:29 -0400
committerNick Mathewson <nickm@torproject.org>2014-10-19 14:35:29 -0400
commit43836f6f0ab7c25b0c8c9fab366ec664ebd0b0ee (patch)
treed47c734edfd322945a2ab61179aab3b996e5d383 /changes/bug11464_023
parente318ab14b10f353da1ebcece0d6490191517e21a (diff)
parentc1c83eb376a7c89fadb01d1c7082d4aa4125333d (diff)
downloadtor-release-0.2.3.tar.gz
tor-release-0.2.3.zip
Merge remote-tracking branch 'origin/maint-0.2.3' into release-0.2.3release-0.2.3
Diffstat (limited to 'changes/bug11464_023')
-rw-r--r--changes/bug11464_0235
1 files changed, 5 insertions, 0 deletions
diff --git a/changes/bug11464_023 b/changes/bug11464_023
new file mode 100644
index 0000000000..80c04b21e6
--- /dev/null
+++ b/changes/bug11464_023
@@ -0,0 +1,5 @@
+ o Major features (security):
+ - Block authority signing keys that were used on an authorities
+ vulnerable to the "heartbleed" bug in openssl (CVE-2014-0160).
+ (We don't have any evidence that these keys _were_ compromised;
+ we're doing this to be prudent.) Resolves ticket 11464.