diff options
| author | Nick Mathewson <nickm@torproject.org> | 2021-06-10 12:30:29 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2021-06-10 12:30:29 -0400 |
| commit | 7c07cf1afc725c5e1df87dae05d3960740218f88 (patch) | |
| tree | 86aaa44b7e61236553450290f2b338f19e68e8b9 /changes/bug40392 | |
| parent | 27a8bac5009a53194025795fe81d0c1e43bead38 (diff) | |
| parent | 0ae9fd62fdc5ffd41bf5bbf2f4a3c1e2a151fa2d (diff) | |
| download | tor-7c07cf1afc725c5e1df87dae05d3960740218f88.tar.gz tor-7c07cf1afc725c5e1df87dae05d3960740218f88.zip | |
Merge branch 'maint-0.4.4' into release-0.4.4
Diffstat (limited to 'changes/bug40392')
| -rw-r--r-- | changes/bug40392 | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/changes/bug40392 b/changes/bug40392 new file mode 100644 index 0000000000..4dffa50bb2 --- /dev/null +++ b/changes/bug40392 @@ -0,0 +1,4 @@ + o Major bugfixes (security, denial of service, onion services): + - Fix an out-of-bounds memory access in v3 descriptor parsing. Fixes bug + 40392; bugfix on 0.3.0.1-alpha. This issue is also tracked as + TROVE-2021-006. Reported by Sergei Glazunov from Google's Project Zero.
\ No newline at end of file |