diff options
| author | Roger Dingledine <arma@torproject.org> | 2011-11-25 19:24:42 -0500 |
|---|---|---|
| committer | Roger Dingledine <arma@torproject.org> | 2011-11-25 19:24:42 -0500 |
| commit | 58d1aa44023e8b458450c4c00d5828f768c0adb5 (patch) | |
| tree | 1787f7bd9eb40ff2fd8dd021b08506a98cb7a2dc /changes/bug4312 | |
| parent | 9a88c0cd32df53116a6bbb6b961650943755061c (diff) | |
| download | tor-58d1aa44023e8b458450c4c00d5828f768c0adb5.tar.gz tor-58d1aa44023e8b458450c4c00d5828f768c0adb5.zip | |
fold in changes files so far
Diffstat (limited to 'changes/bug4312')
| -rw-r--r-- | changes/bug4312 | 11 |
1 files changed, 0 insertions, 11 deletions
diff --git a/changes/bug4312 b/changes/bug4312 deleted file mode 100644 index f8647d3c76..0000000000 --- a/changes/bug4312 +++ /dev/null @@ -1,11 +0,0 @@ - o Security fixes: - - - Block excess renegotiations even if they are RFC5746 compliant. - This mitigates potential SSL Denial of Service attacks that use - SSL renegotiation as a way of forcing the server to perform - unneeded computationally expensive SSL handshakes. Implements - #4312. - - - Fix a bug where tor would not notice excess renegotiation - attempts before it received the first data SSL record. Fixes - part of #4312. |