diff options
| author | Nick Mathewson <nickm@torproject.org> | 2017-11-30 12:07:59 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2017-11-30 12:07:59 -0500 |
| commit | 5fc0587c040339357bc3fc37f1b5474f1c3d1a33 (patch) | |
| tree | a8b8d67d703f07590495e659957573f012ac5ec8 /changes/trove-2017-012-part1 | |
| parent | d459c08b7d5cb1766bda5443ea2750bca160212d (diff) | |
| parent | 7e2b012b46a4ade2818e47be15d76255cf6f121e (diff) | |
| download | tor-5fc0587c040339357bc3fc37f1b5474f1c3d1a33.tar.gz tor-5fc0587c040339357bc3fc37f1b5474f1c3d1a33.zip | |
Merge branch 'maint-0.2.9' into maint-0.3.0
Diffstat (limited to 'changes/trove-2017-012-part1')
| -rw-r--r-- | changes/trove-2017-012-part1 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/trove-2017-012-part1 b/changes/trove-2017-012-part1 new file mode 100644 index 0000000000..9fccc2cf65 --- /dev/null +++ b/changes/trove-2017-012-part1 @@ -0,0 +1,6 @@ + o Major bugfixes (security, relay): + - When running as a relay, make sure that we never build a path through + ourselves, even in the case where we have somehow lost the version of + our descriptor appearing in the consensus. Fixes part of bug 21534; + bugfix on 0.2.0.1-alpha. This issue is also tracked as TROVE-2017-012 + and CVE-2017-8822. |