aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2017-06-29 15:57:42 -0400
committerNick Mathewson <nickm@torproject.org>2017-06-29 15:57:42 -0400
commit52c4440c4895cb90dd155bb094b49a97128baedf (patch)
tree71030c326e7c34d7c69c1e76e807cf9c99fa0ac3 /changes
parent4c21d4ef7ac0ba0b20ee60322ce177c5f965dc0e (diff)
parent88666d0482c235f407be1edf6e89da8c9142b92d (diff)
downloadtor-52c4440c4895cb90dd155bb094b49a97128baedf.tar.gz
tor-52c4440c4895cb90dd155bb094b49a97128baedf.zip
Merge branch 'trove-2017-006' into maint-0.3.0
Diffstat (limited to 'changes')
-rw-r--r--changes/bug227537
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/bug22753 b/changes/bug22753
new file mode 100644
index 0000000000..32a6dfa56c
--- /dev/null
+++ b/changes/bug22753
@@ -0,0 +1,7 @@
+ o Major bugfixes (path selection, security):
+ - When choosing which guard to use for a circuit, avoid the
+ exit's family along with the exit itself. Previously, the new
+ guard selection logic avoided the exit, but did not consider
+ its family. Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked
+ as TROVE-2016-006 and CVE-2017-0377.
+