diff options
| author | Robert Ransom <rransom.8774@gmail.com> | 2011-10-23 15:21:49 -0700 |
|---|---|---|
| committer | Sebastian Hahn <sebastian@torproject.org> | 2011-10-26 23:21:14 +0200 |
| commit | a74e7fd40f1a77eb4000d8216bb5b80cdd8a6193 (patch) | |
| tree | f1148867fb5627a0cbeba3bab4a65e589d0032cd /changes | |
| parent | c05bb53508f5fe3e570a285e6c9ead452ded0e43 (diff) | |
| download | tor-a74e7fd40f1a77eb4000d8216bb5b80cdd8a6193.tar.gz tor-a74e7fd40f1a77eb4000d8216bb5b80cdd8a6193.zip | |
Reject create cells on outgoing OR connections from bridges
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/issue-2011-10-23G | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/changes/issue-2011-10-23G b/changes/issue-2011-10-23G new file mode 100644 index 0000000000..45f86754f0 --- /dev/null +++ b/changes/issue-2011-10-23G @@ -0,0 +1,9 @@ + o Security fixes: + + - Reject CREATE and CREATE_FAST cells on outgoing OR connections + from a bridge to a relay. Previously, we would accept them and + handle them normally, thereby allowing a malicious relay to + easily distinguish bridges which connect to it from clients. + Fixes CVE-2011-2769. Bugfix on 0.2.0.3-alpha, when bridges were + implemented; found by frosty_un. + |