aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2012-03-09 13:57:32 -0500
committerNick Mathewson <nickm@torproject.org>2012-03-09 13:57:32 -0500
commitd4526e1d4a02b3faa6b7b6030a634cbe20bea9f2 (patch)
tree5e2fb5ff731ed5c75fb369e8cee8eaa155913c59 /changes
parentc13dc5170f09473ec2255501cbb1c0433bd959e5 (diff)
parenta574f7f3fe7b4f7300c1ced5f67d8e014e04ffbd (diff)
downloadtor-d4526e1d4a02b3faa6b7b6030a634cbe20bea9f2.tar.gz
tor-d4526e1d4a02b3faa6b7b6030a634cbe20bea9f2.zip
Merge remote-tracking branch 'origin/maint-0.2.2'
Conflicts: src/or/routerlist.c
Diffstat (limited to 'changes')
-rw-r--r--changes/bug53437
1 files changed, 7 insertions, 0 deletions
diff --git a/changes/bug5343 b/changes/bug5343
new file mode 100644
index 0000000000..e4e14897f6
--- /dev/null
+++ b/changes/bug5343
@@ -0,0 +1,7 @@
+ o Security fixes:
+ - Only build circuits if we have a sufficient threshold of the total
+ descriptors marked in the consensus with the "Exit" flag. This
+ mitigates an attack proposed by wanoskarnet, in which all of a
+ client's bridges collude to restrict the exit nodes that the
+ client knows about. Fixes bug 5343.
+