diff options
| author | Nick Mathewson <nickm@torproject.org> | 2012-10-19 14:30:31 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2012-10-19 14:30:31 -0400 |
| commit | 1cc06bd35e4203569ecc72ff314a1dd543f60651 (patch) | |
| tree | b76e1b771640fdd30788dff3be9492c84494e440 /changes | |
| parent | b6931b010512d3d8cbda24c87a8cf379305e1457 (diff) | |
| parent | f357ef9dccccfb5ce2408dbd5f8456de02bac895 (diff) | |
| download | tor-1cc06bd35e4203569ecc72ff314a1dd543f60651.tar.gz tor-1cc06bd35e4203569ecc72ff314a1dd543f60651.zip | |
Merge branch 'block_renegotiate_023' into maint-0.2.3
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/cve-2012-2249 | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changes/cve-2012-2249 b/changes/cve-2012-2249 new file mode 100644 index 0000000000..625bfa2f58 --- /dev/null +++ b/changes/cve-2012-2249 @@ -0,0 +1,5 @@ + o Major bugfixes (security): + - Discard extraneous renegotiation attempts once the V3 link + protocol has been initiated. Failure to do so left us open to + a remotely triggerable assertion failure. Fixes CVE-2012-2249; + bugfix on 0.2.3.6-alpha. Reported by "some guy from France". |