diff options
| author | teor <teor2345@gmail.com> | 2016-08-31 15:10:58 +1000 |
|---|---|---|
| committer | teor <teor2345@gmail.com> | 2016-08-31 15:10:58 +1000 |
| commit | 0a3009bb85d5675e1565020de08df1081e52253c (patch) | |
| tree | 4ecd23d78f19be08f46c1005cadd6f81d006f9ba /changes | |
| parent | e3bf8854c81f46470d21f5e44cfa51b16e1d260b (diff) | |
| download | tor-0a3009bb85d5675e1565020de08df1081e52253c.tar.gz tor-0a3009bb85d5675e1565020de08df1081e52253c.zip | |
Stop inadvertently upgrading client intro connections to ntor
Also stop logging the intro point details on error by default.
Fixes #20012, introduced with ntor in tor 0.2.4.8-alpha.
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug20012 | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/changes/bug20012 b/changes/bug20012 new file mode 100644 index 0000000000..f67ee65867 --- /dev/null +++ b/changes/bug20012 @@ -0,0 +1,12 @@ + o Major bugfixes (hidden services): + - Clients require hidden services to include the TAP keys + for their intro points in the hidden service descriptor. + This prevents an inadvertent upgrade to ntor, which a + malicious hidden service could use to discover which + consensus a client has. + Fixes bug 20012; bugfix on 0.2.4.8-alpha. Patch by teor. + o Minor bugfixes (hidden services): + - Stop logging intro point details to the client log on + certain error conditions. + Fixed as part of bug 20012; bugfix on 0.2.4.8-alpha. + Patch by teor. |