diff options
| author | Nick Mathewson <nickm@torproject.org> | 2018-03-01 16:10:43 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2018-03-01 16:10:43 -0500 |
| commit | f7eff2f8c53dacb7c375bbe6bc9cced95103307d (patch) | |
| tree | deb81935dbfb88fed884353f3a567ef5261174c4 /changes | |
| parent | d489e4847b1ec30cb127ce6db675e2316c1772e3 (diff) | |
| parent | d01abb9346bcb7b240b5277551ea75e85dfc160c (diff) | |
| download | tor-f7eff2f8c53dacb7c375bbe6bc9cced95103307d.tar.gz tor-f7eff2f8c53dacb7c375bbe6bc9cced95103307d.zip | |
Merge branch 'maint-0.3.2' into maint-0.3.3
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug25249 | 3 | ||||
| -rw-r--r-- | changes/bug25249.2 | 3 | ||||
| -rw-r--r-- | changes/trove-2018-001.1 | 6 | ||||
| -rw-r--r-- | changes/trove-2018-004 | 8 |
4 files changed, 20 insertions, 0 deletions
diff --git a/changes/bug25249 b/changes/bug25249 new file mode 100644 index 0000000000..b4153eeaef --- /dev/null +++ b/changes/bug25249 @@ -0,0 +1,3 @@ + o Minor bugfixes (spec conformance): + - Forbid "-0" as a protocol version. Fixes part of bug 25249; bugfix on + 0.2.9.4-alpha. diff --git a/changes/bug25249.2 b/changes/bug25249.2 new file mode 100644 index 0000000000..9058c11071 --- /dev/null +++ b/changes/bug25249.2 @@ -0,0 +1,3 @@ + o Minor bugfixes (spec conformance): + - Forbid UINT32_MAX as a protocol version. Fixes part of bug 25249; + bugfix on 0.2.9.4-alpha. diff --git a/changes/trove-2018-001.1 b/changes/trove-2018-001.1 new file mode 100644 index 0000000000..f0ee92f409 --- /dev/null +++ b/changes/trove-2018-001.1 @@ -0,0 +1,6 @@ + o Major bugfixes (denial-of-service, directory authority): + - Fix a protocol-list handling bug that could be used to remotely crash + directory authorities with a null-pointer exception. Fixes bug 25074; + bugfix on 0.2.9.4-alpha. Also tracked as TROVE-2018-001. + + diff --git a/changes/trove-2018-004 b/changes/trove-2018-004 new file mode 100644 index 0000000000..37e0a89b0d --- /dev/null +++ b/changes/trove-2018-004 @@ -0,0 +1,8 @@ + o Minor bugfixes (denial-of-service): + - Fix a possible crash on malformed consensus. If a consensus had + contained an unparseable protocol line, it could have made clients + and relays crash with a null-pointer exception. To exploit this + issue, however, an attacker would need to be able to subvert the + directory-authority system. Fixes bug 25251; bugfix on + 0.2.9.4-alpha. Also tracked as TROVE-2018-004. + |