summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2021-03-15 08:58:54 -0400
committerNick Mathewson <nickm@torproject.org>2021-03-15 08:58:54 -0400
commitf078aab71ef56e1942caec5f27e0f336f2a7c7d1 (patch)
treee1f5f28cfbc9e2b01d51303fa2cd79e26f9b52d5 /changes
parentefca9ce41c96bb0044f504ced36a2734b1689ee2 (diff)
parent890ae4fb1adfa13e37aaf5261e089e8c195a75cf (diff)
downloadtor-f078aab71ef56e1942caec5f27e0f336f2a7c7d1.tar.gz
tor-f078aab71ef56e1942caec5f27e0f336f2a7c7d1.zip
Merge branch 'bug40316_035_v2' into maint-0.3.5
Diffstat (limited to 'changes')
-rw-r--r--changes/bug403165
1 files changed, 5 insertions, 0 deletions
diff --git a/changes/bug40316 b/changes/bug40316
new file mode 100644
index 0000000000..cd275b5c9c
--- /dev/null
+++ b/changes/bug40316
@@ -0,0 +1,5 @@
+ o Major bugfixes (security, denial of service):
+ - Fix a bug in appending detached signatures to a pending consensus
+ document that could be used to crash a directory authority.
+ Fixes bug 40316; bugfix on 0.2.2.6-alpha. Tracked as
+ TROVE-2021-002 and CVE-2021-28090.