diff options
| author | Nick Mathewson <nickm@torproject.org> | 2021-03-15 08:54:00 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2021-03-15 08:54:00 -0400 |
| commit | a6533af9e8d90fda13180064e98b49ac3c3cdf86 (patch) | |
| tree | 3225f46afa2771ef283fec2855b545449a289677 /changes | |
| parent | 7c5a67ccd983bb028d21a5e8aa48b4cd9d6a8a1c (diff) | |
| parent | 2eb900f7e2ca64e6ce16fc86410cafd935e7cd1e (diff) | |
| download | tor-a6533af9e8d90fda13180064e98b49ac3c3cdf86.tar.gz tor-a6533af9e8d90fda13180064e98b49ac3c3cdf86.zip | |
Merge branch 'maint-0.4.4' into maint-0.4.5
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/ticket40286_minimal | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/changes/ticket40286_minimal b/changes/ticket40286_minimal index b8669debaa..6a04ca79eb 100644 --- a/changes/ticket40286_minimal +++ b/changes/ticket40286_minimal @@ -1,5 +1,6 @@ - o Major bugfixes (denial of service): + o Major bugfixes (security, denial of service): - Disable the dump_desc() function that we used to dump unparseable information to disk. It was called incorrectly in several places, - in a way that could lead to excessive CPU usage. - Fixes bug 40286; bugfix on 0.2.2.1-alpha. + in a way that could lead to excessive CPU usage. Fixes bug 40286; + bugfix on 0.2.2.1-alpha. This bug is also tracked as + TROVE-2021-001 and CVE-2021-28089. |