summaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2021-06-10 12:30:29 -0400
committerNick Mathewson <nickm@torproject.org>2021-06-10 12:30:29 -0400
commit8e590992c4aae8e45b4b9aa4065c8b7741c2a3d6 (patch)
treeb1e69a3fe3e55cebae178724bfb16074830fc057 /changes
parent7be37a26ac769e3059223553970b09b7b41688f7 (diff)
parent200e9a55e0737294085080052fbbaba4340d6717 (diff)
downloadtor-8e590992c4aae8e45b4b9aa4065c8b7741c2a3d6.tar.gz
tor-8e590992c4aae8e45b4b9aa4065c8b7741c2a3d6.zip
Merge branch 'maint-0.4.5' into maint-0.4.6
Diffstat (limited to 'changes')
-rw-r--r--changes/bug403924
1 files changed, 4 insertions, 0 deletions
diff --git a/changes/bug40392 b/changes/bug40392
new file mode 100644
index 0000000000..4dffa50bb2
--- /dev/null
+++ b/changes/bug40392
@@ -0,0 +1,4 @@
+ o Major bugfixes (security, denial of service, onion services):
+ - Fix an out-of-bounds memory access in v3 descriptor parsing. Fixes bug
+ 40392; bugfix on 0.3.0.1-alpha. This issue is also tracked as
+ TROVE-2021-006. Reported by Sergei Glazunov from Google's Project Zero. \ No newline at end of file