aboutsummaryrefslogtreecommitdiff
path: root/changes/TROVE-2018-005
diff options
context:
space:
mode:
Diffstat (limited to 'changes/TROVE-2018-005')
-rw-r--r--changes/TROVE-2018-0056
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/TROVE-2018-005 b/changes/TROVE-2018-005
new file mode 100644
index 0000000000..769c653f43
--- /dev/null
+++ b/changes/TROVE-2018-005
@@ -0,0 +1,6 @@
+ o Major bugfixes (security, directory authority, denial-of-service):
+ - Fix a bug that could have allowed an attacker to force a
+ directory authority to use up all its RAM by passing it a
+ maliciously crafted protocol versions string. Fixes bug 25517;
+ bugfix on 0.2.9.4-alpha. This issue is also tracked as
+ TROVE-2018-005.