From 7571e9f1cb81927c5bd47190409a30c7f23ea4a1 Mon Sep 17 00:00:00 2001 From: Robert Ransom Date: Wed, 27 Apr 2011 13:37:08 -0700 Subject: Check fetched rendezvous descriptors' service IDs --- changes/check-fetched-rend-desc-service-id | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 changes/check-fetched-rend-desc-service-id (limited to 'changes') diff --git a/changes/check-fetched-rend-desc-service-id b/changes/check-fetched-rend-desc-service-id new file mode 100644 index 0000000000..2f37c30216 --- /dev/null +++ b/changes/check-fetched-rend-desc-service-id @@ -0,0 +1,7 @@ + o Security fixes: + - When fetching a hidden service descriptor, check that it is for + the hidden service we were trying to connect to, in order to + stop a directory from pre-seeding a client with a descriptor for + a hidden service that they didn't want. Bugfix on 0.0.6. + + -- cgit v1.2.3-54-g00ecf