commit d2bc019053058b09b5552d327106d9fbe0acad56 parent bc2d6876b3f64497f66eca0ecc150696f476e401 Author: Nick Mathewson <nickm@torproject.org> Date: Tue, 22 May 2018 12:21:00 -0400 changes file for TROVE-2018-005 Diffstat:
| A | changes/TROVE-2018-005 | | | 6 | ++++++ |
1 file changed, 6 insertions(+), 0 deletions(-)
diff --git a/changes/TROVE-2018-005 b/changes/TROVE-2018-005 @@ -0,0 +1,6 @@ + o Major bugfixes (security, directory authority, denial-of-service): + - Fix a bug that could have allowed an attacker to force a + directory authority to use up all its RAM by passing it a + maliciously crafted protocol versions string. Fixes bug 25517; + bugfix on 0.2.9.4-alpha. This issue is also tracked as + TROVE-2018-005.