aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2011-12-27 21:47:04 -0500
committerNick Mathewson <nickm@torproject.org>2011-12-27 21:47:04 -0500
commit9bcb18738747e12629c38ae366b96993e2002859 (patch)
treefba303dd75271a487b56bf7f340a08d92921903e /changes
parentda876aec63b133b64eb6e71f8b87df5c84e7ec3b (diff)
downloadtor-9bcb18738747e12629c38ae366b96993e2002859.tar
tor-9bcb18738747e12629c38ae366b96993e2002859.tar.gz
Authorities reject insecure Tors.
This patch should make us reject every Tor that was vulnerable to CVE-2011-0427. Additionally, it makes us reject every Tor that couldn't handle RELAY_EARLY cells, which helps with proposal 110 (#4339).
Diffstat (limited to 'changes')
-rw-r--r--changes/bug47886
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/bug4788 b/changes/bug4788
new file mode 100644
index 000000000..d65c0015a
--- /dev/null
+++ b/changes/bug4788
@@ -0,0 +1,6 @@
+ o Minor features (directory server):
+ - Directory servers now reject versions of Tor older than 0.2.1.30,
+ and Tor versions between 0.2.2.1-alpha and 0.2.2.20-alpha
+ (inclusive). These versions accounted for only a small fraction of
+ the Tor network, and have numerous known security issues. Resolves
+ issue #4788.