aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2010-12-15 22:47:28 -0500
committerNick Mathewson <nickm@torproject.org>2010-12-15 22:48:23 -0500
commitb5e293afe6b3c98b50c23cc443969b5f840dca32 (patch)
tree803a93a09d717782452108ab21ab2cac6a732f26 /changes
parentddfb398494ddf9d514a3ff16ade69c619c659ce7 (diff)
parentb0def605a52b3acce1cb212f270b184d72f237f5 (diff)
downloadtor-b5e293afe6b3c98b50c23cc443969b5f840dca32.tar
tor-b5e293afe6b3c98b50c23cc443969b5f840dca32.tar.gz
Merge remote branch fix_security_bug_021 into fix_security_bug_022
Conflicts: src/common/memarea.c src/or/or.h src/or/rendclient.c
Diffstat (limited to 'changes')
-rw-r--r--changes/security_bug5
1 files changed, 5 insertions, 0 deletions
diff --git a/changes/security_bug b/changes/security_bug
new file mode 100644
index 000000000..990beee50
--- /dev/null
+++ b/changes/security_bug
@@ -0,0 +1,5 @@
+ o Major bugfixes:
+ - Fix a remotely exploitable bug that could be used to crash instances
+ of Tor remotely by overflowing on the heap. Remove-code execution
+ hasn't been confirmed, but can't be ruled out. Obviously, everyone
+ should upgrade. Bugfix on the 0.1.1 series and later.