torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'trove-2017-011_025' into maint-0.2.5

Browse Source
This commit is contained in:
Nick Mathewson
2017-11-30 12:06:17 -05:00
parent a6a0c7a4ec 1880a6a88e
commit 08ce39fb0f
2 changed files with 21 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/trove-2017-011
+8
View File
@@ -0,0 +1,8 @@
o Major bugfixes (security):
- Fix a denial of service bug where an attacker could use a malformed
directory object to cause a Tor instance to pause while OpenSSL would
try to read a passphrase from the terminal. (If the terminal was not
available, tor would continue running.) Fixes bug 24246; bugfix on
every version of Tor. Also tracked as TROVE-2017-011 and
CVE-2017-8821. Found by OSS-Fuzz as testcase 6360145429790720.