torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'trove_2020_002_041' into maint-0.4.1

Browse Source
This commit is contained in:
Nick Mathewson
2020-03-17 15:22:02 -04:00
parent cec647ff3e 9163781039
commit 3c8a4b8fbd
7 changed files with 154 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/ticket33119
+8
View File
@@ -0,0 +1,8 @@
o Major bugfixes (security, denial-of-service):
- Fix a denial-of-service bug that could be used by anyone to consume a
bunch of CPU on any Tor relay or authority, or by directories to
consume a bunch of CPU on clients or hidden services. Because
of the potential for CPU consumption to introduce observable
timing patterns, we are treating this as a high-severity security
issue. Fixes bug 33119; bugfix on 0.2.1.5-alpha. We are also tracking
this issue as TROVE-2020-002.