Merge branch 'bug5343' into maint-0.2.2

2024-12-06 19:41:15 +01:00 · 2012-03-09 13:54:04 -05:00
parent 31f253ae6a ec8a06c5a1
commit a574f7f3fe
2 changed files with 31 additions and 5 deletions
@@ -0,0 +1,7 @@
+  o Security fixes:
+    - Only build circuits if we have a sufficient threshold of the total
+      descriptors marked in the consensus with the "Exit" flag.  This
+      mitigates an attack proposed by wanoskarnet, in which all of a
+      client's bridges collude to restrict the exit nodes that the
+      client knows about.  Fixes bug 5343.
+