Merge branch 'maint-0.4.4' into maint-0.4.5

2024-12-06 19:41:15 +01:00 · 2021-06-10 08:37:34 -04:00
parent d60f8fe98a 7c19a4d924
commit e2d01aac9e
2 changed files with 10 additions and 2 deletions
@@ -0,0 +1,8 @@
+  o Major bugfixes (security, defense-in-depth):
+    - Detect a wider variety of failure conditions from the OpenSSL RNG
+      code. Previously, we would detect errors from a missing RNG
+      implementation, but not failures from the RNG code itself.
+      Fortunately, it appears those failures do not happen in practice
+      when Tor is using OpenSSL's default RNG implementation.
+      Fixes bug 40390; bugfix on 0.2.8.1-alpha. This issue is also tracked as
+      TROVE-2021-004. Reported by Jann Horn at Google's Project Zero.