Merge branch 'block_renegotiate_024'

2024-12-06 19:41:15 +01:00 · 2012-10-19 14:32:42 -04:00
parent 2c2c64287a 3d8b73db55
commit e8f547c181
4 changed files with 19 additions and 2 deletions
@@ -0,0 +1,5 @@
+  o Major bugfixes (security):
+    - Discard extraneous renegotiation attempts once the V3 link
+      protocol has been initiated. Failure to do so left us open to
+      a remotely triggerable assertion failure. Fixes CVE-2012-2249;
+      bugfix on 0.2.3.6-alpha. Reported by "some guy from France".