Clarify new intended strategy with TROVE-2021-001

We're going to disable this feature in all versions for now.
This commit is contained in:
Nick Mathewson
2021-03-15 08:53:36 -04:00
parent f46f4562cf
commit efca9ce41c
2 changed files with 9 additions and 5 deletions
+4 -3
View File
@@ -1,5 +1,6 @@
o Major bugfixes (denial of service):
o Major bugfixes (security, denial of service):
- Disable the dump_desc() function that we used to dump unparseable
information to disk. It was called incorrectly in several places,
in a way that could lead to excessive CPU usage.
Fixes bug 40286; bugfix on 0.2.2.1-alpha.
in a way that could lead to excessive CPU usage. Fixes bug 40286;
bugfix on 0.2.2.1-alpha. This bug is also tracked as
TROVE-2021-001 and CVE-2021-28089.