changes file for TROVE-2018-005

2018-05-22 12:21:00 -04:00 · 2018-05-22 12:21:00 -04:00 · e5541996b7
parent 3283619acf
commit e5541996b7
1 changed files with 6 additions and 0 deletions
--- a/changes/TROVE-2018-005
+++ b/changes/TROVE-2018-005
@ -0,0 +1,6 @@
+  o Major bugfixes (security, directory authority, denial-of-service):
+    - Fix a bug that could have allowed an attacker to force a
+      directory authority to use up all its RAM by passing it a
+      maliciously crafted protocol versions string. Fixes bug 25517;
+      bugfix on 0.2.9.4-alpha.  This issue is also tracked as
+      TROVE-2018-005.