mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-24 12:23:32 +01:00
10 lines
404 B
Plaintext
10 lines
404 B
Plaintext
|
o Security fixes:
|
||
|
|
|
||
|
|
- Reject CREATE and CREATE_FAST cells on outgoing OR connections
|
||
|
|
from a bridge to a relay. Previously, we would accept them and
|
||
|
|
handle them normally, thereby allowing a malicious relay to
|
||
|
|
easily distinguish bridges which connect to it from clients.
|
||
|
|
Fixes CVE-2011-2769. Bugfix on 0.2.0.3-alpha, when bridges were
|
||
|
|
implemented; found by frosty_un.
|
||
|
|
|