From: Nick Mathewson <nickm@torproject.org>
Date: Tue, 22 May 2018 16:21:00 +0000 (-0400)
Subject: changes file for TROVE-2018-005
X-Git-Tag: tor-0.3.3.6~12^2~1^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d2bc019053058b09b5552d327106d9fbe0acad56;p=thirdparty%2Ftor.git

changes file for TROVE-2018-005
---

diff --git a/changes/TROVE-2018-005 b/changes/TROVE-2018-005
new file mode 100644
index 0000000000..769c653f43
--- /dev/null
+++ b/changes/TROVE-2018-005
@@ -0,0 +1,6 @@
+  o Major bugfixes (security, directory authority, denial-of-service):
+    - Fix a bug that could have allowed an attacker to force a
+      directory authority to use up all its RAM by passing it a
+      maliciously crafted protocol versions string. Fixes bug 25517;
+      bugfix on 0.2.9.4-alpha.  This issue is also tracked as
+      TROVE-2018-005.