[or-cvs] r10910: (tor/trunk)

[nickm@xxxxxxxx]

Author: nickm
Date: 2007-07-23 00:17:52 -0400 (Mon, 23 Jul 2007)
New Revision: 10910

Modified:
   tor/trunk/
   tor/trunk/ChangeLog
Log:



Property changes on: tor/trunk
___________________________________________________________________
 svk:merge ticket from /tor/trunk [r13685] on c95137ef-5f19-0410-b913-86e773d04f59

Modified: tor/trunk/ChangeLog
===================================================================
--- tor/trunk/ChangeLog	2007-07-23 01:34:46 UTC (rev 10909)
+++ tor/trunk/ChangeLog	2007-07-23 04:17:52 UTC (rev 10910)
@@ -131,7 +131,17 @@
     - Backport a couple of memory leak fixes.
     - Backport miscellaneous cosmetic bugfixes.
 
+  o Security fixes (BSD natd support):
+    - Fix a possible buffer overrun when using BSD natd support. Bug found
+      by croup.
 
+  o Security fixes (circuits):
+    - Keep streamids from different exits on a circuit separate. This
+      bug may have allowed other routers on a given circuit to inject
+      cells into streams. Reported by lodger; fixes bug 446. [Bugfix
+      on 0.1.2.x]
+
+
 Changes in version 0.2.0.2-alpha - 2007-06-02
   o Major bugfixes on 0.2.0.1-alpha:
     - Fix an assertion failure related to servers without extra-info digests.