PT-2026-121735
تاريخ النشر
2026-10-12
·
تاريخ التحديث
2026-10-12
الوصف من
الدرجة
N/A
غير متوفرلا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.
This update fixes security issues:
- Only accept a CONFLUX LINK cell on a plain OR circuit, and refuse to turn a (pending) conflux leg into an introduction or rendezvous point. Previously a client could link a rendezvous-point circuit into a conflux set and then, with a forged sequence number in the LINK cell, make the relay tear the set down from inside the rendezvous splice, triggering a fatal assertion in assert circuit ok(). Also reject a LINK/LINKED cell whose last seqno recv is above what we ever sent on the set.
- Correctly copy the MiddleOnly flag from routerstatuses to node objects. Without this fix, the MiddleOnly flag was ignored on non-authorities, and clients could use MiddleOnly relays for inappropriate roles in onion service circuits. Tracked as TROVE-2026-067.
- Treat a router descriptor as expired if any of its family certificates has expired. Previously, we incorrectly ignored the expiration time of the family certificate. Tracked as TROVE-2026-062.
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾