TROVE 2023 004 - Implement the fix and release C-tor

This ticket tracks TROVE-2023-004 that is a high severity issue.

Confidential discussions going on here: https://gitlab.torproject.org/tpo/core/tor/-/issues/40874

changed milestone to %Tor: 0.4.7.x-post-stable

added Security label

assigned to @dgoulet

CC @nickm @mikeperry @beth

Before we close this we should do these steps:

• Get a CVE Id.
• Finish the entry for this ticket on the TROVE page
• Make sure we've announced the release everywhere appropriate.
• Make the underlying confidential issue public.
• Make sure we haven't forgotten any of the the steps in the security policy. (If they aren't right for us, we should change them.)

We'll follow up on these items on Monday.

closed