summaryrefslogtreecommitdiffhomepage
path: root/CHANGES
diff options
context:
space:
mode:
authorMatt Johnston <matt@ucc.asn.au>2016-03-10 20:57:47 +0800
committerMatt Johnston <matt@ucc.asn.au>2016-03-10 20:57:47 +0800
commit73bc3a9853a2235968f77a13a3899db23629a4e5 (patch)
tree309f5fb6e875241e45881aaacafcecef01e9dd7b /CHANGES
parentde70b02c2f357d6a2fd51b2de3bec2e0f345d5b1 (diff)
parent9cb325ee6fb8b164d0bef0b5a44073496abc41b2 (diff)
merge 2016.72
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES5
1 files changed, 5 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 64e8312..a6cd0b6 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+2016.72 - 9 March 2016
+
+- Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions,
+ found by github.com/tintinweb. Thanks for Damien Miller for a patch.
+
2015.71 - 3 December 2015
- Fix "bad buf_incrpos" when data is transferred, broke in 2015.69