summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorJeff Forcier <jeff@bitprophet.org>2018-10-08 10:03:21 -0700
committerJeff Forcier <jeff@bitprophet.org>2018-10-08 10:03:21 -0700
commitbcd6b16173dab3bf670ae04876f38aaea0cc2dee (patch)
tree0c0b4e32b6bb07cbe6e1800c5e9fd5e925281723
parent329aaf67b0d5391684dc0d32d76112a8d9dabae5 (diff)
parentfc83badb37db09bb875195ccd44203d8aa3de50b (diff)
Merge branch '2.3' into 2.4
-rw-r--r--sites/www/changelog.rst2
1 files changed, 1 insertions, 1 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index 5c9843e8..ba755aee 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -12,7 +12,7 @@ Changelog
behavior probably didn't cause any outright errors, but it doesn't seem to
conform to the RFCs and could cause (non-infinite) feedback loops in some
scenarios (usually those involving Paramiko on both ends).
-- :bug:`1283` Fix exploit (CVE pending) in Paramiko's server mode (**not**
+- :bug:`1283` Fix exploit (CVE-2018-1000805) in Paramiko's server mode (**not**
client mode) where hostile clients could trick the server into thinking they
were authenticated without actually submitting valid authentication.