summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorJeff Forcier <jeff@bitprophet.org>2018-10-08 10:03:21 -0700
committerJeff Forcier <jeff@bitprophet.org>2018-10-08 10:03:21 -0700
commitfc83badb37db09bb875195ccd44203d8aa3de50b (patch)
treedb55c591e80748210c95c26cbac80eea2c6f3783
parent6939e953d6c23061f49cde8432b6bc827cadef3f (diff)
parentb65bb4e36d2f0551947b1f93284f9a9141287e1d (diff)
Merge branch '2.2' into 2.3
-rw-r--r--sites/www/changelog.rst2
1 files changed, 1 insertions, 1 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index 7d473b24..281f1d08 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -11,7 +11,7 @@ Changelog
behavior probably didn't cause any outright errors, but it doesn't seem to
conform to the RFCs and could cause (non-infinite) feedback loops in some
scenarios (usually those involving Paramiko on both ends).
-- :bug:`1283` Fix exploit (CVE pending) in Paramiko's server mode (**not**
+- :bug:`1283` Fix exploit (CVE-2018-1000805) in Paramiko's server mode (**not**
client mode) where hostile clients could trick the server into thinking they
were authenticated without actually submitting valid authentication.