summaryrefslogtreecommitdiffhomepage
path: root/sites/www/changelog.rst
diff options
context:
space:
mode:
authorJeff Forcier <jeff@bitprophet.org>2014-02-14 11:53:59 -0800
committerJeff Forcier <jeff@bitprophet.org>2014-02-14 11:53:59 -0800
commit4e9af2f7ca91613ea4c60ca22b96adc2247b1ba2 (patch)
tree7867d5d252825df16830e4aed09ad79ab2f089ec /sites/www/changelog.rst
parent4a5f007c029cfabac35161d8147d616c79009bd8 (diff)
parent30518280f1356465f0acfdb4816843b61303a633 (diff)
Merge branch '1.10' into 1.11
Conflicts: sites/www/changelog.rst
Diffstat (limited to 'sites/www/changelog.rst')
-rw-r--r--sites/www/changelog.rst4
1 files changed, 4 insertions, 0 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index efd6610b..9d41cb22 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -2,6 +2,10 @@
Changelog
=========
+* :bug:`-` Use constant-time hash comparison operations where possible, to
+ protect against `timing-based attacks
+ <http://codahale.com/a-lesson-in-timing-attacks/>`_. Thanks to Alex Gaynor
+ for the patch.
* :release:`1.11.4 <2014-02-14>`
* :release:`1.10.6 <2014-02-14>`
* :bug:`252` (`Fabric #1020 <https://github.com/fabric/fabric/issues/1020>`_)