summaryrefslogtreecommitdiffhomepage
path: root/sites/www
diff options
context:
space:
mode:
authorJeff Forcier <jeff@bitprophet.org>2018-10-08 10:03:21 -0700
committerJeff Forcier <jeff@bitprophet.org>2018-10-08 10:03:21 -0700
commitb65bb4e36d2f0551947b1f93284f9a9141287e1d (patch)
tree30640fffa9937b3ab670a90a92fc43da97f1a941 /sites/www
parentc2fe70eb72b7a265f8363344e06247aebe95e0c1 (diff)
parent8ccc98c0e894300a8f88f20aacfb986342fbc538 (diff)
Merge branch '2.1' into 2.2
Diffstat (limited to 'sites/www')
-rw-r--r--sites/www/changelog.rst2
1 files changed, 1 insertions, 1 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index 9d83bf0c..b01e596d 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -10,7 +10,7 @@ Changelog
behavior probably didn't cause any outright errors, but it doesn't seem to
conform to the RFCs and could cause (non-infinite) feedback loops in some
scenarios (usually those involving Paramiko on both ends).
-- :bug:`1283` Fix exploit (CVE pending) in Paramiko's server mode (**not**
+- :bug:`1283` Fix exploit (CVE-2018-1000805) in Paramiko's server mode (**not**
client mode) where hostile clients could trick the server into thinking they
were authenticated without actually submitting valid authentication.