diff options
| author | Jeff Forcier <jeff@bitprophet.org> | 2017-06-06 12:34:38 -0700 |
|---|---|---|
| committer | Jeff Forcier <jeff@bitprophet.org> | 2017-06-06 12:34:38 -0700 |
| commit | 5a4405c87ef7f2d4d428efafc1ac57626c71df60 (patch) | |
| tree | 17980a7ae3e30eaf08729dc604bc6340ac821aec /sites | |
| parent | c87ece67f6663892836f57da0e97cd2cfc1faf2a (diff) | |
| parent | 39d167298094eb04237db430cc6bc3cb7d988e3f (diff) | |
Merge branch '2.1'
Diffstat (limited to 'sites')
| -rw-r--r-- | sites/www/changelog.rst | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index 0db12afe..78e1920a 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,10 @@ Changelog ========= +* :bug:`667` The RC4/arcfour family of ciphers has been broken since version + 2.0; but since the algorithm is now known to be completely insecure, we are + opting to remove support outright instead of fixing it. Thanks to Alex Gaynor + for catch & patch. * :feature:`857` Allow `SSHClient.set_missing_host_key_policy <paramiko.client.SSHClient.set_missing_host_key_policy>` to accept policy classes _or_ instances, instead of only instances, thus fixing a |