summaryrefslogtreecommitdiffhomepage
path: root/sites
diff options
context:
space:
mode:
authorJeff Forcier <jeff@bitprophet.org>2014-02-14 11:54:43 -0800
committerJeff Forcier <jeff@bitprophet.org>2014-02-14 11:54:43 -0800
commita24ca77636b48f80a4cc93f07e2bb951b4de9ab7 (patch)
tree223295179fee82cf1e069914ee649f9809ca4da0 /sites
parent3fcde4e7f419b57859d73bea86ce4c041912b2d3 (diff)
parent0965eaa65d194244b594f7098eb5192a2bbf8484 (diff)
Merge branch '1.12'
Diffstat (limited to 'sites')
-rw-r--r--sites/www/changelog.rst4
1 files changed, 4 insertions, 0 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index 89db0597..fa15c0ec 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -2,6 +2,10 @@
Changelog
=========
+* :bug:`-` Use constant-time hash comparison operations where possible, to
+ protect against `timing-based attacks
+ <http://codahale.com/a-lesson-in-timing-attacks/>`_. Thanks to Alex Gaynor
+ for the patch.
* :release:`1.12.2 <2014-02-14>`
* :release:`1.11.4 <2014-02-14>`
* :release:`1.10.6 <2014-02-14>`