From ac9370d3e0e4a645f893028c9dee0ece20c4f0d3 Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Wed, 27 Feb 2013 15:32:19 -0800 Subject: Changelog re #116 --- NEWS | 2 ++ 1 file changed, 2 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 0fe99f5a..10b2bf54 100644 --- a/NEWS +++ b/NEWS @@ -15,6 +15,8 @@ Releases v1.10.0 (DD MM YYYY) -------------------- +* #116: Limit `Message.get_bytes` to an upper bound of 1MB to protect against + potential DoS vectors. Thanks to `@mvschaik` for catch & patch. * #115: Add convenience `get_pty` kwarg to `Client.exec_command` so users not manually controlling a channel object can still toggle PTY creation. Thanks to Michael van der Kolff for the patch. -- cgit v1.2.3