From 291f1e668bb0d749a95d0359cfbe00fd5b1e557c Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Fri, 23 Jul 2021 13:57:22 -0400 Subject: Changelog closes #1882, closes #1883 --- sites/www/changelog.rst | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'sites/www/changelog.rst') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index b83a83df..d06d6ffb 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,11 @@ Changelog ========= +- :bug:`1882` Newer server-side key exchange algorithms not intended to use + SHA1 (``diffie-hellman-group14-sha256``, ``diffie-hellman-group16-sha512``) + were incorrectly using SHA1 after all, due to a bug causing them to ignore + the ``hash_algo`` class attribute. This has been corrected. Big thanks to + Benno Rice for catch & patch. - :release:`2.5.1 <2019-06-23>` - :release:`2.4.3 <2019-06-23>` - :bug:`1306` (via :issue:`1400`) Fix Ed25519 key handling so certain key -- cgit v1.2.3