From 73f079f5a4bbba7f3048dadbe05b24242206745e Mon Sep 17 00:00:00 2001 From: Jeff Forcier Date: Sat, 16 Dec 2023 13:07:50 -0500 Subject: Fill in CVE number for Terrapin attack --- sites/www/changelog.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'sites/www') diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index a709152e..44d3d445 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,9 +2,9 @@ Changelog ========= -- :bug:`-` Address `CVE xxx `_ (aka the "Terrapin - Attack", a vulnerability found in the SSH protocol re: treatment of packet - sequence numbers) as follows: +- :bug:`-` Address `CVE 2023-48795`_ (aka the + "Terrapin Attack", a vulnerability found in the SSH protocol re: treatment of + packet sequence numbers) as follows: - The vulnerability only impacts encrypt-then-MAC digest algorithms in tandem with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko -- cgit v1.2.3