aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAlex Gaynor <alex.gaynor@gmail.com>2016-11-06 01:27:20 -0400
committerPaul Kehrer <paul.l.kehrer@gmail.com>2016-11-06 13:27:20 +0800
commitb94cacf2ae6e75e4007a79709bbf5360435b512d (patch)
tree158e62679551d35843d6af14fce9d61936db5369
parent0b26ab263aa201ba8d6bb8136cfd6f75257f5273 (diff)
downloadcryptography-b94cacf2ae6e75e4007a79709bbf5360435b512d.tar.gz
cryptography-b94cacf2ae6e75e4007a79709bbf5360435b512d.tar.bz2
cryptography-b94cacf2ae6e75e4007a79709bbf5360435b512d.zip
Forward port the 1.5.3 changelog (#3218)
-rw-r--r--CHANGELOG.rst7
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index c9fa42cb..1b81312f 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -27,6 +27,13 @@ Changelog
* Added support for encoding ``IPv4Network`` and ``IPv6Network`` in X.509
certificates for use with :class:`~cryptography.x509.NameConstraints`.
+1.5.3 - 2016-11-05
+~~~~~~~~~~~~~~~~~~
+
+* **SECURITY ISSUE**: Fixed a bug where ``HKDF`` would return an empty
+ byte-string if used with a ``length`` less than ``algorithm.digest_size``.
+ Credit to **Markus Döring** for reporting the issue.
+
1.5.2 - 2016-09-26
~~~~~~~~~~~~~~~~~~