From 61114a2e69875eb31e9299913aa26f1627332383 Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Thu, 19 Jul 2018 06:35:55 +0800 Subject: add CVE ID to security issue (#4360) --- CHANGELOG.rst | 1 + 1 file changed, 1 insertion(+) (limited to 'CHANGELOG.rst') diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 41026519..dc5ec83c 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -18,6 +18,7 @@ Changelog allowed tag truncation by default which can allow tag forgery in some cases. The method now enforces the ``min_tag_length`` provided to the :class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` constructor. + *CVE-2018-10903* * Added support for Python 3.7. * Added :meth:`~cryptography.fernet.Fernet.extract_timestamp` to get the authenticated timestamp of a :doc:`Fernet ` token. -- cgit v1.2.3