diff options
Diffstat (limited to 'changelogs/fragments/dont-template-cli-passwords.yml')
| -rw-r--r-- | changelogs/fragments/dont-template-cli-passwords.yml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changelogs/fragments/dont-template-cli-passwords.yml b/changelogs/fragments/dont-template-cli-passwords.yml new file mode 100644 index 0000000000..ddaccc07af --- /dev/null +++ b/changelogs/fragments/dont-template-cli-passwords.yml @@ -0,0 +1,6 @@ +bugfixes: +- > + **security issue** - Convert CLI provided passwords to text initially, to + prevent unsafe context being lost when converting from bytes->text during + post processing of PlayContext. This prevents CLI provided passwords from + being incorrectly templated (CVE-2019-14856) |