From ce8d0fc3c66efc4ce4c30397b5c036bc96824f5f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sa=C3=BAl=20Ibarra=20Corretg=C3=A9?= Date: Mon, 6 Apr 2020 13:35:45 +0200 Subject: [PATCH] doc: updated CHANGELOG --- CHANGELOG.md | 20 +++++++++++--------- 1 file changed, 11 insertions(+), 9 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ffadb81..f6248c5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,16 @@ ## stable-4384 +**Important security note:** Previous releases included default passwords for +system accounts, and users who didn't change them are at risk of getting +the authentication system circumvented by an attacker using a system account +with the default password. Please update and use the provided script +(instructions on the README) to generate a strong password for each system +account. + +Thanks joernchen for the security report. + +
+ Based on stable release 4384. * 1ffd472 security: add script to generate strong passwords @@ -22,15 +33,6 @@ Based on stable release 4384. * ebb4536 doc: update CHANGELOG * 06c3a83 doc: fix references to running behind NAT in the README -**Important security note: ** Previous releases included default passwords for -system accounts, and users who didn't change them are at risk of getting -the authentication system circumvented by an attacker using a system account -with the default password. Please update and use the provided script -(instructions on the README) to generate a strong password for each system -account. - -Thanks joernchen for the security report. - ## stable-4101-2 Based on stable release 4101.