From: Nathan Cutler Date: Thu, 21 May 2020 11:57:56 +0000 (+0200) Subject: PendingReleaseNotes: drop mention of CVE fix X-Git-Tag: v16.1.0~2250^2~1 X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=838c3ce5bf4a09e98e3c775b82fe0cc1378dff3a;p=ceph.git PendingReleaseNotes: drop mention of CVE fix CVEs fixed before the first stable Pacific release need not be mentioned explicitly in the release notes. Signed-off-by: Nathan Cutler --- diff --git a/PendingReleaseNotes b/PendingReleaseNotes index 75838a22cb97..bfc978c8469e 100644 --- a/PendingReleaseNotes +++ b/PendingReleaseNotes @@ -1,8 +1,6 @@ >=16.0.0 -------- -* CVE-2020-10736: Fixes an authorization bypass in monitor and manager daemons - * Monitors now have config option ``mon_allow_pool_size_one``, which is disabled by default. However, if enabled, user now have to pass the ``--yes-i-really-mean-it`` flag to ``osd pool set size 1``, if they are really