From f559a822cea8cdb042b9643477737f6615388b29 Mon Sep 17 00:00:00 2001 From: pulpbot Date: Thu, 15 Feb 2024 03:01:14 +0000 Subject: [PATCH] Update Changelog [noissue] --- CHANGES.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/CHANGES.rst b/CHANGES.rst index 4807aa1c8..51863efde 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -70,6 +70,21 @@ Bugfixes ---- +2.16.5 (2024-02-14) +=================== + +Deprecations and Removals +------------------------- + +- Removed the optional "kid" parameter stored inside the signatures' payload generated during + docker manifest v2 schema 1 conversion. This change also removes the ``ecdsa`` dependency, + which is vulnerable to Minevra timing attacks. + `#1485 `__ + + +---- + + 2.16.4 (2024-01-24) ===================