Update changelog

Cito · Sep 24, 2017 · b3db8f2 · b3db8f2
1 parent 6033d82
commit b3db8f2
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/CHANGES.txt b/CHANGES.txt
@@ -1,3 +1,12 @@
+0.3.2
+-----
+
+- The login value in the search filter is now properly escaped in the
+  authenticate() method. Although the bind test in the second stage of the
+  method ensures the proper password is passed, this could be exploited
+  to login with a different user name like 'foo*' instead of 'foobar'.
+  Thanks to Patrick Valsecchi for the bug report.
+
 0.3.1
 -----