From 6e4c2d0d50d41623ef3a6b9363d1b787c28eb32a Mon Sep 17 00:00:00 2001
From: Chris McDonough <chrism@plope.com>
Date: Sun, 16 Oct 2011 19:58:48 -0400
Subject: garden

---
 CHANGES.txt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGES.txt b/CHANGES.txt
index 631ae1246..7440794ee 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -24,6 +24,9 @@ Bug Fixes
   inappropriately when the ``tokens`` argument to remember was used.  See 
   https://github.com/Pylons/pyramid/pull/314.
 
+- The AuthTktAuthenticationPolicy did not use a timing-attack-aware string
+  comparator.  See https://github.com/Pylons/pyramid/pull/320 for more info.
+
 Backwards Incompatibilities
 ---------------------------
 
-- 
cgit v1.2.3