Add CVE ID found on tracker.d.o for the sector and cluster size issue.

[sven/fuse-exfat.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 6c0b8c2ef62825577b74fedff909e94afde7802c..84c19adee4fb2b2ba94e8c122b4fd728a1ea32b8 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+fuse-exfat (1.1.0-2+deb8u1) jessie; urgency=medium
+
+  * Add the fix for https://github.com/relan/exfat/issues/5 found
+    and reported by The Fuzzing Project. Check sector and cluster size.
+    CVE-2015-8026
+  * Add the fix for https://github.com/relan/exfat/issues/6 found
+    and reported by The Fuzzing Project. Detect infinite loop. 
+
+ -- Sven Hoexter <hoexter@debian.org>  Fri, 06 Nov 2015 08:08:13 +0100
+
 fuse-exfat (1.1.0-2) unstable; urgency=low
 
   * Remove debian/watch - recent changes at Google code required
@@ -5,8 +15,11 @@ fuse-exfat (1.1.0-2) unstable; urgency=low
   * Extent debian/copyright up to 2014.
   * Update debian/copyright license statement - with 1.1.0 upstream
     relicensed from GPLv3 to GPLv2 or later.
+  * Update link in debian/copyright to the download location.
+  * Add "-D_GNU_SOURCE" unconditionally to the list of CCFLAGS, needed
+    to build on kfreebsd.
 
- -- Sven Hoexter <hoexter@debian.org>  Tue, 26 Aug 2014 08:32:52 +0200
+ -- Sven Hoexter <hoexter@debian.org>  Mon, 01 Sep 2014 09:38:38 +0200
 
 fuse-exfat (1.1.0-1) unstable; urgency=low