Jelmer Vernooij 10 år sedan
förälder
incheckning
8ea5b86a96
1 ändrade filer med 4 tillägg och 0 borttagningar
  1. 4 0
      debian/changelog

+ 4 - 0
debian/changelog

@@ -2,6 +2,10 @@ dulwich (0.10.1-1) UNRELEASED; urgency=medium
 
 
   * New upstream release.
   * New upstream release.
    + Drop 02_unpure_pypy: applied upstream.
    + Drop 02_unpure_pypy: applied upstream.
+   + Fixes CVE-2015-0838: buffer overflow in C implementation of pack
+     apply_delta(). Closes: #780958
+   + Fixes CVE-2014-9706: does not prevent to write files in commits with
+     invalid paths to working tree. Closes: #780989
   * Update Vcs-Git, Vcs-Browser and Maintainer fields to reflect the
   * Update Vcs-Git, Vcs-Browser and Maintainer fields to reflect the
     dulwich package is now maintained by the Debian Python Modules
     dulwich package is now maintained by the Debian Python Modules
     packaging team.
     packaging team.