Add fixes for CVE-2008-1614

[manu/suphp.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 7e1a720..c6265db 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+suphp (0.6.2-2+etch0) stable-security; urgency=high
+
+  * The following security issue is addressed with this update:
+    - CVE-2008-1614: allows local users to gain privileges via a race
+    condition in symlinks handling
+
+ -- Emmanuel Lacour <elacour@home-dn.net>  Fri, 11 Apr 2008 11:31:28 +0200
+
 suphp (0.6.2-2) unstable; urgency=low
 
   * remove apache 1.x package (closes: #429079)