X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=debian%2Fchangelog;h=ec0dd53a3826ee4de95dd4f90be70d05ac67d78d;hb=b58a74aaf298ea465cf76211367e94cf9b800156;hp=5fb3ce249c68a57ab4459793036fcd9494bd7ea0;hpb=3126bd4e19183845e6d602feb69c15804b2b69f4;p=deb_pkgs%2Fspamass-milter.git

diff --git a/debian/changelog b/debian/changelog
index 5fb3ce2..ec0dd53 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-spamass-milter (0.3.1-9) UNRELEASED; urgency=low
+spamass-milter (0.3.1-9) unstable; urgency=high
 
   * Call restorecon on the socket and pidfile directories to make SELinux
     happy (thanks to Russel Coker) (closes: #518552)
@@ -9,6 +9,8 @@ spamass-milter (0.3.1-9) UNRELEASED; urgency=low
     - handle them more sanely in the init script
     - document how to deal with them in README.Debian and
       /etc/spamass-milter/default
+  * Use new popenenv function instead of open; fixes remote code exploit
+    as the spamass-milter user when run using -x. (closes: #573228)
 
  -- Don Armstrong <don@debian.org>  Wed, 11 Mar 2009 03:59:39 -0700