Use new popenenv function instead of open; fixes remote code exploit

[deb_pkgs/spamass-milter.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 5fb3ce249c68a57ab4459793036fcd9494bd7ea0..dd6c3f263ac1050b7661af3f7d6477524db281d8 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -9,6 +9,8 @@ spamass-milter (0.3.1-9) UNRELEASED; urgency=low
     - handle them more sanely in the init script
     - document how to deal with them in README.Debian and
       /etc/spamass-milter/default
+  * Use new popenenv function instead of open; fixes remote code exploit
+    as the spamass-milter user when run using -x. (closes: #573228)
 
  -- Don Armstrong <don@debian.org>  Wed, 11 Mar 2009 03:59:39 -0700