Add CVEs for Privoxy 3.0.24

[privoxy.git] / doc / webserver / announce.txt

diff --git a/doc/webserver/announce.txt b/doc/webserver/announce.txt
index 523b1f3..8af09f0 100644 (file)
--- a/doc/webserver/announce.txt
+++ b/doc/webserver/announce.txt
@@ -3,17 +3,17 @@
 
 Privoxy 3.0.24 stable contains a couple of new features but is
 mainly a bug-fix release. Two of the fixed bugs are security issues
-(CVE requests pending) and may be used to remotely trigger crashes
-on platforms that carefully check memory accesses (most don't).
+and may be used to remotely trigger crashes on platforms that
+carefully check memory accesses (most don't).
 
 --------------------------------------------------------------------
 ChangeLog for Privoxy
 --------------------------------------------------------------------
 - Security fixes (denial of service):
   - Prevent invalid reads in case of corrupt chunk-encoded content.
-    Bug discovered with afl-fuzz and AddressSanitizer.
+    CVE-2016-1982. Bug discovered with afl-fuzz and AddressSanitizer.
   - Remove empty Host headers in client requests.
-    Previously they would result in invalid reads.
+    Previously they would result in invalid reads. CVE-2016-1983.
     Bug discovered with afl-fuzz and AddressSanitizer.
 
 - Bug fixes: