X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=doc%2Fsource%2Fchangelog.sgml;h=49dae71e569cba225302de11ab9bc44f8d252e55;hp=8b2f14645ada578d73082a362d2a7194815ce129;hb=8183b8e71365338bb8c7b7324528f0dc0b0b0395;hpb=cf1ee7766e41b39265baaa49c5f981da86744a92

diff --git a/doc/source/changelog.sgml b/doc/source/changelog.sgml
index 8b2f1464..49dae71e 100644
--- a/doc/source/changelog.sgml
+++ b/doc/source/changelog.sgml
@@ -3,7 +3,7 @@
 
  Purpose     :  Entity included in other project documents.
 
- $Id: changelog.sgml,v 2.14 2016/01/17 14:31:33 fabiankeil Exp $
+ $Id: changelog.sgml,v 2.15 2016/01/21 15:57:16 fabiankeil Exp $
 
  Copyright (C) 2013 Privoxy Developers http://www.privoxy.org/
  See LICENSE.
@@ -22,9 +22,9 @@
 
 <para>
   <application>Privoxy 3.0.24</application> stable contains a couple
-  of new features but is mainly a bug-fix release. Two of the fixed bugs
-  are security issues (CVE requests pending) and may be used to remotely
-  trigger crashes on platforms that carefully check memory accesses (most don't).
+  of new features but is mainly a bug-fix release. Two of the fixed
+  bugs are security issues and may be used to remotely trigger crashes
+  on platforms that carefully check memory accesses (most don't).
 </para>
 
 <!--
@@ -41,13 +41,13 @@
     <listitem>
      <para>
       Prevent invalid reads in case of corrupt chunk-encoded content.
-      Bug discovered with afl-fuzz and AddressSanitizer.
+      CVE-2016-1982. Bug discovered with afl-fuzz and AddressSanitizer.
      </para>
     </listitem>
     <listitem>
      <para>
       Remove empty Host headers in client requests.
-      Previously they would result in invalid reads.
+      Previously they would result in invalid reads. CVE-2016-1983.
       Bug discovered with afl-fuzz and AddressSanitizer.
      </para>
      </listitem>