commit 07cc2fcacf81b32b2e06aa918df51756525240c0
author Sebastian Pipping <sebastian@pipping.org> Sat Jun 04 17:20:18 2016 +0200
committer Sebastian Pipping <sebastian@pipping.org> Sat Jun 04 17:21:04 2016 +0200
tree 57510de939f478c8979d46de06ae07fcf2dc65cb
parent 56e62f1634f55e3f10e6e7cbad93c8f3792fae0e

Mention recently assigned CVEs CVE-2012-6702 and CVE-2016-5300 in plaintext change log

expat/Changes

diff --git a/expat/Changes b/expat/Changes
index b3e6854..e8a59ab 100644
--- a/expat/Changes
+++ b/expat/Changes
@@ -3,10 +3,11 @@
             #537  CVE-2016-0718 -- fix crash on malformed input
                   CVE-2016-4472 -- improve insufficient fix to CVE-2015-1283 /
                                    CVE-2015-2716 introduced with Expat 2.1.1
-            #499  Use more entropy for hash initialization
-            #519  Resolve troublesome internal call to srand
-                    that was introduced with Expat 2.1.0
-                    when addressing CVE-2012-0876 (issue #496)
+            #499  CVE-2016-5300 -- Use more entropy for hash initialization
+                                   than the original fix to CVE-2012-0876
+            #519  CVE-2012-6702 -- Resolve troublesome internal call to srand
+                                   that was introduced with Expat 2.1.0
+                                   when addressing CVE-2012-0876 (issue #496)
 
         Bug fixes:
                   Fix uninitialized reads of size 1