Debian release 0.1.4-3

[libyaml.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 51804abdf3aeb8e3bce2401327d02236bc86f5cc..9d59a4a0332e13e7757bf982d5583017bd773ab3 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,11 +1,18 @@
-libyaml (0.1.4-2) UNRELEASED; urgency=low
+libyaml (0.1.4-3) unstable; urgency=high
+
+  * Fix CVE-2013-6393: heap-based buffer overflow when parsing YAML tags.
+    (Closes: #737076)
+
+ -- Anders Kaseorg <andersk@mit.edu>  Wed, 29 Jan 2014 20:11:48 -0500
+
+libyaml (0.1.4-2) unstable; urgency=low
 
   * Remove extra libyaml-0.so symlink from libyaml-dev.
   * Bump Debhelper compat level to 9.
   * Support multiarch.  (Closes: #653748) (LP: #905630)
   * Use 3.0 (quilt) source format.
 
- -- Anders Kaseorg <andersk@mit.edu>  Fri, 23 Dec 2011 20:35:55 -0500
+ -- Anders Kaseorg <andersk@mit.edu>  Fri, 30 Dec 2011 17:14:52 -0500
 
 libyaml (0.1.4-1) unstable; urgency=low