Commit 01b5a161221d12af3c40a575c84e4aa1c20a15a8

Patrick Steinhardt 2018-03-08T16:23:15

CHANGELOG: udpate for v0.26.2

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e67497e..9f12016 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,13 @@
+v0.26.2
+-------
+
+This is a security release fixing memory handling issues when reading crafted
+repository index files. The issues allow for possible denial of service due to
+allocation of large memory and out-of-bound reads.
+
+As the index is never transferred via the network, exploitation requires an
+attacker to have access to the local repository.
+
 v0.26.1
 ---------