Note CVE-2015-3294

diff --git a/CHANGELOG b/CHANGELOG
index 0619788e9cefeb7d609242b88c44c0894ad2e515..7f2b1e002e9e50ca1891612c5960d2ba5fda5c91 100644 (file)
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -84,6 +84,9 @@ version 2.73
 
            Fix crash on receipt of certain malformed DNS requests.
            Thanks to Nick Sampanis for spotting the problem.
+           Note that this is could allow the dnsmasq process's
+           memory to be read by an attacker under certain
+           circumstances, so it has a CVE, CVE-2015-3294 
 
             Fix crash in authoritative DNS code, if a .arpa zone 
            is declared as authoritative, and then a PTR query which