Added ChangeLog entry for hardening patches.

diff --git a/ChangeLog.rst b/ChangeLog.rst
index 9ba0263a49b1badf266b6c7a5fa87f41ca5405eb..10ab5ad091a6febc764f29db3f33d4c8b2d36f0a 100644 (file)
--- a/ChangeLog.rst
+++ b/ChangeLog.rst
@@ -1,6 +1,10 @@
-libfuse 3.2.5
-==========================
+Unreleased Changes
+==================
 
+* The fusermount binary has been hardened in several ways to reduce
+  potential attack surface. Most importantly, mountpoints and mount
+  options must now match a hard-coded whitelist. It is expected that
+  this whitelist covers all regular use-cases.
 * Added a test of `seekdir` to test_syscalls.
 * Fixed `readdir` bug when non-zero offsets are given to filler and the
   filesystem client, after reading a whole directory, re-reads it from a