From: Nikolaus Rath <Nikolaus@rath.org>
Date: Wed, 18 Jul 2018 19:35:46 +0000 (+0100)
Subject: Added ChangeLog entry for hardening patches.
X-Git-Tag: fuse-3.2.5~1
X-Git-Url: http://git.maquefel.me/?a=commitdiff_plain;h=237147e6e09bec52145e9a25a46aff36ac4459da;p=qemu-gpiodev%2Flibfuse.git

Added ChangeLog entry for hardening patches.
---

diff --git a/ChangeLog.rst b/ChangeLog.rst
index 9ba0263..10ab5ad 100644
--- a/ChangeLog.rst
+++ b/ChangeLog.rst
@@ -1,6 +1,10 @@
-libfuse 3.2.5
-==========================
+Unreleased Changes
+==================
 
+* The fusermount binary has been hardened in several ways to reduce
+  potential attack surface. Most importantly, mountpoints and mount
+  options must now match a hard-coded whitelist. It is expected that
+  this whitelist covers all regular use-cases.
 * Added a test of `seekdir` to test_syscalls.
 * Fixed `readdir` bug when non-zero offsets are given to filler and the
   filesystem client, after reading a whole directory, re-reads it from a