added notes about CVEs that were fixed

diff --git a/CHANGES b/CHANGES
index 9eea2ed062f5d4e05c7b52f514a9b24205a86a7a..b06b547abece9f331eaae0b719ca58bdb38a4689 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,10 +1,12 @@
 Thursday Nov. 20, 2014 [email protected]
   Summary for 5.0.0 tcpdump release
        DCCP: update Packet Types with RFC4340/IANA names
+        fixes for CVE-2015-0261: IPv6 mobility header check issue
+        fixes for CVE-2015-XXXX: kday packets
 
 Friday Nov. 12, 2014 [email protected]
   Summary for 4.7.0 tcpdump release
-        changes to hex printing of CDP packets 
+        changes to hex printing of CDP packets
        Fix PPI printing
        Radius: update Packet Type Codes and Attribute Types with RFC/IANA names
        Add a routine to print "text protocols", and add FTP/HTTP/SMTP/RTSP support.
@@ -14,6 +16,7 @@ Friday Nov. 12, 2014 [email protected]
        new bounds checks for a number of protocols
        split netflow 1,6, and 6 dissector up.
        added geneve dissector
+        CVE-2014-9140 PPP dissector fixed.
 
 Tuesday  Sep.  2, 2014 [email protected]
   Summary for 4.6.2 tcpdump release