From 122ecf10d787cd9ae295dc7b029bfa37440fa9b8 Mon Sep 17 00:00:00 2001
From: Michael Rash <mbr@cipherdyne.org>
Date: Sun, 7 Dec 2014 17:00:10 -0500
Subject: [PATCH] minor ChangeLog update

---
 ChangeLog | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 3a263de7..a7a09fbf 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -13,7 +13,9 @@ fwknop-2.6.5 (11//2014):
       by the test/afl/fuzzing-wrappers/server-digest-cache.sh wrapper.
       Previous to this fix, fwknopd could be made to crash through a malicious
       digest cache file (normally in /var/run/fwknop/digest.cache) upon
-      initial import.
+      initial import. This crash can only be triggered by a local user on the
+      system where fwknopd is deployed and who has write permissions to the
+      digest.cache file - usually only root has these permissions.
 
 fwknop-2.6.4 (11/16/2014):
     - [server] Added a UDP server mode so that SPA packets can be acquired via