1 files changed, 3 insertions, 0 deletions
diff --git a/changelog b/changelog
index 5048ad7d..069b2d84 100644
--- a/changelog
+++ b/changelog
@@ -37,6 +37,9 @@ pam (0.99.7.1-2) UNRELEASED; urgency=low
     - bump the shlibs
     - the 'test.c' example no longer exists
     - add /usr/share/locale to libpam-runtime.
+    - CVE-2005-2977: only uid=0 is allowed to invoke unix_chkpwd with an
+      arbitrary username, and then only when SELinux is active.
+      Closes: #336344.
   * Mark myself as primary maintainer as previously discussed with Sam, and
     add Roger as an uploader.
   * Refactor to use quilt.