doc: More changelog updates for v11.3

diff --git a/Changelog b/Changelog
index 9e325fd73f8e49870d9535d67f882fef5ef02971..6b8cabcb1afef6ce72c02c1e90722f4f807f617e 100644 (file)
--- a/Changelog
+++ b/Changelog
@@ -3,6 +3,18 @@ releases are sorted from youngest to oldest.
 
 version 11.3:
 
+- utvideodec: Handle slice_height being zero (CVE-2014-9604)
+- adxdec: set avctx->channels in adx_read_header
+- rmenc: limit packet size
+- webp: validate the distance prefix code
+- rv10: check size of s->mb_width * s->mb_height
+- eamad: check for out of bounds read (CID/1257500)
+- mdec: check for out of bounds read (CID/1257501)
+- configure: Properly fail when libcdio/cdparanoia is not found
+- tiff: Check that there is no aliasing in pixel format selection (CVE-2014-8544)
+- aic: Fix decoding files with odd dimensions
+- vorbis: Check the vlc value in setup_classifs
+- arm: Suppress tags about used cpu arch and extensions
 - prores: Extend the padding check to 16bit
 - icecast: Do not use chunked post, allows feeding to icecast properly
 - img2dec: correctly use the parsed value from -start_number