Comment 6 for bug 278978

Stefan, thanks for your patch, here are my bits:
- The indentation in the changelog is quite odd, please fix it according to the examples on the wiki
- You don't put the information about the CVE (in the bug which has it), please add it
- There is a ":" missing after debian/patches/03_fix_buffer_overflow

P.S: yes i know is pretty nitpicky, but that's how we work in the security team.