diff options
| author | Allan McRae <allan@archlinux.org> | 2014-12-18 11:01:43 +1000 |
|---|---|---|
| committer | Adhemerval Zanella <azanella@linux.vnet.ibm.com> | 2015-01-16 07:11:00 -0500 |
| commit | 93f407ae2e4dedf66fe93c7e0512445c8bca898a (patch) | |
| tree | 6210eaba5e065c87d65aca1c83ff18667d2fca2d | |
| parent | 612b11da56d9cd77a7125e4de984127ee7b52de6 (diff) | |
| download | glibc-93f407ae2e4dedf66fe93c7e0512445c8bca898a.tar.gz glibc-93f407ae2e4dedf66fe93c7e0512445c8bca898a.tar.xz glibc-93f407ae2e4dedf66fe93c7e0512445c8bca898a.zip | |
Label CVE-2014-9402 in NEWS
| -rw-r--r-- | NEWS | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/NEWS b/NEWS index e4c424414f..d65c0e25d6 100644 --- a/NEWS +++ b/NEWS @@ -18,8 +18,9 @@ Version 2.18.1 * CVE-2012-3406 printf-style functions could run into a stack overflow when processing format strings with a large number of format specifiers. -* The nss_dns implementation of getnetbyname could run into an infinite loop - if the DNS response contained a PTR record of an unexpected format. +* CVE-2014-9402 The nss_dns implementation of getnetbyname could run into an + infinite loop if the DNS response contained a PTR record of an unexpected + format. * CVE-2014-4043 The posix_spawn_file_actions_addopen implementation did not copy the path argument. This allowed programs to cause posix_spawn to |