about summary refs log tree commit diff
diff options
context:
space:
mode:
authorWill Newton <will.newton@linaro.org>2013-09-13 09:26:02 +0100
committerWill Newton <will.newton@linaro.org>2013-09-13 09:26:02 +0100
commitba0d798c17cafecd97b2cadf8b5e19800b967f82 (patch)
tree7e65286e3dad8b97a97faf9ffcdb4b7b7a7f4c89
parentae7080d30c68cfa0c81ce3422dca948f64a94f50 (diff)
downloadglibc-ba0d798c17cafecd97b2cadf8b5e19800b967f82.tar.gz
glibc-ba0d798c17cafecd97b2cadf8b5e19800b967f82.tar.xz
glibc-ba0d798c17cafecd97b2cadf8b5e19800b967f82.zip
Add CVE-2013-4332 to NEWS.
-rw-r--r--NEWS5
1 files changed, 5 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index b1d4d3db63..af58b752ea 100644
--- a/NEWS
+++ b/NEWS
@@ -17,6 +17,11 @@ Version 2.19
   to the d_name member of struct dirent, or omit the terminating NUL
   character.  (Bugzilla #14699).
 
+* CVE-2013-4332 The pvalloc, valloc, memalign, posix_memalign and
+  aligned_alloc functions could allocate too few bytes or corrupt the
+  heap when passed very large allocation size values (Bugzilla #15855,
+  #15856, #15857).
+
 * New locales: quz_PE.
 
 * Add country_car field to LC_ADDRESS, many locales.