diff options
| author | Andreas Schwab <schwab@linux-m68k.org> | 2021-05-27 12:49:47 +0200 |
|---|---|---|
| committer | Arjun Shankar <arjun@redhat.com> | 2021-06-10 14:28:06 +0200 |
| commit | ff75390ef59823193351ae77584c397c503b7b58 (patch) | |
| tree | 74a2e13b632c60b248b2702c6856defe07420447 /NEWS | |
| parent | 1799ac8eabe87acd7b1ef7c3a483171489563482 (diff) | |
| download | glibc-ff75390ef59823193351ae77584c397c503b7b58.tar.gz glibc-ff75390ef59823193351ae77584c397c503b7b58.tar.xz glibc-ff75390ef59823193351ae77584c397c503b7b58.zip | |
Use __pthread_attr_copy in mq_notify (bug 27896)
Make a deep copy of the pthread attribute object to remove a potential use-after-free issue. (cherry picked from commit 42d359350510506b87101cf77202fefcbfc790cb)
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS index f278041512..2afe250ccf 100644 --- a/NEWS +++ b/NEWS @@ -208,6 +208,10 @@ Security related changes: invoked with input containing redundant shift sequences in the IBM1364, IBM1371, IBM1388, IBM1390, or IBM1399 character sets. + CVE-2021-33574: The mq_notify function has a potential use-after-free + issue when using a notification type of SIGEV_THREAD and a thread + attribute with a non-default affinity mask. + The following bugs are resolved with this release: [9809] localedata: ckb_IQ: new Kurdish Sorani locale |