about summary refs log tree commit diff
path: root/NEWS
diff options
context:
space:
mode:
authorFlorian Weimer <fweimer@redhat.com>2018-02-06 09:19:03 +0100
committerFlorian Weimer <fweimer@redhat.com>2018-02-06 09:19:13 +0100
commit71aa429b029fdb6f9e65d44050388b51eca460d6 (patch)
treed74fef81ec7f455c0d695a6f56ac2e685bae4bc1 /NEWS
parent26c07172cde74617ca7214c93cdcfa75321e6b2b (diff)
downloadglibc-71aa429b029fdb6f9e65d44050388b51eca460d6.tar.gz
glibc-71aa429b029fdb6f9e65d44050388b51eca460d6.tar.xz
glibc-71aa429b029fdb6f9e65d44050388b51eca460d6.zip
Record CVE-2018-6551 in NEWS and ChangeLog [BZ #22774]
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 06ae43d3f0..3629944946 100644
--- a/NEWS
+++ b/NEWS
@@ -291,6 +291,10 @@ Security related changes:
   an object size near the value of SIZE_MAX, would return a pointer to a
   buffer which is too small, instead of NULL.  Reported by Jakub Wilk.
 
+  CVE-2018-6551: The malloc function, when called with an object size near
+  the value of SIZE_MAX, would return a pointer to a buffer which is too
+  small, instead of NULL.
+
 The following bugs are resolved with this release:
 
   [866] glob: glob should match dangling symlinks