diff options
| author | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2022-09-06 09:31:50 -0400 |
|---|---|---|
| committer | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2022-09-06 09:31:50 -0400 |
| commit | 76fe56020e7ef354685b2284580ac1630c078a2b (patch) | |
| tree | 9c710a31c2299f15bf8f64dc80b28d1453a1900a /NEWS | |
| parent | dbb75513f5cf9285c77c9e55777c5c35b653f890 (diff) | |
| download | glibc-76fe56020e7ef354685b2284580ac1630c078a2b.tar.gz glibc-76fe56020e7ef354685b2284580ac1630c078a2b.tar.xz glibc-76fe56020e7ef354685b2284580ac1630c078a2b.zip | |
Add NEWS entry for CVE-2022-39046
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/NEWS b/NEWS index f9bef48a8f..ef274d1a42 100644 --- a/NEWS +++ b/NEWS @@ -21,7 +21,10 @@ Changes to build and runtime requirements: Security related changes: - [Add security related changes here] + CVE-2022-39046: When the syslog function is passed a crafted input + string larger than 1024 bytes, it reads uninitialized memory from the + heap and prints it to the target log file, potentially revealing a + portion of the contents of the heap. The following bugs are resolved with this release: |