about summary refs log tree commit diff
path: root/NEWS
diff options
context:
space:
mode:
authorSiddhesh Poyarekar <siddhesh@sourceware.org>2020-12-07 22:29:18 +0530
committerSiddhesh Poyarekar <siddhesh@sourceware.org>2020-12-08 20:04:35 +0530
commit38a9e93cb1c58e3c899d638480e6d6e42af8e6fc (patch)
tree3526dff9022fa49c05c680b599f59890f07100fa /NEWS
parent228edd356f03bf62dcf2b1335f25d43c602ee68d (diff)
downloadglibc-38a9e93cb1c58e3c899d638480e6d6e42af8e6fc.tar.gz
glibc-38a9e93cb1c58e3c899d638480e6d6e42af8e6fc.tar.xz
glibc-38a9e93cb1c58e3c899d638480e6d6e42af8e6fc.zip
Add NEWS entry for CVE-2020-29562 (BZ #26923)
BZ #26923 now has a CVE entry, so add a NEWS entry for it.
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index aa7bbf033b..21d2f14995 100644
--- a/NEWS
+++ b/NEWS
@@ -66,6 +66,9 @@ Security related changes:
   invoked with input containing redundant shift sequences in the IBM1364,
   IBM1371, IBM1388, IBM1390, or IBM1399 character sets.
 
+  CVE-2020-29562: An assertion failure has been fixed in the iconv function
+  when invoked with UCS4 input containing an invalid character.
+
 The following bugs are resolved with this release:
 
   [The release manager will add the list generated by