summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorFlorian Weimer <fweimer@redhat.com>2018-02-01 15:00:44 +0100
committerFlorian Weimer <fweimer@redhat.com>2018-02-01 17:16:53 +0100
commit4590634fd65162568b9f52fb4beb60aa25da37f2 (patch)
treea4865bb205135ab854efa2ab3dfa821798677765 /NEWS
parent673e230560ac874deed6993d8b9ebaf82e73c408 (diff)
Record CVE-2018-6485 in ChangeLog and NEWS [BZ #22343]
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 5c27f5c332..70798f6ced 100644
--- a/NEWS
+++ b/NEWS
@@ -258,6 +258,10 @@ Security related changes:
succeeds without returning an absolute path due to unexpected behaviour
of the Linux kernel getcwd syscall. Reported by halfdog.
+ CVE-2018-6485: The posix_memalign and memalign functions, when called with
+ an object size near the value of SIZE_MAX, would return a pointer to a
+ buffer which is too small, instead of NULL. Reported by Jakub Wilk.
+
The following bugs are resolved with this release:
[The release manager will add the list generated by