1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 5c27f5c332..70798f6ced 100644
--- a/NEWS
+++ b/NEWS
@@ -258,6 +258,10 @@ Security related changes:
   succeeds without returning an absolute path due to unexpected behaviour
   of the Linux kernel getcwd syscall.  Reported by halfdog.
 
+  CVE-2018-6485: The posix_memalign and memalign functions, when called with
+  an object size near the value of SIZE_MAX, would return a pointer to a
+  buffer which is too small, instead of NULL.  Reported by Jakub Wilk.
+
 The following bugs are resolved with this release:
 
   [The release manager will add the list generated by