From 71aa429b029fdb6f9e65d44050388b51eca460d6 Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Tue, 6 Feb 2018 09:19:03 +0100 Subject: Record CVE-2018-6551 in NEWS and ChangeLog [BZ #22774] --- NEWS | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 06ae43d3f0..3629944946 100644 --- a/NEWS +++ b/NEWS @@ -291,6 +291,10 @@ Security related changes: an object size near the value of SIZE_MAX, would return a pointer to a buffer which is too small, instead of NULL. Reported by Jakub Wilk. + CVE-2018-6551: The malloc function, when called with an object size near + the value of SIZE_MAX, would return a pointer to a buffer which is too + small, instead of NULL. + The following bugs are resolved with this release: [866] glob: glob should match dangling symlinks -- cgit v1.2.3