This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
[PATCH] Add NEWS entry for CVE-2020-10029 (bug 25487)
- From: Aurelien Jarno <aurelien at aurel32 dot net>
- To: libc-alpha at sourceware dot org
- Cc: Guido Vranken <guidovranken at gmail dot com>, Florian Weimer <fweimer at redhat dot com>, Joseph Myers <joseph at codesourcery dot com>, Aurelien Jarno <aurelien at aurel32 dot net>
- Date: Wed, 4 Mar 2020 22:36:05 +0100
- Subject: [PATCH] Add NEWS entry for CVE-2020-10029 (bug 25487)
---
NEWS | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
>From what I understand, part of the NEWS file is filled automatically
just before releases, but it's not the case for the security related
changes. In any case we need to provide one when backporting the patch
to other branches, so here is a proposal below.
diff --git a/NEWS b/NEWS
index 77631ca7071..4623984d36d 100644
--- a/NEWS
+++ b/NEWS
@@ -21,7 +21,9 @@ Changes to build and runtime requirements:
Security related changes:
- [Add security related changes here]
+ CVE-2020-10029: The sinl function on x86 targets suffered from stack
+ corruption when it was passed a pseudo-zero argument. Reported by
+ Guido Vranken.
The following bugs are resolved with this release:
--
2.24.1