[PATCH] Add NEWS entry for CVE-2020-10029 (bug 25487)

Aurelien Jarno aurelien@aurel32.net
Wed Mar 4 21:37:00 GMT 2020


---
 NEWS | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

>From what I understand, part of the NEWS file is filled automatically
just before releases, but it's not the case for the security related
changes. In any case we need to provide one when backporting the patch
to other branches, so here is a proposal below.

diff --git a/NEWS b/NEWS
index 77631ca7071..4623984d36d 100644
--- a/NEWS
+++ b/NEWS
@@ -21,7 +21,9 @@ Changes to build and runtime requirements:
 
 Security related changes:
 
-  [Add security related changes here]
+  CVE-2020-10029: The sinl function on x86 targets suffered from stack
+  corruption when it was passed a pseudo-zero argument.  Reported by
+  Guido Vranken.
 
 The following bugs are resolved with this release:
 
-- 
2.24.1



More information about the Libc-alpha mailing list