[PATCH] Add NEWS entry for CVE-2020-1751 (bug 25423)
Aurelien Jarno
aurelien@aurel32.net
Tue Mar 24 15:06:01 GMT 2020
---
NEWS | 3 +++
1 file changed, 3 insertions(+)
diff --git a/NEWS b/NEWS
index 68a408a3bc6..0b1a6b43683 100644
--- a/NEWS
+++ b/NEWS
@@ -25,6 +25,9 @@ Security related changes:
corruption when they were passed a pseudo-zero argument. Reported by Guido
Vranken / ForAllSecure Mayhem.
+ CVE-2020-1751: When unwinding through a signal frame the backtrace function
+ on PowerPC didn't check array bounds when storing the frame address.
+
CVE-2020-1752: A use-after-free vulnerability in the glob function when
expanding ~user has been fixed.
--
2.24.1
More information about the Libc-alpha
mailing list