diff options
| author | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2022-09-06 09:31:50 -0400 |
|---|---|---|
| committer | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2022-09-06 09:36:54 -0400 |
| commit | b46412fb17e8bfc6c9e1f144bbcf833320c80f8a (patch) | |
| tree | 6401bf46f03df80d03b4b41ad98648063f824f5c /NEWS | |
| parent | 645d94808aaa90fb1b20a25ff70bb50d9eb1d55b (diff) | |
| download | glibc-b46412fb17e8bfc6c9e1f144bbcf833320c80f8a.zip glibc-b46412fb17e8bfc6c9e1f144bbcf833320c80f8a.tar.gz glibc-b46412fb17e8bfc6c9e1f144bbcf833320c80f8a.tar.bz2 | |
Add NEWS entry for CVE-2022-39046
(cherry picked from commit 76fe56020e7ef354685b2284580ac1630c078a2b)
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -7,6 +7,13 @@ using `glibc' in the "product" field. Version 2.36.1 +Security related changes: + + CVE-2022-39046: When the syslog function is passed a crafted input + string larger than 1024 bytes, it reads uninitialized memory from the + heap and prints it to the target log file, potentially revealing a + portion of the contents of the heap. + The following bugs are resolved with this release: [28846] CMSG_NXTHDR may trigger -Wstrict-overflow warning |