1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 1e12173..b3fd3cc 100644
--- a/NEWS
+++ b/NEWS
@@ -44,6 +44,10 @@ Security related changes:
   resulting in a stack overflow.  getaddrinfo now uses a heap allocation
   instead.  Reported by Michael Petlan.  (CVE-2016-3706)
 
+* The glob function suffered from a stack-based buffer overflow when it was
+  called with the GLOB_ALTDIRFUNC flag and encountered a long file name.
+  Reported by Alexander Cherepanov.  (CVE-2016-1234)
+
 The following bugs are resolved with this release:
 
   [The release manager will add the list generated by