1 files changed, 6 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index ebebb40..d7c016c 100644
--- a/NEWS
+++ b/NEWS
@@ -81,6 +81,12 @@ Version 2.22.1
   to the allocation of too much memory.  (This is not a security bug per se,
   it is mentioned here only because of the CVE assignment.)  Reported by
   Qualys.
+
+* CVE-2009-5064: The ldd script would sometimes run the program under
+  examination directly, without preventing code execution through the
+  dynamic linker.  (The glibc project disputes that this is a security
+  vulnerability; only trusted binaries must be examined using the ldd
+  script.)
 
 Version 2.22